Exercise – A first introduction to practicing: exploring together what a cyber crisis really means
Many organizations have prepared their cyber crisis response on paper, but do not know how it holds up once pressure builds. In this foundational exercise, the team works through a realistic cyber incident. It becomes clear who makes decisions, who communicates, and which initial actions make sense. The result is a shared understanding of roles and expectations, without immediately going into full complexity.
Trusted by:
Is this Exercise the right next step for you?
For teams that know they need to practice, but don’t have a clear starting point yet.
The Exercise is a good fit if you:
- notice that people want to take action, but don't share the same understanding of roles, mandates, and escalation
- want to show MT/operations/IT/security/comms the importance of practicing for a cyber crisis
- already have plans or runbooks and want to practice them to see what insights you gain
The Exercise is not a good fit if you:
- are only looking for general awareness, such as e-learning and other training on cybersecurity principles. We focus exclusively on cyber crisis exercises.
- primarily want to test your own runbooks/scenarios; in that case, Simulation is a better fit
- already have an established response routine with a fixed exercise cycle and are just looking for more repetition. In that case, Program is a better fit
The plan is there, but the team is not aligned
In many organizations, the cyber crisis approach exists mainly on paper. Roles and agreements are documented but haven’t been practiced together. Everyone knows part of the story, leading to confusion under pressure. Decision-making slows down, communication becomes fragmented, and escalation only begins once the problem has already grown.
From "sort of knowing" to being able to act together in a structured way
Basis provides your team with a shared response foundation: a common language, role clarity, and initial actions, making decision-making and communication predictable under pressure. Not through more documents, but by practicing together and identifying exactly what is needed in your context to maintain control.
Customer cases
How the Exercise works in practice
This introductory cyber crisis exercise requires no preparation time. Management and the crisis team immediately experience how decision-making and coordination unfold under pressure, making the importance of practice tangible. The setup is also suitable for practicing with supply chain partners to make dependencies visible.
Practical Information
An interactive half-day cyber crisis training, on-site, with space for up to 40 participants.
Training format
Crisis teams work in small groups on decision-making under pressure, with feedback from a CCRC expert
What you get out of it
A shared and realistic picture of how your crisis approach works in practice, including concrete agreements and points for improvement that can be applied immediately.
We support organizations of every size with the right cyber crisis exercise
Event – an interactive crisis experience
For organizations, industry associations, and events where people want to experience for the first time what a cyber crisis truly means. In a short, interactive session, we’ll help you experience the impact of pressure, uncertainty, and coordination, possibly in collaboration with your supply chain partners.
Result: reality check, sense of urgency and first points for improvement.
Exercise – understanding together what needs to be done
For teams that need a shared understanding of roles, mandates, and initial actions during a cyber incident. We clarify who does what, when, and why – also suitable for practicing with chain partners.
Result: insight into whether everyone knows what is expected of him or her, and where the gaps are.
Simulation – practice realistically with your own plan
For organizations with existing plans and runbooks that want to know if they work under real pressure. We practice realistic scenarios based on your context and refine what proves impossible in practice.
Result: plans that work and a team that can execute them.
Program – structural improvement
For organizations that want to establish cyber crisis readiness as an ongoing capability. We develop a regular exercise and improvement cycle, including evaluation, repetition, and collaboration.
Result: ingrained routines, measurable progress and predictable response.
Work with CCRC for more control under pressure
You will train decision-making, roles and communication as it feels in a real cyber crisis.
Experienced crisis professionals:
You practice with people who know how decision-making and collaboration under pressure really work, not junior trainers.
100% focus on cyber crisis exercises:
No consultancy or security services on the side: just training, simulating and improving your crisis response skills.
From first exercise to established routine:
We guide organizations from their very first experience to structured, annual exercises with visible progress.