// Comparison

Cybersecurity Tabletop Exercises vs Cyberstructure: Which Should You Read?

Two cybersecurity books on Policy, compared honestly: who each is for, what each does best, and which to read first.

Intermediate

4/52024

From Planning to Execution

Robert Lelewski, John Hollenberger

Two veteran security consultants walk through planning, running, and following up on tabletop exercises, from technical incident-response drills to executive-level and cross-functional scenarios.

Intermediate

4/52018

Cyberstructure

L'Internet, un espace politique

Stéphane Bortzmeyer

An engineer's lucid account of how the Internet actually works — and why its technical architecture is a political space that shapes human rights — by a DNS specialist at AFNIC.

Read this if

Incident responders, security managers, and anyone tasked with improving an organization's readiness who needs to actually run a tabletop, not just read about why they matter. Includes ready-to-adapt scenarios, injects, and storyboards for technical, executive, and cross-functional exercises.

Technically curious readers, policy people and engineers who want to understand the link between Internet plumbing (DNS, routing, protocols) and politics: privacy, censorship, surveillance, freedom. Won the FIC Cyber Book Prize 2019.

Skip this if

Readers looking for incident-response technique itself (forensics, containment, eradication); this book is about rehearsing and testing a response plan, not executing one. Pair with Incident Response and Computer Forensics or Intelligence-Driven Incident Response for that side.

Readers after a security how-to or a pure tech manual. The book is about the politics embedded in infrastructure, not about attacking or defending systems.

Key takeaways

Splits cleanly into process (how to plan, facilitate, and evaluate an exercise) and content (ready-made scenarios across technical, executive, and cross-functional levels).
Facilitation technique gets real attention — keeping participants engaged is treated as a skill, not an afterthought.
Evaluation and follow-up are covered as seriously as the exercise itself, closing the loop that many tabletop efforts skip.

Rare book that explains Internet infrastructure precisely and draws out its political consequences without hand-waving on either side.
Bortzmeyer is a working DNS/networks engineer, so the technical descriptions are accurate, not journalistic approximations.
Reframes privacy and freedom as design choices baked into protocols — essential context for anyone in security or policy.

How they compare

Cybersecurity Tabletop Exercises and Cyberstructure are both rated 4/5 in our catalog. Pick by topic preference and reading style rather than by rating.

Both books target intermediate-level readers, so the choice is about topic, not difficulty.

Cybersecurity Tabletop Exercises and Cyberstructure both cover Policy, so reading them in sequence reinforces the same material from different angles.

Keep reading

Cybersecurity Tabletop Exercises

→ Alternatives to Cybersecurity Tabletop Exercises → What to read after Cybersecurity Tabletop Exercises