Resource Hub

Tabletop exercises sharpen crisis decision‑making by giving CRE leaders a safe environment to practice high‑pressure choices, clarify authority, and refine response protocols before a real incident hits. By rehearsing roles, communication, and coordination, these drills lead to faster containment, better decisions, and more confident leadership during actual crises.

Real-world cybersecurity assessments often uncover threats hiding in plain sight, from malware and default passwords to forgotten devices and exposed building systems. These true stories show how small oversights can create significant security risks across commercial real estate environments.

Tom Scott talks about AI in commercial real estate, commercial real estate leadership, and career pivots and optionality on this episode of the InCREdible Leaders podcast. In 35 years, Tom Scott has been a part of almost every technology shift the industry has been through: building cash flow models on VisiCalc before Argus existed, helping decide where the big consulting firms would put their offshore offices, running the team that abstracted 15,000 leases when Blackstone bought Equity Office, and working on machine learning for lease abstraction a decade before anyone called it AI.

Don Goldstein, founder of 5Q Cyber, joins InCREdible Leaders for one of our most personal conversations yet. His story starts with his father, a Greatest Generation soldier who landed on Omaha Beach, helped liberate a concentration camp, and spent the next 70 years helping people in need. That legacy shaped Don’s cybersecurity leadership today.

Effective tabletop exercises rely on realistic, well‑facilitated scenarios that mirror how cyber and physical incidents unfold in smart CRE environments, forcing teams to address IT, operations, safety, and communications together. By simulating high‑pressure situations without real risk, these exercises build muscle memory, expose coordination gaps, and prepare teams to respond confidently when a real disruption occurs.

Cybersecurity investments like SOC monitoring, awareness training, Red Team assessments, and incident response deliver far more than technology. For multifamily and CRE owners and operators, the real value is confidence that risks are being identified, validated, and addressed before they disrupt property operations, impact residents or tenants, or become costly business problems.