Tabletop exercises simulate real-life emergencies. If your organization has gaps in its crisis response, or there are disconnects between you and your vendors, this is the time to discover them.
|
Updated: Nov 1, 2024 INSIDE THIS ARTICLE, YOU'LL FIND: |
Today, businesses and organizations face an array of potential crises, from natural disasters to cyberattacks. Even commonplace events such as car trouble can derail business trips and opportunities, putting personnel in difficult situations that require communication and collaboration among many stakeholders.
In unpredictable circumstances, understanding how to prepare and react for any outcome is paramount. This is where tabletop exercises should come into play.
Tabletop exercises serve as invaluable tools for organizations to simulate and prepare for various emergency scenarios in a controlled environment. Through these exercises, participants can test response procedures, clarify communication channels, and identify gaps in existing emergency action plans. Additionally, organizations can use these exercises to pressure test their vendors’ capabilities in an emergency. As a result, expertly run tabletops can help businesses become more effective and resilient.
A tabletop exercise is a scenario-based discussion designed to simulate real-life emergencies. Unlike fire drills and other trainings that require physical action, tabletop exercises focus on fostering dialogue, decision-making, and collaboration among participants.
For example: An organization that sends employees to the Middle East for business trips may run through a scenario where an employee experiences a car accident on the way to a meeting. The scenario would include details about the employee – their age, gender, general health, familiarity with the location – as well as the context, such as how the employee rented the car, what assets they have with them, and where they were headed at the time of the accident. Given this situation, along with new information that could further complicate things such as a lack of reliable roadside assistance in the country, what should each stakeholder do, with whom should they communicate, and how will this issue be resolved?
Tabletop exercises are like rehearsals, where participants discuss and strategize responses to hypothetical scenarios. These exercises typically involve a diverse group of stakeholders, including representatives from security, HR, legal, communications, and other relevant departments.
The end goal of a tabletop exercise is to have a solid standard operating procedure (SOP) in place, where every stakeholder understands their roles and responsibilities in response to any event. If the exercise is conducted internally, every stakeholder in security, HR, etc. will understand what to do; if conducted between an organization and their security provider, each team will understand their role, when they should expect to hear from the other party, and what the desired outcome would be. If your organization has gaps in how it responds to a crisis, or there are disconnects between you and your vendors, this is the time to discover them.
The overall goal of a tabletop exercise is to identify an organization’s strengths and weaknesses in the communication process during an emergency or crisis. Again, this could be communication within an internal team, or between an organization and their security or duty of care provider.
The types of emergencies and crises that you can review during a tabletop range from cyberattacks to natural disasters to acts of terrorism, to the more mundane such as food poisoning incidents during work travel or misplacing travel documents – essentially, anything that could impact people or operations.
During a tabletop exercise, a team should look to accomplish the following tasks:
Tabletop exercises typically follow a structured format designed to simulate real-life crisis scenarios while facilitating constructive discussions and decision-making. These exercises often span a duration of one to two hours, although the exact timeframe may vary depending on the complexity of the scenario and the objectives of the exercise.
Participants in tabletop exercises represent various roles and functions within the organization's crisis response framework, including senior leadership, department heads, subject matter experts, and frontline staff. Each participant brings unique perspectives and expertise to the exercise, contributing to a comprehensive evaluation of the organization's readiness and response capabilities.
Every organization may choose to run a tabletop exercise in a different format, but a starting framework is as follows:
In Colombia, the government has implemented special “tourist police” (Policia de Turismo) units in major cities like Bogotá and Cartagena. These units focus on areas with high tourist traffic, aiming to enhance safety and assist visitors with any issues they may encounter. Similarly, Peru has tourism police departments that specialize in helping tourists, particularly in popular destinations like Lima and Cusco.
When bringing a team or teams together to execute a tabletop exercise, it’s important to establish rules and guidelines to put people in the best position to succeed. Examples of typical rules might include encouraging respect among participants, an expectation of confidentiality of what is discussed in the meeting, and active participation by all stakeholders, with the understanding that this is a no-fault, learning environment.
Scenario-based discussions form the core of tabletop exercises, with facilitators presenting realistic scenarios tailored to the organization's specific risks and vulnerabilities. These scenarios may include a wide range of crisis events, such as natural disasters, security incidents, medical emergencies, or cyberattacks. Through scenario-based discussions, participants are challenged to assess the situation, make decisions, and coordinate response efforts in a controlled environment.
For example, a tabletop exercise may posit that an executive at the company is on a business trip to meet high-level clients, but the morning of the meeting, they contact their duty of care provider and complain of illness. They mention where they ate dinner the night before, and describe their symptoms now, including fever, vomiting, and stomach pain. What is everyone’s first course of action?
From here, it’s time to work through new details, or “injects.”
Injects play a crucial role in tabletop exercises by introducing new developments or details into the scenario, simulating the dynamic nature of real-life crises. These injects may include additional information, unexpected events, or changing circumstances that require participants to adapt their response strategies accordingly.
Injects are strategically timed throughout the exercise to maintain engagement and challenge participants' problem-solving abilities. Facilitators use injects to escalate the scenario, introduce new challenges, or prompt specific actions from participants. By incorporating injects, tabletop exercises create a dynamic and immersive learning environment that closely mirrors the unpredictability of real-world emergencies.
Injects from the situation above might be that as the day progresses, the executive feels worse, not better. They are experiencing dehydration and body pains, and needs to be transported to a hospital for medical treatment. Given this new information, what actions is each stakeholder taking?
Active participation and engagement are essential components of successful tabletop exercises. Participants are encouraged to contribute their expertise, insights, and perspectives during scenario discussions, fostering collaboration and collective problem-solving. By actively engaging in tabletop exercises, participants gain firsthand experience in crisis response, develop critical thinking skills, and enhance their preparedness for real-world emergencies.
Facilitators play a key role in promoting active participation by encouraging open dialogue, facilitating constructive discussions, and ensuring that all voices are heard. Through active participation, organizations can leverage the diverse knowledge and expertise of their teams to identify potential gaps, refine response strategies, and strengthen overall resilience.
When tabletop exercises end, it's crucial to conduct a thorough review to identify lessons learned, strengths, and areas for improvement. Facilitators should lead debriefing sessions to gather feedback from participants and evaluate the exercise's effectiveness, fostering open communication and reflection. Organizations should then review exercise documentation, participant feedback, and post-exercise assessments to analyze performance and identify weaknesses or gaps in communication, protocol, and expectations. By addressing these gaps, organizations can streamline response efforts and enhance overall resilience, ensuring readiness in the face of evolving threats and challenges.
Every organization will run tabletop exercises in a slightly different way, but there are some things that any person in charge of running an exercise or participating in one can do to make them even more effective.
Here are five tips for the best tabletop exercises:
Tabletop exercises are essential tools for organizations to bolster their preparedness and resilience against potential crises. By simulating realistic scenarios and engaging diverse stakeholders, these exercises facilitate the identification of communication gaps, weaknesses in emergency plans, and the refinement of response strategies. Through tabletop exercises, organizations can take a proactive stance toward preparedness, ensuring they are equipped to navigate uncertainties and safeguard their operations, employees, and stakeholders.
The Global Guardian team is standing by to support your duty of care and security requirements with a comprehensive suite of solutions. To learn more about our services, complete the form below or call us at + 1 (703) 566-9463.