Training

Crisis exercise

The real thing in a safe space: on site as a tabletop or online as an interactive simulation.

A crisis team meeting for the first time during a real incident loses the decisive first hours to questions of responsibility. In this exercise we play through a realistic scenario in your company – on site as a classic tabletop around the table, or online as an interactive simulation with injects in real time. The group decides under time pressure and with incomplete information, exactly as it would in a real emergency.

Request this course

At a glance

Level
Exercise
Duration
Half day or 1 day, 2 to 15 participants
Audience
Crisis team, management, IT leadership, information security officers, communications, data protection
Format
In-house – on site or remote
Language
German or English

Structure

This is how the course is built up. I agree the order and focus with you in advance, based on your audience and prior knowledge.

  1. Preparation & scenario alignment

    Selecting the scenario along your real risks, roles and exercise objectives – agreed in advance, surprising for the participants.

  2. Briefing & role clarification

    Ground rules, roles within the crisis team and the question of who decides, who informs and who documents.

  3. Running the exercise

    The scenario unfolds through injects – around the table on site or online in the simulation, with messages from the press, customers and authorities.

  4. Evaluation & report

    A structured team debriefing, a documented list of gaps and an exercise report as evidence.

Course content

  • A tailored scenario: ransomware, data breach, failure of a service provider or total IT outage
  • Two formats: an on-site tabletop or an interactive online simulation
  • Small groups of 2 to 15 participants – every role stays visible
  • Clarifying roles: who decides, who informs, who documents?
  • Situation assessment and decisions under time pressure and with information gaps
  • Injects from the press, customers, authorities and inside your own organisation
  • Internal and external crisis communication during the exercise
  • Reporting deadlines tested live: NIS2 and Art. 33 GDPR
  • A structured evaluation afterwards instead of a pat on the back

What you take away

  • A crisis team that has practised once, instead of debating responsibilities in a real emergency
  • A documented list of gaps and measures from the exercise
  • An exercise report that works as evidence for audits and certifications

More training courses

Advanced · 1 day including a tabletop exercise

Incident response basics

What happens in the first hours of a security incident – and who makes which decision.

Interested in “Crisis exercise”?

Tell me briefly about group size, prior knowledge and your preferred date – I will come back with a proposal including effort.

Request training