Salon B-12: the room where the CISO triggers the ransomware response protocol and the merch was pre-staged for the 48-hour crisis tabletop

Salon B-12 is the principal crisis room of corporates with operations in Mexico, the US, Canada, Europe and Asia that operate a Security Operations Center (SOC) and a cybersecurity incident response protocol per the NIST Cybersecurity Framework, ISO/IEC 27001, CIS Critical Security Controls and Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP): boardroom with 14-person oval table, seating for the crisis committee (CEO, COO, CFO, CISO, CHRO, CMO, CLO, Risk Director, Crisis Communications Director, IT Operations Director, Business Operations Director, Government Relations Director, External Legal Counsel, Public Relations Director), six 65-inch screens for real-time monitoring of corporate systems and threat intelligence feeds, encrypted videoconference for regional office connection, table microphone audio system with ceiling microphones, encrypted session recording for Article 30 LFPDPPP compliance, presentation system for incident technical and legal annexes, secure printing station for classified documentation, paper shredding system for sensitive documentation at crisis close, backup desktop rulers with 48-hour battery, 72-hour backup electrical generator, 48-hour drinking water supply, redundant HVAC system, adjacent rest room for crisis team recesses, crisis committee store with pre-staged merch. This is where quarterly cybersecurity drills run (ransomware drills, phishing drills, data breach drills, social engineering attack drills, supply chain compromise drills, critical infrastructure attack drills), real crisis tabletops when a cybersecurity incident is detected (typically ransomware, data exfiltration, credential compromise, managed IT services provider compromise, distributed denial-of-service attack), post-mortem sessions after a real incident, crisis committee training sessions, coordination sessions with authorities (National Guard, Mexico City Cyber Police, Secretariat of Citizen Security, Secretariat of National Defense), coordination sessions with regulators (CNBV when applicable to the financial sector, CONDUSEF, UIF, Bank of Mexico). What separates Salon B-12 from a generic boardroom is the business continuity chain: the crisis committee merch must be pre-staged in the Salon B-12 store the day before the drill or real incident, must include comfort items for 24 to 48-hour crisis sessions (blankets, travel pillows, portable chargers, first aid kits, healthy snacks, bottled water), must include physical security items for committee members (ID badges, store keys, secure laptop keys) and must comply with the sensitive documentation destruction protocol at crisis close.

Request quote See merch packages

Merch packages for Salon B-12

Crisis committee member kit

Production of 14 to 20 pieces for crisis committee members (CEO, COO, CFO, CISO, CHRO, CMO, CLO, Risk Director, Crisis Communications Director, IT Operations Director, Business Operations Director, Government Relations Director, External Legal Counsel, Public Relations Director). Executive backpack with corporate isotype and the legend "Cybersecurity Crisis Committee", contents: secure laptop with full disk encryption (BitLocker for Windows, FileVault for macOS) preloaded with the classified incident documentation (response playbooks, IT runbooks, crisis communications templates), 20,000 mAh portable charger with USB-C, USB-A and Lightning cables, thermal emergency blanket, inflatable travel pillow, 48-hour first aid kit, healthy snacks for 24 hours (granola bars, nuts, dehydrated fruit), bottled water for 24 hours (3 x 500 ml bottles), photo ID badge, numbered keychain with Salon B-12 store keys, 32 GB encrypted USB with updated response playbooks, crisis committee contact list card. Personalised delivery to the committee member with CISO signature and Salon B-12 store chain of custody.

SOC and response team merch

Merch for SOC analysts, incident response engineers, external cybersecurity consultants (Mandiant, CrowdStrike, Microsoft DART, IBM X-Force, Kaspersky ICS CERT) and external cybersecurity-specialised legal counsel. Production of 20 to 60 pieces: polo shirt with corporate isotype and "SOC" or "CSIRT" embroidery, hooded sweatshirt with corporate isotype, tactical-style backpack with corporate isotype, energising snacks for 24-hour shifts (coffee, energy drinks, protein bars), bottled water, 10,000 mAh portable charger, 32 GB encrypted USB with response playbooks, photo ID badge. Delivery to SOC personnel at the corporate Security Operations Center.

