A tabletop exercise can test, assess and ultimately improve your crisis plan and your crisis response team’s performance. That is, if it’s done right.
To be successful and contribute to your organization’s higher state of crisis readiness, your tabletop exercise has to convincingly simulate a crisis scenario. It has to give participants a taste of the chaos that would be an inevitable part of any crisis. If the exercise is not done right, all you will have done is taken up a lot of people’s time without improving your organization’s crisis readiness.
So how do you make sure you’re doing it right? Here are eight rules to follow to make your tabletop exercise as valuable as it possibly can be.
Rule 1 – First and foremost — create your tabletop exercise objectives
By first identifying objectives for your exercise, you’ll be able to design your exercise and its simulated chaos in a way that works toward achieving those objectives. Say your response team has never had a chance to convene before the exercise. Testing how well they collaborate and how their decision-making process functions would be one of your objectives. You can then begin thinking about an exercise crisis scenario that emphasizes a series of challenges forcing your response team to make difficult, consequential decisions. You could, for example, inject developments into the scenario that require the crisis team to quickly modify its messaging both to external and internal stakeholders.
Rule 2 – Understand your audience based on your tabletop exercise objectives
With several objectives in hand as a guide to scenario development, you’ll next want to turn your attention to who precisely from your organization is participating in the exercise. Do you have a formal roster of a crisis team along with each individual’s backup? You should. Will your scenario entail participants who are external to your organization, such as first responders? That could mean that representatives from these external groups should be invited to participate in the exercise. In an actual crisis you would undoubtedly need to work seamlessly with these outside organizations, so exercising with them is a smart move.
Resource: Principles of Crisis Management Training Course
Rule 3 – Create an overview of your scenario
With objectives and participants decided, you’re now ready to put together a one-page overview of the simulated chaos you need to create. Think of the overview as if you’re telling a story, with a beginning, middle and end. The story moves forward through a series of scenario injects that you create, again, with an eye to achieving your objectives.
Now that you have your overview of the scenario, you’ll want to think about how you’d present it to your crisis team a week or so before exercise day. You could develop a pre-read document or, far better, introduce the scenario with a video, as in our experience, well-produced, realistic videos are far better at capturing and holding the attentions of crisis exercise participants.
Rule 4 – Realism is the path to successful crisis management tabletop exercises
Now it’s time to put the details into the scenario. Make certain to work with a subject matter expert from your organization to help add the realism. If, for example, the scenario is a cyber attack, you’ll want to work with an IT expert or two to ensure authenticity. If it’s a toxic release scenario you’ll want to consult with toxicologists and public health officials to keep things real. Nothing will harm the success of your exercise more than if it’s not realistic. The crisis team will be dismissive, even contemptuous, of the exercise if they can’t relate to it. However, by keeping your scenario scrupulously realistic, your audience will engage.
Rule 5 – Think logistics, and always test your logistics before the day of your tabletop exercise
We’ve seen so many tabletop exercises fail or have delayed starts due to not preparing logistics beforehand. Here’s a short list:
- Send the invite calendar to your participants months in advance
- Book your desired room and a breakout room(s)
- Test the technology in the room the day before
- If you have virtual participants, make sure you have a good system that they can call in on
- Make sure you have white boards and pens
- If you have a technical person to help with technology, make sure they’re there to help set up on the day of the exercise or, preferably, the night before.
Related: Crisis Management Tabletop Exercises – A Guide to Success
Rule 6 – How you manage the exercise agenda may make or break it
Keeping the exercise moving along on schedule is crucial to its success. And your schedule will have to factor in all sorts of activities of various durations, including bathroom and coffee breaks. If your exercise will include times when the team members must move to breakout groups representing their specific functions, their rearrangement to the breakout areas or rooms could take ten minutes. Two breakout sessions? That’s twenty minutes. Not anticipating and allowing for these sorts of time-consuming actions will throw off the schedule, inflicting great harm to the exercise if it goes overtime and tightly scheduled executives have to leave before the end.
It’s a good idea at the start of the exercise to go over the exercise agenda that details each inject period, break, or whatever. Outlining the agenda to the team at the start helps to ensure everyone remains on track during the event. And make sure you leave a period of time at the end for the “hot wash,” a debrief discussion.
