Your foundation is in place. Now it needs to work under pressure.
For organizations that already have a crisis plan, procedures, and teams in place, but want to know if they work in practice once the pressure runs high. With Simulation, you practice a realistic cyber crisis based on your own processes and plans to test if they actually hold up. You will leave with a clear view of what is feasible, where things stall, and what you need to adjust first.
Our valued customers:
Is Simulation the right step?
For organizations that have their basics in order and now want to practice at the level where things go wrong: execution, escalation, and decision-making under time pressure.
Simulation is a good fit if you:
- Have a crisis plan/runbooks, but do not yet regularly test whether they are truly actionable;
- Notice that the first few hours make all the difference, but your team loses time searching, coordinating, and asking 'who decides this?';
- Have an escalation path from IT incident → administrative crisis and want to practice that in real life;
- Want to train together with crisis management / incident response / communications (and potentially chain partners);
- Want to discover how the crisis plan can be improved.
Simulation is a good fit if you:
- Want to practice together with suppliers → then Event is a better fit.
- Have never practiced before and first want to understand what a crisis requires → start with Exercise;
- Are primarily looking for a structural program with an ongoing exercise cycle → then a Program is a better fit.
- Are only looking for a technical test such as pentesting and red teaming; this is about team and process execution
Your plan is ready. Now for the real test
Crisis plans describe what should happen, but say little about how teams act under pressure. In practice, decision-making, mandates, and communication become intertwined. This friction slows down the first hours of an incident and makes escalation unpredictable.
From 'we have it in writing' to 'we can execute it'
Simulation is about testing your own crisis plan. With preparation, the crisis team practices realistic scenarios, roles, and escalation paths as they have been established. This reveals whether the plan is complete, whether everyone knows what is expected of them, and where decision-making, coordination, or responsibilities are still lacking.
This is how it works:
In Simulation, you practice a cyber crisis that has been prepared in advance and aligns with your organization or sector. Based on realistic situations, the crisis team goes through the incident as intended, making it clear whether crisis plans are complete, where gaps exist, and whether roles and procedures work in practice.
- Plenary session and group work
- Guidance by experienced cyber crisis professionals
- Up to approximately 40 participants
- Duration: 2.5 - 4 hours
- Preferably on location
Practicing a cyber crisis: the experience of the Municipality of Hellendoorn
In this video, you will hear how a cyber crisis simulation is experienced and why this can be an important step in preparation for many organizations.
Choose the approach that fits where your organization stands
Practice your crisis approach as it should work in reality
A realistic, tailored cyber crisis, practiced with your own plan, processes, and crisis team.
Structural practice, better prepared every year
Recurring simulations that evolve every year with the reality of your organization.
Practice together with your supply chain partners
One crisis scenario, practiced with the crisis teams of two or more organizations in your chain.
Help with your crisis organization, from strategy to playbook
From a departing CISO to a playbook that didn’t work in an exercise: we step in to address the issues that arise before, or alongside, the training.
Why organizations choose to conduct cyber exercises with CCRC
You will train decision-making, roles and communication as it feels in a real cyber crisis.
Experienced
crisis professionals:
You practice with people who know how decision-making and collaboration under pressure really work, not junior trainers.
100% focus on cyber crisis exercises:
No consultancy or security services on the side: just training, simulating and improving your crisis response skills.
From first exercise to established routine:
We guide organizations from their very first experience to structured, annual exercises with visible progress.
Frequently asked questions
Simulation tests an organization's own crisis plan, procedures, and team under a realistic cyber incident to reveal whether they actually work under pressure, where things stall, and what needs adjusting first.
Choose Simulation if you already have a crisis plan or runbooks in place and want to know whether they hold up under real pressure. If you've never practiced before, start with Exercise; for a recurring exercise cycle, choose Program instead.
Simulation is built around your organization's own processes, plans, and runbooks. The scenario is realistic and tailored to your context, so the exercise reveals gaps specific to your actual crisis plan rather than a generic script.
A Simulation typically runs 2.5 to 4 hours, preferably on location, with up to approximately 40 participants guided by experienced crisis professionals.
Organizations leave with a clear view of what parts of their crisis plan are feasible under pressure, where decision-making or communication stalls, and concrete points for improving the plan and team readiness
Simulation is designed for the crisis team together with incident response, IT/security operations, and communications, and can also include supply chain partners when dependencies are part of the tested scenario.
A basic tabletop exercise is discussion-based and reviews plans conceptually. Simulation goes further: it tests your organization's actual crisis plan and runbooks under realistic time pressure and evolving scenario injects, closer to a full dress rehearsal.
Yes. Simulation directly tests a documented business continuity or crisis plan under pressure, which aligns with NIS2 Article 9's requirement to apply and periodically test such a plan, not just have one on paper.