The Crisis Studio

Most crisis management exercises are written by people who have only read about crises.

I ran response from the World Bank's Global Watch Desk for our offices in 188 countries — through the Haiti earthquake and other major natural disasters, the Arab Spring, coup attempts, cyber attacks, kidnappings, terrorist bombings, protests, political unrest, and anything else that challenged our ability to keep the business running. Then I spent a decade at Deloitte turning that experience into programs for clients that regulators accept. At The Crisis Studio, we build the pressure test that finds where your executive team breaks, and deliver it in a room where that's safe. Then we help you fix what broke.

The exercise is the MRI. The value is the diagnosis.

Too many executive exercises are built around generic scenarios and predetermined discussion questions. The simulation identifies the weaknesses. The remediation work closes them.

The old way

A tabletop

An event. A line item, a compliance checkbox, priced once and forgotten the moment the report is filed.

The Crisis Studio way

A diagnostic instrument

A live session built to surface exactly where your governance, your decisions, and your people will actually fail under pressure — evidence you can act on, not just a memory of an interesting afternoon.

Built around your organization, not a template.

Every scenario is drawn from your critical services, dependencies, decision authorities, stakeholders, and existing plans. Explore a few in depth:

01Ransomware & Cyber Extortion 02Critical Vendor & Cloud Failure
03Data Breach
04Executive Misconduct & Reputational Crisis
05Workplace Violence
06Natural Disaster & Physical Disruption
07Regulatory & Compliance Failure
08Supply Chain Disruption

An illustrative walkthrough — not a real incident.

Every exercise is built from timed injects that escalate the way a real event does. Here's the shape of one.

09:03

Inject 01

Security Operations flags abnormal encryption activity across the file servers.

09:17

Inject 02

Customer-facing systems go offline.

09:34

Inject 03

A ransom note arrives. The actor claims customer data was exfiltrated.

09:51

Inject 04

A reporter emails your communications team requesting comment.

10:06

Inject 05

Your regulator requests an incident briefing.

10:22

Inject 06

The actor posts a sample of the stolen records publicly. What does your team do now? That's the exercise.

We learn your organization and design and lead the exercise. Then we help you fix what it reveals.

Four ways to work together, in order of how deep the engagement goes.

Tier 1

The Pressure Test

A half-day executive tabletop built on a custom scenario drawn from your real critical services and third-party dependencies, facilitated live.

Design brief · custom scenario & injects · live facilitation · decision log · after-action report · board-ready summary

Tier 2

The Full Break

A multi-scenario program that goes beyond a single tabletop — a design lab, an executive tabletop, and an observed functional or disaster-recovery test, so leadership sees not just how they'd decide, but whether the recovery actually works end to end.

Design lab · executive tabletop · observed functional/DR test · findings report · board readout

Playbooks

Playbook Development

The exercise finds where your team breaks. This closes it — crisis playbooks, notification and activation protocols, and pre-drafted communications, scoped as a fixed deliverable.

Crisis playbook · notification & activation protocols · communications templates · tabletop-ready appendices

Tier 3

Program Remediation

Once an exercise finds the gaps, this closes them — over a multi-month engagement.

Governance redesign · updated playbooks · re-tiering · testing calendar · progress reporting

Real reps, then a decade of institutional packaging.

See my full background and a representative sample of the engagements I have led throughout my career.

Tell me what you're trying to test.

Reach out directly to scope an exercise. All inquiries are confidential.

Confidential by design

Exercises often require access to crisis plans, escalation structures, technology dependencies, executive roles, and vulnerabilities. That material is handled in confidence, and NDAs are available on request.

Request a scoping call →