• Menu
  • Skip to right header navigation
  • Skip to main content
  • Skip to secondary navigation
  • Skip to primary sidebar
  • Skip to footer

Before Header

Bryghtpath

Business Continuity and Crisis Management Consultants

  • About
        • About Bryghtpath

        • Our Core Values

        • Meet our Team

        • About Bryghtpath
          • Case Studies & Results
          • Certifications and Awards
          • Contact Bryghtpath
          • Contract Vehicles
          • Media & Professional Appearances
          • Our Clients
          • Our Proven Process
          • Security & Compliance
          • Strategic Partners
          • Work with Us
  • Capabilities
        • Our Capabilities
        • We help your organization strategically navigate uncertainty and disruption.

        • Case Studies & Results

        • Business Continuity as a Service

        • Business Continuity
          • Business Continuity - Overview
          • Business Continuity Software
          • IT Disaster Recovery
          • Resiliency Diagnosis®️
        • Crisis Management
          • Crisis Management - Overview
          • Crisis Communications
          • Crisis Exercises & Simulations
          • Cyber Incident Response Planning
          • Crisis Playbook®️
          • Global Security Operations Center (GSOC)
          • Resiliency Diagnosis®️
        • Other Capabilities
          • Coaching
          • Intelligence & Global Security Consulting
          • Speaking
          • Training
        • Resilience as a Service
          • Business Continuity as a Service (BCaaS)
        • Case Studies & Results
        • Industries
  • Insights
  • Products
        • Our Products

          College Classroom - Mature Teacher
        • Crisis Playbook™️

        • Exercise in a Box™️

        • Exercise in a Day™️

        • Books
          • Book – From Panic to Poise: Crisis Management in the Modern World
          • Book – The Continuity Code: Mastering Business Resilience
        • Crisis Playbook™️
          • Overview
          • Active Shooter Plan
          • Emergency Response Guide
          • Fatality
          • Food/Product Recall
          • Protest
          • Violent Attack
        • Maturity Models
          • Overview
          • ASIS Workplace Violence and Active Assailant
          • FFEIC Maturity Model – Business Continuity
          • ISO 22301 – Business Continuity
          • ISO 22361 – Crisis Management
          • ISO 27031 - IT Disaster Recovery
          • NIST 800-53 Contingency Planning Maturity Model
        • Templates & More
          • After-Action Process & Templates
          • Awareness Collateral
          • Business Continuity Plan Templates
          • Crisis Management Plan Templates
          • Disaster Recovery Plan Templates
          • Job Descriptions
  •  

Mobile Menu

  • About
    • About Bryghtpath
      • Case Studies & Results
      • Certifications and Awards
      • Contact Bryghtpath
      • Contract Vehicles
      • Media & Professional Appearances
      • Our Clients
      • Our Proven Process
      • Security & Compliance
      • Strategic Partners
      • Work with Us
  • Capabilities
    • Our Capabilities
    • Business Continuity
      • Business Continuity – Overview
      • Business Continuity Software
      • IT Disaster Recovery
      • Resiliency Diagnosis®️
    • Crisis Management
      • Crisis Management – Overview
      • Crisis Communications
      • Crisis Exercises & Simulations
      • Cyber Incident Response Planning
      • Crisis Playbook®️
      • Global Security Operations Center (GSOC)
      • Resiliency Diagnosis®️
    • Resilience as a Service
      • Business Continuity as a Service (BCaaS)
    • Other Capabilities
      • Coaching
      • Intelligence & Global Security Consulting
      • Speaking
      • Training
    • Case Studies & Results
    • Industries
  • Insights
  • Products
    • Books
      • Book – From Panic to Poise: Crisis Management in the Modern World
      • Book – The Continuity Code: Mastering Business Resilience
    • Crisis Playbook™️
      • Overview
      • Active Shooter Plan
      • Emergency Response Guide
      • Fatality
      • Food/Product Recall
      • Protest
      • Violent Attack
    • Maturity Models
      • Overview
      • ASIS Workplace Violence and Active Assailant
      • FFEIC Maturity Model – Business Continuity
      • ISO 22301 – Business Continuity
      • ISO 22361 – Crisis Management
      • ISO 27031 – IT Disaster Recovery
      • NIST 800-53 Contingency Planning Maturity Model
    • Templates & More
      • After-Action Process & Templates
      • Awareness Collateral
      • Business Continuity Plan Templates
      • Crisis Management Plan Templates
      • Disaster Recovery Plan Templates
      • Job Descriptions
  •  

Executive & Board Exercises

You are here: Home / Capabilities / Crisis Exercises & Simulations / Executive & Board Exercises

The decisions only you can make.
Practiced before they’re real.

