1. Prepare the scenario
Choose an incident, define business context, identify the participating functions and set objectives.
A realistic rehearsal connects the people who must make decisions together in a real crisis.
Choose an incident, define business context, identify the participating functions and set objectives.
Facilitators present escalating developments such as ransomware, customer impact and supplier disruption.
Participants coordinate responses, discuss trade-offs and record actions and escalation choices.
Facilitators capture observations, decision history, strengths and gaps.
Assign improvements, track owners and repeat relevant situations to see whether coordination improves.
09:00: IT identifies suspicious encryption activity.
09:15: Customer-facing systems become unavailable.
09:30: Legal, communications and executives must decide how to respond to a threat of data publication.
10:00: The team weighs operational continuity, recovery priorities and stakeholder messaging.
After the rehearsal, the organization records gaps in escalation, authority and coordination, then assigns actions for the next exercise.
Explore how RehearsalIQ could support your response readiness program.
Start a conversation ↗