Free guide · PDF · 10 pages

Crisis-ready in 90 minutes instead of two days.

Why cyber crisis exercises with AI avatars are more realistic and more affordable than classic tabletop exercises, and how to use them for NIS2, DORA and ISO 27001.

Cover of the guide “Crisis-ready in 90 minutes instead of two days”

Avatar portraits AI-generated.

Get the free guide

Right away as a PDF and additionally by email.

We will send the guide to this address. More in the privacy policy.

  • Free
  • No spam
  • GDPR-compliant
  • What NIS2, DORA and ISO 27001 require for training and exercises
  • A ransomware scenario minute by minute
  • Crisis readiness check for your crisis team
  • Made in Germany
  • Platform hosted in Germany
  • GDPR-compliant
  • Patent filed with the DPMA

What is inside

  1. 01p. 3

    The situation: damages, attack vectors and the Arup deepfake case

  2. 02p. 4

    Obligation and practice: NIS2, DORA and ISO 27001 at a glance

  3. 03p. 5

    Why AI avatars make the better exercise

  4. 04p. 6

    Outlook: attackers practise every day. Do you?

  5. 05p. 7

    How an exercise runs: ransomware scenario with injects

  6. 06p. 8

    A word from founder Justin Shabani

  7. 07p. 9

    Crisis readiness check: how well prepared is your team?

The situation in figures

€202bn
damage from cyber attacks in Germany in 2025

Source: Bitkom 2025

87%
of companies affected

Source: Bitkom 2025

60%
of data breaches involve the human element

Source: Verizon DBIR 2025

90 min
instead of two days per exercise

Vendor figure

Justin Shabani, founder of AI-THINK.
“AI does not replace people. It amplifies what people make possible.”
Justin Shabani, Managing Director & Founder of AI-THINK.

A look inside the PDF

This is how the guide is structured. You receive the full content as a PDF.

Page 3 of the guidePage 6 of the guidePage 8 of the guide Full version in the PDF

Who is the guide for?

  • CISO
  • Crisis team
  • Management
  • IT security
  • Business continuity
  • HR and communications

An emergency does not announce itself. Practise it beforehand.

Get the free guide

Frequently asked questions about the guide

  • Nothing. You receive it right away as a PDF and additionally by email.

  • No. The guide gives an overview with sources. Which obligations apply to you depends on your sector and size.

  • No. The exercise runs in the browser via email, phone call and video call.

  • Around 90 minutes. Scenarios can be repeated as often as you like.

  • The platform and the form data are stored on servers in Germany. Details in the privacy policy.

Would you like to experience an exercise live?

Book a live demo
AI-THINK.

AI-THINK. is a software company that develops AI solutions as unique as your business. With AI-VI. The AI with a human touch.

Made in Germany
GDPR compliant

GDPR compliance

Platform, documents and the AI processing of text sit on servers in Germany. By default, the avatar videos are generated by a provider in the USA from the approved answer texts, covered by EU Standard Contractual Clauses. In the Enterprise plan it can run at the customer. By default, the avatar videos are still generated by the provider in the USA in that case.

Mitglied im Startup-Verband

AI transparency

We work with AI avatars: the portraits of AI-VI on this website are AI-generated and labelled directly on the image. The photos of our team and the written text of the website are not. Blog posts are created with AI support and are reviewed by us, and we take responsibility for them. If you want AI to be traceable, you start with your own.

What exactly is AI-generated

© 2026 AI-THINK. UG (haftungsbeschränkt) | All rights reserved

AI-VI, your AI avatar

With your consent we load three Google services: product videos from YouTube, audience measurement with Google Analytics and ad measurement from Google Ads. Data is transferred to Google in the process. Without your consent none of it loads, and videos show a preview image served from our own server. The website works fully either way. You can decide service by service under Settings, and change it at any time. Privacy policy