Rule 7 – After the tabletop exercise, do this well and it will ensure your event is a success
The hot wash at the end of the exercise is only a very brief, initial impression and discussion of the exercise. It’s a forerunner to the comprehensive After Action Report (AAR) that you would issue a week or two after the exercise. The AAR pinpoints lessons learned — what went right and what went wrong during the exercise — and, most importantly, it includes actionable recommendations aimed at improving both the crisis plan as well as the team’s performance.
A good AAR is a key step toward making your organization more crisis ready and resilient. The recommendations in the AAR have to be implemented with updates made to your plan and procedures.
Rule 8 – Don’t let the momentum slip, it’s about creating muscle memory
A successful crisis simulation exercise and its constructive AAR is only one step in what should be thought of as a series of steps in a process of continuous improvement. One “check the box” exercise is surely not sufficient to ensure optimal readiness over the long term. An organization should have a programmed approach to exercises, such as scheduling them at regular six-month or one-year intervals with different kinds of chaos-infused scenarios.
Summary
Follow these eight rules for a tabletop exercise with realistically simulated chaos and you’ll have a crisis plan and response team that are in a state of optimal readiness. Only through regular simulated crisis exercises can continuous improvement be achieved over the long term, making your organization as prepared as it possibly can be for the real thing.
* * *
Although the potential effects of the “Coronavirus” COVID-19 strain on businesses and the general public is largely unknown, there are actions that senior leadership should be undertaking. Do your business continuity plans (BCP) include a pandemic plan or annex and has it been exercised recently. If a pandemic strikes it will present challenges that many CEOs haven’t thought through. You don’t know what you don’t know, and you cannot work on a problem until you know what it entails. A review of you plan, preferably through an exercise, is a good means of finding and addressing those challenges. Some challenges that come to mind are vendor backups, logistics (just in time logistics vs. stockpiling), workforce absences and backups for critical positions. Other challenges?
Great comments. Many more unknowns are worked out through tabletop exercises. Thank you, Don
These eight rules for conducting a successful crisis management tabletop exercise are concise and spot-on. An organization of any size and type that follows them in regularly held exercises will ensure that its plans and the members of its crisis management team are continuously improving. That’s the only way to achieve optimal crisis preparedness.
Thank you, David. Your comment regarding any size of organization is spot on.
Rob, you and some of the individuals providing comments underscore the importance of starting with a clear set of objectives. While a specific scenario is important, selecting one should only come after the objectives are defined. Ask yourself this question: when the exercise is over, what is it that we want to have achieved? Is it a better understanding of roles and responsibilities, identifying where the gaps are in the plan, or a better understanding of key stakeholders and how we communicate with each? As the saying goes, any road will do if you don’t know where you’re going. Start with well defined objectives?
We always start with defining the exercise objectives, it is essential.
Thanks Rob, this is very detailed and realistic, if you permit I would like to share this blog with my industry friends here in this part of the world
Yes please share the blog, Manish.
Rob these are all very sound points, some of which I have seen ignored by untrained people over the years when they have been preparing and delivering exercises which have then totally invalidated the exercise itself. So not just preparation but training in how to construct exercises is so important. Your point regarding realism and having researched the topic before presenting it as part of the exercise is also well made in making exercises viable.
Thank you, Chris. We pride ourselves on making the scenarios relevant to the player’s environment otherwise there’s little or no engagements
Thanks Rob ! Very concise guide ! As you mentioned, detail logistic planning is key for succes as well as keeping realism during the exercises , it will definitely improve teams readiness and responsiveness. I recommend to conduct table top exercises at least once a year including all your CMT Members and practice debriefing techniques to take advantage of lessons learned.
Thank you, Antonio. Great points!
Great guidance. If you put the “work” in upfront planning, it really helps make the exercise a success. The objectives are key! Ensure that everyone understands and aligns on them in advance.
Thanks, Leanne. Hope all is well.
It should use true aspects of the location being disrupted. I sometimes bring in local police and fire department personnel to add realism to the scenario. i also take into account impacts on the surrounding area that will complicate the ability to deal with the event. If I am using special police/fire personnel I brief them in advance and ask them to participate, as well as asking how they would respond. Reference to specific locations – roads, freeways, addresses, pervailing wind direction, all help to make it real. It is a movie scenario.
Great insight into your exercises, Kathleen. Thank you.