Sample Scenario — Supply Chain Disruption Simulation

The Norvale Supply Chain Exercise

A branching, choose-your-path tabletop built for a medical device manufacturer. A fire at a supplier most executives have never heard of takes out the only source of a single chip — and hospitals still need pumps. Six shared injects establish the disruption, then the room's own decision — buy on the broker market, or redesign around an alternate part — sends the exercise down one of two independent, fully-scripted paths. Neither one gets the parts here fast enough.

16injects per path
2diverging paths
10 dayssimulated timeline
3.5 hrstypical runtime

Fictional, but built to feel real in the room.

Every detail below is fictional — specific enough to feel real in the room, and generic enough to map onto almost any manufacturer whose product depends on a part it doesn't make and can't easily replace.

Norvale Medical Systems

A Massachusetts-based maker of hospital infusion pumps and the disposable sets that run through them, with ~3,100 employees and $1.1B in annual revenue. Norvale pumps are installed in about 900 U.S. hospitals, and every new pump and every service repair depends on a custom microcontroller made by a single supplier: Hexatron Semiconductor, at one plant in Penang, Malaysia.

Single-sourcing that chip was a deliberate decision seven years ago — better pricing, tighter quality, and a supplier that had never missed a delivery. On paper, it's a 7-week inventory buffer and a strong relationship. In practice, it's one building.

Hexatron Semiconductor — sole source for the pump microcontroller
Unity Health Purchasing — hospital buying group, 31% of pump revenue
St. Brendan Children's Hospital — pediatric critical care, long-time customer
Regulators — device change and supply interruption notifications

The crisis everyone faces.

Six injects, delivered over the first 53 hours, that every player experiences regardless of what the room ultimately decides. This phase ends with the decision that splits the exercise in two.

DAY 0
04:10
INJECT 1Detection

A fire on the other side of the world

A fire breaks out overnight at Hexatron's Penang plant. Norvale doesn't learn about it from Hexatron — it learns nine hours later, when a supply chain risk alert service flags a local news report. Hexatron's account manager isn't answering.

Tests: how events at a supplier get noticed, and whether anyone owns watching a single point of failure.
15:00
INJECT 2Scoping

Sixteen weeks, at best

Hexatron confirms its cleanroom was destroyed and estimates 16 to 24 weeks to restart. Norvale has seven weeks of chips across production and service. Then procurement discovers that the supplier of the pump's power module also uses Hexatron parts — a dependency nobody had mapped.

Tests: mapping dependencies below the first tier, when the second-tier surprises are the ones that hurt.
DAY 1
09:00
INJECT 3Customers

Sales already made a promise

Unity Health Purchasing, which buys pumps for 140 hospitals, asks for written assurance about supply. A regional sales director has already told two hospital systems there will be "no impact."

Tests: message discipline when the front line has gotten ahead of the facts.
13:00
INJECT 4Allocation

A small customer at a crowded table

Hexatron says it will allocate remaining wafer inventory across its customers. Three larger device makers and an automotive supplier use the same chip family. To Hexatron, Norvale is a small account.

Tests: supplier leverage, executive relationships, and how quickly the right people get on the phone.
17:00
INJECT 5Regulatory

A notification clock nobody was watching

Regulatory affairs flags that an interruption in supply of a device used in critical care may require notifying regulators — and that any change to the pump's components will require a regulatory assessment before it ships.

Tests: whether regulatory obligations are part of the supply response from the start, or an afterthought.
DAY 2
09:00
INJECT 6Decision point

Buy on the broker market, or redesign

A parts broker offers 40,000 of the exact chips at nine times the normal price, available in ten days, with paperwork that can't be traced back to Hexatron. Engineering says a redesign around an alternate chip would take about 14 weeks, plus a regulatory submission of uncertain length. The room has to decide.

Tests: decision-making when the fast option carries quality risk and the safe option arrives after inventory runs out. This is the fork.

The room decides. The exercise branches.

