It involves hands-on execution of tasks, tools, and protocols under pressure to test operational readiness, decision-making, and coordination in a controlled but immersive environment.
![]() |
Pre-reading for Participants Attending Module 4 of the CM-5000 Crisis Management Expert Implementer Course | ![]() |
Participants perform tangible tasks (e.g., evacuating a building, isolating IT systems, conducting mock press briefings).
Example: Security teams physically sweep a facility during an active shooter drill.
Runs in real-time (e.g., a 1-hour exercise simulates 1 hour of crisis response).
Includes unplanned injects (e.g., "A fire spreads to the backup server room") to test adaptability.
Engages relevant teams (e.g., IT, PR, Operations) and sometimes external partners (e.g., emergency responders, vendors).
Validates real systems (e.g., emergency alarms, mass notification tools, backup generators).
Validate procedural execution: Can teams follow checklists under stress?
Test tool reliability: Do emergency systems function as intended?
Identify operational gaps: Are evacuation routes blocked? Is the equipment accessible?
Build muscle memory: Reinforce training through hands-on practice.
Feature | Live Exercise | Tabletop Exercise | Simulation (Partial/Full) |
---|---|---|---|
Action Level | Physical execution (doing) | Discussion-based (talking) | Mix of discussion + live actions |
Scope | Single incident or function | Broad strategy | Varies (focused or organisation-wide) |
Realism | High (mimics real crisis) | Low (theoretical) | Moderate to high |
Test IT and PR coordination during a ransomware attack.
IT teams physically disconnect infected servers from the network.
PR drafts and delivers a mock press statement within 30 minutes.
Executives role-play negotiations with "hackers" (facilitators).
T+0: Ransom note appears on all workstations.
T+20 mins: Fake social media posts claim customer data was leaked.
T+1 hour: Regulators demand a compliance report.
Response Time: How quickly were critical actions taken (e.g., isolating systems)?
Tool Effectiveness: Did mass notification systems reach all employees?
Human Behaviour: Did staff panic, or follow protocols?
High-risk scenarios requiring muscle memory (e.g., fire drills, active shooter response).
Testing new tools/procedures (e.g., launching a crisis communication app).
Preparing for audits or regulatory compliance (e.g., financial sector stress tests).
Types of Crisis Management Exercises | ||||
Design and Develop Crisis Management Exercises | ||||
To learn more about the course and schedule, click the buttons below for the CM-300 Crisis Management Implementer [CM-3] and the CM-5000 Crisis Management Expert Implementer [CM-5].
Please feel free to send us a note if you have any questions. |
||||