Drill staff merch

Uniforms for the corporate Cyber Defence team, the Cybersecurity Training team, external drill facilitators (cybersecurity consultancies, legal firms, public relations firms) and Salon B-12 protocol staff. Grey oxford or black suit for male staff, sheath dress or tailored set for female staff, white shirt, tie or bow tie in corporate colour, badge with corporate photo and hologram, smartwatch with synced drill agenda. Professional pressing, delivered to back-of-house 60 minutes before the drill.

Response team recognition

Production of 6 to 20 pieces for response team members (SOC analysts, response engineers, external consultants) who participated in the containment and remediation of a real cybersecurity incident. Wooden box with bas-relief corporate isotype and incident date engraving, brass plate with team member name and tenure dates, framed diploma with corporate CEO and CISO signatures, hand-bound book with the incident case study (anonymised when applicable), engraved professional cybersecurity tool with team member name, paperweight with corporate isotype, engraved plate with team member name and incident date, Parras wine or aged spirit for the fiscal year closing dinner. Delivery by the corporate CEO and CISO during the annual Cyber Defence team recognition dinner.

Salon B-12 logistics, access and chain of custody

Salon B-12 runs on restricted access per the corporate cybersecurity physical security protocol: biometric identification (fingerprint + facial recognition) with two-factor authentication, corporate credential, logbook signature with licence plate recognition, corporate security personnel escort at all times. For kits of crisis committee members and SOC personnel, merch is pre-staged in the Salon B-12 store the day before the drill or real incident, with chain of custody signed by the CISO and the Physical Security Director. For kits of external consultants arriving from outside Mexico City (typically the US, Canada, the UK, Europe and Asia), we handle international shipping via DHL Express or UPS with cargo insurance, recipient signature and encrypted email confirmation of delivery, 48 to 72 hours ahead of the drill so the kit arrives on time. Salon B-12's back-of-house has three high-security areas: the crisis committee store (where pre-staged merch sits with key held by the CISO and the Physical Security Director), the secure printing room (where classified incident documents are printed) and the paper shredding system (where sensitive documents are destroyed at crisis close).

For drills and crisis tabletops with external international consultant presence (typically the US, UK, Europe and Asia), we handle invoicing in USD, EUR, GBP or local currency at the Banco de Mexico FIX rate from the day before the shipment, with USMCA compliance when the kit crosses the border into the US or Canada, and with local invoicing and foreign exchange compliance when the kit crosses into Turkey, Russia, the UK, Europe or Asia. For crisis tabletops with authority presence (National Guard, Mexico City Cyber Police, Secretariat of Citizen Security, Secretariat of National Defense), we handle compliance with the corporate security protocol and the authority protocol when applicable. The merch chain of custody is documented with signature, timestamp, photo and biometric recognition at every checkpoint: crisis committee store entry, operations inspection, committee member signature upon receiving their kit, restocking during the crisis, sensitive documentation destruction at crisis close.

Salon B-12 confidentiality, compliance and restrictions

Salon B-12 enforces operating rules the merch must respect: no personal devices (phones, laptops, tablets) inside the crisis committee room — only the corporate secure laptops delivered in the committee kit are permitted, no merch with noise or distraction elements during the crisis, no backpacks or bags in the room (committee members use the crisis committee kit as their only belongings), no POP material carrying third-party logos, no outside food or beverages beyond corporate catering and not included in the crisis committee kit, no merch leaving Salon B-12 without written authorisation from the CISO and the Physical Security Director. For real crisis tabletops that contain classified incident information (attack type, entry vectors, affected systems, exfiltrated data, ransom amount in ransomware cases), we coordinate with the corporate legal directorate to ensure the merch clears the incident response protocol, the Article 30 LFPDPPP compliance protocol (notice to INAI within 72 hours of incident discovery), the US Cybersecurity Act Section 53 compliance protocol when applicable to the corporate with US operations, and the GDPR compliance protocol when applicable to the corporate with EU operations.

For SAT invoicing we issue CFDI 4.0 with the 16% IVA breakdown and support for deduction as Cyber Defence, Incident Response or Cybersecurity Compliance expense depending on how the merch is used. For corporates with IMMEX operations or US exposure, we handle complementary invoicing in USD with USMCA compliance when the committee kit crosses the border as part of the incident response material for external consultants resident abroad. For groups with operations in Turkey or Russia (through minority stakes or joint ventures), we handle complementary invoicing in TRY or RUB with compliance with local invoicing and foreign exchange regulations. Merch is delivered with carta porte 3.0 when interstate or international transit applies, with the foreign trade complement when applicable, and with the payment complement when the corporate pays in instalments.

