Tailored Cyber Crisis Exercise

Crisis Exercises

A full day in which your own crisis team faces an attack written around your organisation: your systems, your suppliers, your customers, your names. Not a generic scenario with your logo on it. You find out what your people actually do when it goes wrong — before an attacker does.

What is included

Intake session where we build the scenario on your real environment
Scenario written around your systems, suppliers and customers
A full day of exercise, facilitated on site by two of our people
Decision-making following BOBOC: forming a picture and a judgement, taking a decision, issuing an order and checking
Observation of roles, communication, escalation and decision-making
Immediate debrief with the team at the end of the day
Management report with a timeline: which decision fell when, by whom, and what happened to it
Six measurements you can repeat next year, so you can show growth instead of promising it
Evidence you can use for NIS 2 and ISO/IEC 27001
Follow-up conversation with the owner a few weeks later

Who it is for

For organisations that have a crisis plan and want to know whether it works.

Executive and crisis teams that have never rehearsed under pressure
Organisations in scope of NIS 2 meeting their exercise obligation
Companies with a new ISMS who want to put it to the test
Teams who want to know what to fix after a real incident

No technical background needed; the non-technical roles usually learn the most.

Outcome

Afterwards you know:

whether your crisis team reaches decisions under pressure, and how fast
whether roles are clear at the moment it counts
whether your crisis plan matches how the organisation actually works
where communication stalls: internally, to customers, to the regulator
which assumptions about your IT turn out not to hold
what to fix first, with the argument for the budget

The report is written to be taken straight to the board: a timeline of the day, six measurements with a clock on them, and per measurement what has to improve. At team level, never a grade next to a name. Repeat the exercise next year and the same six measurements sit beside it, so progress is visible rather than claimed.

Facilitated by people who have sat in real crisis rooms, not only in exercises.

Where the six measurements come from and why they measure what they do is in our practice paper Crisis in practice. Free to read and download on our site.

What happens in the room stays in the room. The report is yours.