Run Tabletop Drills With Your Family for Better Estate Plann

The Best Practice Engineers Use That Almost No Family Does

In most engineering organizations, there's a practice called the tabletop exercise. It's a structured rehearsal of a disaster scenario, run without actually triggering any real systems. A facilitator describes a scenario — the primary database is offline, the CEO's account is compromised, the data center has lost power. The team walks through what they would do, in real time, with actual decisions and actual blockers, in a conference room or on a Zoom call. The exercise typically takes an hour. It surfaces gaps no amount of documentation review would catch.

The practice exists because the gap between having a runbook and knowing how to use a runbook is enormous. The runbook says "contact the on-call SRE." The tabletop reveals that nobody knows the on-call SRE's name on Sundays. The runbook says "failover to the secondary region." The tabletop reveals that the failover procedure was last tested two years ago and the credentials have since rotated.

Families, in the matter of inheritance and estate planning, are in roughly the same position as engineering teams without tabletop exercises. They might have documents. They might have a will. They might even have a digital estate plan. They almost never have walked through what they would actually do if the person responsible for it all suddenly couldn't act.

This post is a guide to running a real tabletop exercise for your family. The format is borrowed directly from incident response. The application is your own household. The result, the first time you do it, is usually a moderate amount of horror followed by a productive afternoon of fixing things.

The Setup

A tabletop exercise needs four ingredients:

A facilitator (you, on the first run).
A scenario (described below).
A participant list (your spouse, your adult children, your designated executor, your trusted technical friend).
A commitment to honesty about what you don't know.

The last one is the hardest. The exercise only works if people are willing to say "I have no idea" when they don't know something. The temptation is to bluff. Don't let people bluff.

Schedule 90 minutes. Set the expectation that this might be uncomfortable. Bring snacks.

Scenario One: "Dad Is In The ICU"

Start with the most common, lowest-stakes scenario. Read this aloud to the room:

It is a Tuesday morning at 9am. Dad had a stroke last night. He's in the ICU, currently stable but unable to communicate. The doctors say he could recover, or he could be like this for weeks, or he could decline. You don't know which way it'll go yet. Some bills are due Friday. The mortgage is on autopay but the credit card isn't. There's a work issue Dad was handling that someone keeps texting him about. The dog needs to be picked up from the kennel today. What do you do?

Now ask the room: who does what?

Watch for the following moments:

Someone needs to log into Dad's email to see what's pending. Does anyone know the password?
The credit card auto-pay isn't on. Does anyone know which account it pays from? Does anyone have access to that account?
The work issue. Who do you contact at the office? What's the boss's number?
The dog. What kennel? What's the access code?
The kids' school. Are they expecting Dad to pick them up Friday? Who needs to be told?

Document every gap. The exercise's value is in the list of "we don't know" answers.

Scenario Two: "Mom Has Been Missing For Three Days"

Escalate. The point of running tabletops is to find the failure modes for situations harder than the obvious ones.

Mom flew to a remote part of New Zealand for a hiking trip. She was supposed to check in on Monday. It's now Thursday and there's been no word. The hostel where she was staying says she checked out Sunday morning as planned. The local consulate is involved. There's no indication she's hurt, but also no indication of where she is. What do you do over the next 48 hours?

The issues this surfaces:

Travel insurance. Does anyone know if she has it? Where the policy is?
The deadman switch. Is one set up? What's its cadence? Has it been ticking?
The phone. Is it on Find My? Who has access to her iCloud?
The credit cards. Are there alerts on them that could show recent activity?
The credit card company. Can they tell you where the last transaction happened, given proper authorization?
Her work. Who is she missing meetings with? Who needs to be told?

This scenario is harder than the ICU scenario because there's no formal authority (no power of attorney, no death certificate, no clear legal framework). The family is improvising. The tabletop reveals how much improvising they can actually do.

Scenario Three: "You're At The Funeral Home"

The scenario most families plan for least.

Dad died yesterday. You're at the funeral home this morning making arrangements. Mom is there but is in shock. The funeral director needs a few things from you in the next hour: Dad's full legal name and Social Security number, his birth certificate, the cemetery plot information if he owns one, his obituary preferences, his veteran status if applicable. By tomorrow morning, the bank needs to be notified, the employer needs to be notified, the credit cards need to be notified. By Friday, decisions need to be made about Mom's access to the joint accounts. What do you have?

Issues:

The legal documents. Where are they? Who has the keys to the safe-deposit box?
The funeral preferences. Did anyone ever ask Dad? Is there a document?
The accounts list. Does anyone know everything Dad had? The retirement accounts, the brokerage, the savings?
The notifications. Who is the right contact at each institution?
Mom's access. Are the accounts joint? Is she the beneficiary? Will she have access?

This is the scenario where most families discover that they had no idea where to start. The tabletop turns the discovery into something they can fix while it's fixable.

How To Facilitate Well

A few tactical tips, lifted from professional incident-response tabletops:

Ask "and then what?" repeatedly. "I'd call the bank." And then what? "They'd ask for the account number." Do you have the account number? "I'd look in his desk." Where's his desk? This is how gaps surface.

Time-box the scenarios. Don't let them sprawl. Each scenario should be 20-30 minutes. The point is breadth, not depth.

Don't solve as you go. Write the gaps down, don't fix them in the moment. Otherwise the exercise turns into ad-hoc planning and you stop discovering new gaps.

Rotate facilitators. On subsequent runs, rotate who plays the facilitator and who plays the family. This catches gaps that depend on the perspective of the participant.

End with a list, not a feeling. The exercise's deliverable is a list of identified gaps, prioritized. Not "that was hard." Not "we need to do better." A literal list.

What To Do With The Output

After the exercise, you'll have a list of 10-30 specific gaps. Examples from real tabletops I've run:

"Nobody knows the password to the iPad that has the security camera app."
"The will is in a safe-deposit box but the bank requires both signatures to access it."
"Dad's mortgage lender's contact info isn't documented anywhere."
"The Apple Legacy Contact is set up but the access key isn't anywhere we can find."
"The funeral preference conversation has never happened."

For each item, agree on an owner and a deadline. The list should be measurable. "Sometime soon" doesn't count. "By the end of the month, [person] will [do thing]" does.

Review progress in 60 days. Run the tabletop again in a year. Run it again every year forever. The gaps drift. Your accounts change. Your family circumstances change. The exercise has to keep happening.

The Cultural Argument

Most families don't do this because it feels too much like the thing it's about. The conversation is uncomfortable in advance and clarifying after. The discomfort is the price of admission to a family that's actually prepared.

The alternative — not doing it — is a guarantee that the first time you actually face one of these scenarios, you'll face it with no preparation, no list, no rehearsed roles, and no idea where to start. The tabletop isn't morbid; it's the cheapest insurance available against a category of crisis you will, eventually, face.

Engineers have known this for decades. The same wisdom applies at home. Run the drill before you need it.

Killswitch is what fills in most of the gaps a tabletop will surface — credentials, account inventory, contact list, recovery keys — encrypted while you're alive, delivered to the right people when you can't act. Run the drill. Fix what you find. We'll hold what your family will need to find. Get started today