---
title: [OR] [P2] [S4] [ST] [TE] [C3] Types of Exercises (Integrated BCM & Crisis Management)
description: [OR] [P2] [S4] [ST] [C3] Types of Exercises (Integrated BCM & Crisis Management)
---

[eBook OR](https://blog.bcm-institute.org/ebook-or)

# [\[OR\] \[P2\] \[S4\] \[ST\] \[TE\] \[C3\] Types of Exercises (Integrated BCM & Crisis Management)](https://blog.bcm-institute.org/ebook-or/or-p2-s4-st-c3-types-of-exercises-integrated-bcm-crisis-management)

 Written by [Moh Heng Goh](https://blog.bcm-institute.org/ebook-or/author/moh-heng-goh) | Apr 22, 2026 4:19:11 AM

### Chapter 3

### **Types of Exercises (Integrated BCM & Crisis Management)**

#### **Introduction**

Exercises are the practical means by which organizations validate their **Business Continuity Management (BCM)** and **Crisis Management (CM)** capabilities. While plans and strategies provide the blueprint for resilience, it is through **structured exercises** that organisations determine whether those plans can be executed effectively under real-world conditions.

In an **Operational Resilience (OR)** context, exercises must go beyond isolated testing of recovery procedures or crisis communication. They must simulate **end-to-end disruption scenarios** that test:

- The organisation’s ability to recover operations (**BCM**)
- The effectiveness of leadership, escalation, and communication (**Crisis Management**)
- The continuity of **Critical Business Services (CBS)** within the impact tolerance

This chapter explores the different types of exercises, how they integrate BCM and Crisis Management requirements, and how organisations can design a **layered exercise programme** to progressively build resilience capability.

#### **Purpose of the Chapter**

This chapter aims to:

- Define the major types of exercises used in BCM and Crisis Management
- Explain how each type contributes to resilience validation
- Guide when and how to use each exercise type
- Demonstrate how to integrate exercises into a cohesive programme
- Align exercise types with operational resilience objectives

#### **Overview of Exercise Types**

Exercises can be categorised based on their **complexity, scope, and objectives**. Each type serves a distinct purpose and contributes to a **progressive maturity model**.

##### **Exercise Continuum**

Exercises typically evolve along the following continuum:

| Exercise Type | Complexity | Focus |
| --- | --- | --- |
| Walkthrough | Low | Familiarisation |
| Tabletop | Medium | Decision-making & coordination |
| Functional | Medium–High | Capability testing |
| Simulation | High | Realistic scenario response |
| Full-Scale | Very High | End-to-end resilience validation |

A mature organisation uses a **combination of exercise types**, rather than relying on a single approach.

#### **Walkthrough Exercises**

##### **Definition**

Walkthrough exercises are structured sessions where participants review plans and procedures step-by-step.

##### **BCM Focus**

- Review of **Business Continuity Plans (BCPs)**
- Validation of roles, responsibilities, and recovery steps
- Identification of gaps in documentation

##### **Crisis Management Focus**

- Familiarisation with the **Crisis Management Team (CMT)** structure
- Review of escalation protocols
- Understanding communication flows

##### **Benefits and Limitations**

**Benefits:**

- Low cost and easy to conduct
- Useful for onboarding and awareness

**Limitations:**

- Limited realism
- Does not test decision-making under pressure

#### **Tabletop Exercises**

##### **Definition**

Tabletop exercises are **discussion-based simulations** where participants respond to a hypothetical scenario guided by a facilitator.

##### **BCM Objectives**

- Test activation of BCPs
- Validate coordination between business units
- Identify recovery challenges

##### **Crisis Management Objectives**

- Test **decision-making and escalation**
- Evaluate crisis communication strategies
- Assess leadership alignment

##### **Key Features**

- Scenario-based discussions
- Use of **injectables** to introduce new developments
- Facilitated environment

##### **Best Use Cases**

- Testing **Crisis Management Team readiness**
- Exploring new or complex scenarios
- Engaging senior leadership

#### **Functional Exercises**

##### **Definition**

Functional exercises test **specific capabilities or functions** without simulating the full organisational response.

##### **BCM Focus**

- Disaster Recovery (DR) testing
- System failover and data restoration
- Call tree and communication testing
- Alternate site activation

##### **Crisis Management Focus**

- Testing specific communication channels
- Verifying notification procedures

##### **Benefits**

- Validates technical and operational readiness
- Provides measurable results (e.g., RTO, RPO achievement)

##### **Limitations**

- Does not test the integrated response
- Limited insight into leadership decision-making

#### **Simulation Exercises**

##### **Definition**

Simulation exercises create **realistic, dynamic environments** where participants respond to evolving scenarios in real time.