INJECTS 1–6 DECISION A — BUY FROM BROKER B — REDESIGN

From here, the facilitator runs one of two fully independent scripts depending on what the room chose in Inject 6. Toggle between them below to see how each one unfolds — in a live session, players only ever see the one they earned.

Path A — the room buys on the broker marketTen injects. Buying buys time, not certainty — and a part you can't trace is a part you have to prove.
DAY 2
16:00
INJECT 7APurchase

Fourteen million dollars, wired

Norvale commits $14M for the broker lot. The purchase exceeds the procurement director's authority and goes to the CFO, who approves it by email from an airport. The broker requires payment in advance.

Tests: whether purchasing controls hold under crisis pressure — and who signed for what.
DAY 4
10:00
INJECT 8AQuality

The markings don't match

The first shipment arrives. Incoming inspection finds inconsistent laser markings on about 8% of chips in two of the five lots. Quality orders X-ray and electrical testing on every lot before anything goes on a production line.

Tests: quality discipline when the whole point of the purchase was speed.
DAY 5
09:00
INJECT 9AOperations

A two-week testing queue

The only qualified independent lab can't finish full testing for two weeks. Production of new pumps stops while the chips wait. Service technicians start rationing repair boards.

Tests: how a decision made for speed can create its own delays — and who tells customers.
DAY 6
15:00
INJECT 10AQuality

Counterfeit confirmed

Testing confirms that one lot — 12% of the purchase — is counterfeit: relabeled, lower-grade parts. The other lots pass every test so far. Operations wants to start building with the passing lots; Quality wants to scrap the entire purchase.

Tests: resolving a quality-versus-supply conflict with patient safety on one side of the table.
DAY 7
10:00
INJECT 11ARegulatory

Where did these come from?

In response to Norvale's supply interruption notice, regulators ask how the company is sourcing components during the disruption and what provenance controls are in place.

Tests: transparency with regulators about a decision that the company may not want to explain.
16:00
INJECT 12ACustomers

A children's hospital asks to go first

Hospitals start rationing pumps. St. Brendan Children's Hospital asks for priority on new pumps and repairs, citing its pediatric critical care patients. Unity Health asks for a written allocation policy that treats all of its members equally.

Tests: allocation criteria — clinical need, contract terms, or fairness — and who has the authority to set them.
DAY 8
08:00
INJECT 13AMedia

"Gray-market chips"

A medical device trade publication reports that Norvale bought chips on the broker market and that some were counterfeit. Competitors' sales reps forward the article to Norvale's hospital customers within hours.

Tests: communicating a defensible decision once it's been framed as a reckless one.
14:00
INJECT 14AInternal conflict

Quality threatens to walk

The VP of Quality tells the CEO she will resign if pumps are built with broker chips before every lot has completed full testing. The COO says waiting two more weeks means hospitals go without pumps.

Tests: whether leadership can resolve a principled disagreement between safety and supply without overruling the safety function.
DAY 9
09:00
INJECT 15ADecision point

Build with the lots that passed?

Four lots have passed every test the lab can run. Using them would restart production for about eight weeks. Scrapping them all means relying on Hexatron's recovery and the redesign Norvale hasn't started. The room has to decide.

Tests: risk acceptance — what level of evidence is enough to put a part into a device a patient depends on.
DAY 10
11:00
INJECT 16ARemediation

One building, again

The board asks why a single-source dependency on one plant was accepted for seven years, and whether there's a dual-sourcing plan. Engineering says a redesign for a second chip would still take 14 weeks — whichever path the company took this week.

Tests: separating short-term supply relief from the structural change the disruption revealed.
Path B — the room redesigns around an alternate chipTen injects. Redesigning buys a permanent fix, not time — and the inventory runs out before the fix arrives.
DAY 2
15:00
INJECT 7BEngineering

Sixty engineers, reassigned

Engineering pulls 60 people off the next-generation pump to work on the redesign. The next-gen launch, which the company has promised to investors for next year, slips by at least two quarters.

