[OR] [P2] [S4] [ST] [C6] Crisis Management Exercises

Chapter 6

Crisis Management Exercises

Introduction

Crisis Management Exercises are designed to test an organisation’s ability to lead, decide, communicate, and coordinate during high-impact, high-uncertainty events. While Business Continuity Management (BCM) focuses on restoring operations, Crisis Management (CM) addresses the strategic response—how leaders interpret evolving situations, make time-critical decisions, and protect stakeholders, reputation, and regulatory standing.

In an Operational Resilience (OR) context, crisis exercises must be tightly integrated with BCM recovery and aligned to Critical Business Services (CBS). The goal is not only to manage the crisis effectively, but to ensure that service delivery remains within impact tolerance despite disruption.

Purpose of the Chapter

This chapter aims to:

• Define the objectives and scope of Crisis Management Exercises
• Detail exercise types and formats suitable for crisis leadership
• Provide a structured methodology for designing and executing exercises
• Integrate crisis exercises with BCM recovery and OR outcomes
• Establish metrics, governance, and best practices

Objectives of Crisis Management Exercises

Crisis exercises validate the organisation’s ability to respond strategically under pressure.

Core Objectives

• Test activation and effectiveness of the Crisis Management Team (CMT)
• Validate decision-making frameworks under uncertainty
• Assess escalation protocols and authority levels
• Evaluate internal and external communication
• Ensure coordination across functions and with external stakeholders

Link to Operational Resilience

Crisis exercises support OR by:

• Enabling timely decisions that protect Critical Business Services
• Preventing escalation of disruptions into systemic failures
• Supporting regulatory compliance and stakeholder confidence

Crisis Management Framework for Exercises

Crisis Management Team (CMT)

Exercises must validate:

• Roles and responsibilities
• Leadership structure
• Decision authority and accountability

Crisis Governance

Test:

• Escalation thresholds (incident → disruption → crisis)
• Coordination between operational teams and executive leadership
• Integration with BCM and incident management

Communication Framework

Validate:

• Internal communication (staff, management)
• External communication (customers, regulators, media)
• Messaging consistency and timing

Types of Crisis Management Exercises

Tabletop Crisis Exercises

Definition:

Discussion-based exercises where participants respond to a scenario in a facilitated environment.

Focus:

• Strategic decision-making
• Crisis escalation
• Communication planning

Use Case:

• Executive-level engagement
• Testing new crisis scenarios

Simulation Exercises

Definition:

Dynamic, time-bound exercises with evolving scenarios and real-time decision-making.

Focus:

• Leadership under pressure
• Coordination across teams
• Rapid response to changing conditions

Features:

• Injects (new information introduced during exercise)
• Time constraints
• Realistic escalation

Media and Communication Exercises

Definition:

Exercises focused specifically on crisis communication.

Focus:

• Media handling
• Public statements
• Social media response

Objectives:

• Ensure accurate and timely messaging
• Protect organisational reputation

Regulatory Response Exercises

Definition:

Exercises simulating regulatory engagement during a crisis.

Focus:

• Notification timelines
• Information accuracy
• Compliance with reporting requirements

Hybrid Exercises (Integrated BCM + CM)

Definition:

Exercises combining crisis management with operational recovery.

Focus:

• Crisis decision-making (CM)
• Recovery execution (BCM)
• Service continuity (OR)

Methodology for Crisis Management Exercises

Step 1: Define Objectives

• What decisions need to be tested?
• What communication scenarios are required?

Step 2: Design Scenario

• Use severe but plausible scenarios
• Include operational disruption and crisis escalation
• Introduce uncertainty and ambiguity

Step 3: Define Roles and Participants

Include:

• Crisis Management Team
• Senior leadership
• Communication teams
• Legal and compliance

Step 4: Execute Exercise

• Facilitate scenario progression
• Introduce injects
• Monitor decisions and actions

Step 5: Evaluate Performance

Assess:

• Decision quality and timeliness
• Communication effectiveness
• Coordination across teams

Step 6: Improve and Update

• Address gaps
• Update crisis plans
• Enhance training

Key Capabilities Tested

Decision-Making

• Speed and quality of decisions
• Use of available information
• Alignment with organisational priorities

Escalation and Governance

• Timely escalation to leadership
• Clarity of authority
• Coordination between teams

Communication

• Accuracy and consistency of messages
• Speed of communication
• Stakeholder engagement

Situational Awareness

• Ability to interpret evolving information
• Understanding of operational and strategic impact

Integration with BCM and Operational Resilience

BCM Integration

Crisis exercises must:

• Align with recovery activities
• Support operational decision-making
• Coordinate with recovery teams

Operational Resilience Integration

Exercises must test:

• Continuity of Critical Business Services
• Alignment with impact tolerance
• Cross-functional coordination

Metrics and Evaluation

Key Metrics

• Time to activate CMT
• Decision-making speed
• Communication response time
• Stakeholder engagement effectiveness

Qualitative Indicators

• Leadership effectiveness
• Clarity of roles
• Coordination efficiency
• Adaptability under pressure

Common Challenges in Crisis Exercises

Lack of Realism

Overly scripted exercises reduce effectiveness.

Limited Executive Engagement

Without leadership involvement, exercises lose value.

Poor Communication Testing

Focus on operations without testing messaging.

Weak Integration with BCM

Crisis and recovery are tested separately.

Best Practices for Crisis Management Exercises

• Use realistic, evolving scenarios
• Introduce time pressure and uncertainty
• Engage senior leadership actively
• Integrate BCM recovery and OR objectives
• Test communication extensively
• Capture and act on lessons learned

Governance and Oversight

Roles

• Board and Senior Management: Oversight
• Crisis Management Team: Execution
• BCM Team: Coordination
• Communications Team: Messaging
• Internal Audit: Independent review

Reporting

Reports should include:

• Key decisions and actions
• Identified gaps
• Improvement recommendations
• Maturity assessment

Crisis Management Exercises are essential for validating an organisation’s ability to lead through disruption. They ensure that leadership teams are prepared to make critical decisions, communicate effectively, and coordinate responses under pressure.

When integrated with Business Continuity Management and Operational Resilience, crisis exercises provide a comprehensive view of organisational readiness—ensuring not only that operations can recover, but that crises can be managed effectively while maintaining Critical Business Services.

Ultimately, the true test of resilience lies not in planning but in execution under pressure. Crisis Management Exercises provide the environment where this capability is built, tested, and strengthened.

C1	C2	C3	C4	C5	C6	C7
C8	C9	C10	C11	C12	C13

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.