Most organisations have a crisis management plan. Far fewer have tested whether that plan actually works when real people are under real pressure.

The difference matters enormously. Research consistently shows that organisations which regularly exercise their crisis response recover faster, communicate more effectively, and suffer less reputational and financial damage when a real incident strikes.

The gap between planning and performing

A crisis plan on paper makes assumptions — that the right people will be available, that communication channels will work, that teams will coordinate smoothly, that decisions will be made quickly. An exercise tests every one of those assumptions in a realistic setting.

What we consistently find across 25 years of running exercises is that teams struggle most with the decisions and communications in the first critical hours. The technical response is usually well-rehearsed. But the leadership response — who to notify, what to say publicly, how to manage regulators, media, and staff simultaneously — is where most organisations are underprepared.

The regulatory case

Regulators are increasingly moving beyond asking organisations to have a plan. Across financial services, critical national infrastructure, healthcare, and other sectors, the expectation is now that organisations can demonstrate they have tested their response capabilities through realistic exercises.

In the UK, the FCA and PRA's operational resilience framework expects firms to test their ability to remain within impact tolerances during severe but plausible scenarios. The EU's Digital Operational Resilience Act (DORA) requires financial entities to carry out advanced threat-led penetration testing and scenario-based exercises. Similar requirements exist across the Middle East and other regulated markets where we operate.

The human case

Beyond compliance, there is a straightforward human argument. The people who will lead your organisation through a crisis deserve the chance to practise before the stakes are real. Exercising builds confidence, reveals blind spots, and creates the muscle memory that allows teams to act decisively when it matters most.

Take the first step

Whether you are starting from scratch or looking to strengthen an existing programme, we can help. Contact us to discuss your requirements.