##### **BCM Objectives**

- Test execution of recovery strategies
- Validate resource mobilisation
- Assess coordination across teams

##### **Crisis Management Objectives**

- Test **real-time decision-making under pressure**
- Evaluate communication with stakeholders
- Assess crisis escalation and governance

##### **Key Characteristics**

- Time-bound and fast-paced
- Use of multiple injects and evolving conditions
- High participant engagement

##### **Example**

A cyberattack simulation may involve:

- System outages requiring DR activation (BCM)
- Media inquiries requiring response (CM)
- Regulatory reporting requirements (CM)

#### **Full-Scale Exercises**

##### **Definition**

Full-scale exercises are the most comprehensive type, involving **real-world deployment of resources and end-to-end testing**.

**7.2 BCM Focus**

- Activation of recovery sites
- Physical relocation of staff
- End-to-end process recovery

##### **Crisis Management Focus**

- Full activation of the **Crisis Management Team**
- Real-time communication with stakeholders
- Coordination with external agencies

##### **Operational Resilience Focus**

- Validation of **Critical Business Services delivery**
- Testing interdependencies across systems and third parties

##### **Benefits**

- Provides the highest level of assurance
- Identifies systemic weaknesses

##### **Challenges**

- Resource-intensive
- Complex to plan and execute

#### **Hybrid Exercises (Integrated BCM & CM)**

##### **Definition**

Hybrid exercises combine elements of multiple exercise types to test both:

- **Operational recovery (BCM)**
- **Strategic response (Crisis Management)**

##### **Example**

A hybrid exercise may include:

- Tabletop crisis decision-making (CM)
- Simultaneous DR testing (BCM)
- Real-time scenario escalation

##### **Benefits**

- Provides a **holistic view of organisational resilience**
- Bridges the gap between technical and strategic testing

#### **Designing an Integrated Exercise Programme**

##### **Layered Approach**

Organisations should adopt a **progressive exercise strategy**:

1. Walkthrough → Build awareness
2. Tabletop → Test decision-making
3. Functional → Validate capabilities
4. Simulation → Test integrated response
5. Full-scale → Validate end-to-end resilience

##### **Alignment with BCM & CM Objectives**

Each exercise type should map to:

- BCM: Recovery validation (RTO, RPO, BCP effectiveness)
- CM: Leadership, escalation, communication
- OR: CBS continuity and impact tolerance

##### **Frequency and Coverage**

- High-criticality services: More frequent and complex exercises
- Inclusion of **third parties and external stakeholders**
- Coverage of diverse risk scenarios

#### **Common Challenges in Exercise Execution**

##### **Over-Reliance on Tabletop Exercises**

Limits the validation of actual recovery capability.

##### **Lack of Integration**

BCM and Crisis Management were tested separately.

##### **Insufficient Realism**

Scenarios do not reflect real-world complexity.

##### **Limited Leadership Participation**

Reduces the effectiveness of crisis exercises.

#### **Best Practices for Effective Exercises**

- Integrate **BCM and Crisis Management objectives**
- Use **realistic, evolving scenarios**
- Engage **senior leadership and cross-functional teams**
- Include **third-party participation** where relevant
- Define **clear success criteria and metrics**
- Capture lessons learned and drive improvements

Exercises are essential for transforming plans into **real-world capability**. Each exercise type plays a distinct role in building organisational resilience—from basic awareness to full-scale validation.

By adopting a **layered and integrated exercise programme**, organisations can:

- Validate recovery strategies (BCM)
- Strengthen crisis leadership and communication (CM)
- Ensure continuity of Critical Business Services (OR)

Ultimately, the effectiveness of an organisation’s resilience is not determined by the quality of its plans, but by its ability to **execute under pressure**. Exercises provide the environment where this capability is built, tested, and continuously improved.

| **C1** | **C2** | **C3** | **C4** | **C5** | **C6** | **C7** |
| --- | --- | --- | --- | --- | --- | --- |
|  |  |  |  |  |  |  |
| **C8** | **C9** | **C10** | **C11** | **C12** | **C13** |  |
|  |  |  |  |  |  |   |

#### More Information About OR-5000 \[OR-5\] or OR-300 \[OR-3\]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

|  |  |  |
| --- | --- | --- |
|  |  |  |
|  | If you have any questions, click to contact us. |  |
|  |  |  |

 

[View full post](https://blog.bcm-institute.org/ebook-or/or-p2-s4-st-c3-types-of-exercises-integrated-bcm-crisis-management)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Moh Heng Goh"
  },
  "dateModified" : "2026-05-05T06:22:41.314Z",
  "datePublished" : "2026-04-22T04:19:11Z",
  "headline" : "[OR] [P2] [S4] [ST] [TE] [C3] Types of Exercises (Integrated BCM & Crisis Management)",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1350,
    "url" : "https://3893111.fs1.hubspotusercontent-na1.net/hubfs/3893111/OR%20ST%20Testing%20and%20Exercising%20Morepost/%5BOR%5D%20%5BST%5D%20%5BTE%5D%20%5BC3%5D%20Types%20of%20TE.png",
    "width" : 1080
  },
  "mainEntityOfPage" : "https://blog.bcm-institute.org/ebook-or/or-p2-s4-st-c3-types-of-exercises-integrated-bcm-crisis-management",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "eBook OR"
  }
}
```