Tests: the opportunity cost of a crisis response — and who tells the investors.
DAY 3
11:00
INJECT 8BRegulatory

A new submission

Regulatory affairs concludes the alternate chip changes the pump's control electronics enough to require a new regulatory submission. The review timeline is uncertain and outside Norvale's control.

Tests: planning around a timeline you don't own.
DAY 4
10:00
INJECT 9BAllocation

Seven weeks for everyone

With seven weeks of chips, Norvale has to allocate. Sales wants to protect its largest contracts; the chief medical officer wants to prioritize critical care units; finance wants to protect the highest-margin accounts.

Tests: setting allocation principles explicitly, before they're set by whoever shouts loudest.
DAY 5
14:00
INJECT 10BCustomers

A platform switch

Told it will receive 60% of its normal pump volume, a Unity Health member system with 22 hospitals announces it is evaluating a competitor's infusion platform. Switching platforms is a multi-year decision.

Tests: customer retention when the short-term disruption creates a long-term competitive opening.
DAY 6
09:00
INJECT 11BSupplier

The restart slips

Hexatron revises its restart estimate to 28 weeks. Norvale's inventory now runs out about seven weeks before the redesigned pump can realistically ship.

Tests: replanning when the key assumption behind the decision changes.
15:00
INJECT 12BService

New pumps or working pumps?

Installed pumps fail at their normal rate, and every repair uses the same scarce chips as new production. Every board that goes to a repair is a new pump that doesn't get built.

Tests: trade-offs between new customers and existing ones — and who makes the call.
DAY 7
13:00
INJECT 13BClinical

Back to manual

A nursing association posts that hospitals are reverting to manual IV administration because they can't get replacement pumps. Local news picks up the story and names Norvale.

Tests: communications when your supply problem is now a patient-care story.
DAY 8
10:00
INJECT 14BEngineering

The safety logic has to be rewritten

Engineering finds that the alternate chip requires rewriting the firmware that controls dosing safety limits. Verification and validation can't be safely compressed, and the schedule slips another three weeks.

Tests: holding the line on safety-critical work when every week of delay has a visible cost.
DAY 9
09:00
INJECT 15BDecision point

The broker calls back

The parts broker returns with a new offer: 30,000 chips at twelve times normal price, still without traceable provenance. Buying them would bridge the gap until the redesign ships — or put unknown parts into pumps. The room has to decide.

Tests: whether the room reopens the decision it made on Day 2, and on what basis.
DAY 10
11:00
INJECT 16BGovernance

What the supplier risk program missed

The board asks why the second-tier dependency on Hexatron was never mapped and what the company's supplier risk program actually monitors. The answer is: first-tier suppliers, annually.

Tests: separating the immediate supply response from the program-level change the disruption exposed.

What the debrief surfaces.

The two paths are built to converge on the same hard questions, arrived at from opposite directions.

If the room bought on the broker market

  • Were purchasing and quality controls followed under pressure, or bypassed — and who approved what?
  • What evidence standard did the room set for putting an untraceable part into a medical device, and was it set before or after the test results?
  • Did the allocation policy reflect clinical need, contract terms, or whoever called first?

If the room redesigned

  • Was the redesign plan built on assumptions — like the supplier's restart date — that were never stress-tested?
  • How were allocation decisions made between new pumps, repairs, and customers — and who owned them?
  • Why was a second-tier dependency on the same plant invisible until it failed?
Norvale Medical Systems, Hexatron Semiconductor, and all named customers in this scenario are fictional and created for exercise purposes only.

Want this as a PDF?

The full Norvale scenario — every inject, both paths, and the debrief questions — is available as a print-ready PDF you can share with your own team or board. Enter your email and we'll take you straight to the download.

This is one scenario. Yours would be built around your business.

The Norvale exercise is a sample — built to show how a supply chain simulation can branch on the decision that actually matters, and stay uncomfortable in both directions. A simulation built for your organization starts with your products, your suppliers, and your customers.

Confidential by design

Exercises often require access to crisis plans, escalation structures, and vulnerabilities. That material is handled in confidence, and NDAs are available on request.

Talk to us about a custom simulation →