Salon B-12 MOQ, pricing and reservations

Crisis committee member kit — from MXN 11,950 per piece before VAT at a 14-piece run. SOC and response team merch — from MXN 2,950 per piece before VAT at a 40-piece run. Drill staff merch — from MXN 2,450 per person before VAT at an 8-piece run. Response team recognition — from MXN 8,450 per piece before VAT at a 12-piece run. Pricing does not include the Salon B-12 rental or the fees of external cybersecurity consultants, which are quoted directly with the corporate CISO area depending on the drill or incident type, duration, technical setup (six monitoring screens, encrypted videoconference, encrypted session recording, secure printing station, paper shredding system, backup electrical generator) and additional services (catering, coffee break, audiovisual gear, rest room, internal press room, encrypted broadcast).

For drills on high-demand dates (drills coinciding with the cybersecurity external audit, drills coinciding with the board cybersecurity status presentation) we block the calendar 60 days ahead with a firm written commitment. For real crisis tabletops we handle merch pre-staging within 24 hours of incident detection, with express production under the emergency protocol. Express production under 14 days carries a +35% surcharge for the curation and dispatch. The reservation runs on an eighteen-point brief: drill date, type (ransomware/phishing/data breach/supply chain attack), crisis committee roles, pieces per package, corporate brand manual, corporate colour palette, incident response protocol, Article 30 LFPDPPP compliance protocol, US Cybersecurity Act Section 53 compliance protocol when applicable, GDPR compliance protocol when applicable, national and international freight logistics when applicable, international courier 48 to 72 hours ahead, SAT invoicing, USMCA compliance when the merch crosses the border, complementary TRY or RUB invoicing when applicable.

Salon B-12 frequently asked questions

Can you pre-stage the crisis committee merch from the day before the drill?

Yes — we deliver the crisis committee merch to the Salon B-12 store from the day before the drill or real incident, with chain of custody signed by the CISO and the Physical Security Director, with key held in the Salon B-12 safe. The chain of custody is documented with signature, timestamp, photo and biometric recognition at every checkpoint.

Can you handle the merch for cybersecurity drills that recur every quarter?

Yes — we run quarterly programming with the same brand manual, scaling the run size based on the drill type and invited crisis committee members. Coordination with the corporate CISO for the editorial curation of the crisis committee kit.

Can you invoice the merch as a cyber defence expense?

Yes — we issue CFDI 4.0 to SAT with the 16% IVA breakdown and support for deduction as Cyber Defence, Incident Response or Cybersecurity Compliance expense depending on how the merch is used. For corporates with IMMEX operations or US exposure, we handle complementary invoicing in USD with USMCA compliance.

Is Corp-Merch an official partner of Salon B-12?

No. Corp-Merch.MX is an independent studio for the curation, production and logistics of merch for cybersecurity drills, crisis tabletops and incident response exercises in Salon B-12 and other venues in Mexico City. Salon B-12 is referenced for sector description only.

Request a quote for Salon B-12 merch

Tell us the drill date, the type (ransomware/phishing/data breach/supply chain attack), the crisis committee roles, the pieces per package, the corporate brand manual, the corporate colour palette, the incident response protocol, the Article 30 LFPDPPP compliance protocol, the US Cybersecurity Act Section 53 compliance protocol when applicable, the GDPR compliance protocol when applicable, the national and international freight logistics when applicable, the international courier 48 to 72 hours ahead, the SAT invoicing, the USMCA compliance when the merch crosses the border and the complementary invoicing in TRY or RUB when applicable. We respond with a per-package quote, a curation proposal and a digital mockup within 24 to 48 business hours.

Corp-Merch.MX is an independent studio for the curation, production and logistics of merch for cybersecurity drills, crisis tabletops and incident response exercises in Salon B-12 and other venues in Mexico City. We are not a partner, sponsor or official supplier of Salon B-12 or the corporates or cybersecurity consultancies referenced on this page. The figures, venues and suppliers referenced are sector references and are described for descriptive purposes only.