A Cybersecurity Manager Has Scheduled Biannual Meetings with the IT

A cybersecurity manager has scheduled biannual meetings with the IT team and department leaders to discuss how they would respond to hypothetical cyberattacks. During these meetings, the manager presents a scenario and injects additional information throughout the session to replicate what might occur in a dynamic cybersecurity event involving the company, its facilities, its data, and its staff. Which of the following describes what the manager is doing?

A) Developing an incident response plan
B) Building a disaster recovery plan
C) Conducting a tabletop exercise
D) Running a simulation exercise