Pay the ransom or refuse it. Notify the regulator now or wait for facts. Tell the board tonight or in the morning. In a real crisis, these calls land on a handful of people at the top of the house, under time pressure, with incomplete information.

Our executive and board exercises put those decisions on the table before reality does, with your own outside counsel in the room.

  • Built for executive teams, boards, and the seam between them
  • Designed around your calendar: your staff carries the prep, your leaders spend hours, not days
  • Grounded in what boards actually face: cyber extortion, reputational fire, regulatory scrutiny

Schedule an Initial Consultation
Explore the Scenario Library

The Gap the Data Shows

Deloitte’s Center for Board Effectiveness and the Society for Corporate Governance surveyed public and private company boards on crisis readiness.

Two findings should make any director uncomfortable:

  • Boards have plans they have never tested. Most companies report a formal, documented crisis plan. Whether and how often that plan is reviewed or tested “varies across organizations.” A plan that has never been exercised is a theory.
  • Nobody agrees on who decides what. Whether companies delineate board versus management responsibilities in a crisis ranged from 25% to 73% depending on the crisis type. That seam, the handoff between management and the board, is the highest-stakes handoff in any crisis, and most organizations have never watched it happen.

The companion Deloitte/NACD guidance draws the conclusion we build on: only formal simulation can show how well the plan, and the people, will actually function.

That is precisely what these exercises do.

What We Exercise

  • The hard calls, in real time. Pay or don’t pay, with a live negotiation in progress. When to notify members, customers, regulators, and the market. What to tell employees before the media tells them first.
  • The board/management seam. When does the board get informed, consulted, or decide? We put the handoff under pressure on purpose, because it is the seam the survey data says is undefined.
  • Counsel and advisors in their real roles. Your outside counsel, forensics, and communications advisors play themselves. Executives practice using them the way they would in a real incident, including under privilege.
  • Communication under fire. Approve the holding statement. Take the angry-stakeholder call. Decide what the CEO says, and when.

How It Works

  • Design (4 to 8 weeks, carried by your staff and ours). We interview a small set of leaders and advisors, build the scenario from real events and your actual risk profile, and iterate it with your sponsor. Your executives see nothing until the room.
  • The exercise (2 to 4 hours of executive time). Facilitated by a senior practitioner who has briefed executives in real crises. Decision-focused moves, live injects, real advisors, and no slide-reading. Virtual, in-person, or in the boardroom.
  • The debrief. Hot wash in the room, then a concise after-action readout built for executives and directors: what worked, where the seams are, and the handful of fixes that matter. Board-presentation ready.

Scenarios Built for the Top of the House

  • Cyber extortion with a live ransom negotiation and disclosure clock
  • Deepfake of a senior leader moving markets or money
  • Regulatory investigation arriving alongside an operational crisis
  • Reputational fire: viral misinformation, executive misconduct, franchisee misconduct
  • Activist, workplace violence, or geopolitical events touching your people

Sourced from the scenario library and the crises boards report actually facing (reputational, cyber, supply chain for public companies; regulatory, cyber, litigation for private). Every exercise is custom-built.

Explore the Scenario Library

When Boards and Executive Teams Call Us

  • The board asked when leadership last practiced a crisis, and there was no good answer
  • A peer company’s crisis made the risk concrete
  • New CEO, new GC, or a reconstituted board that has never worked a crisis together
  • The crisis team exercises regularly, but the executive layer has never been tested
  • D&O, audit committee, or regulator expectations now name crisis preparedness

“

The exercise Bryghtpath designed helped us strengthen executive alignment and validated our crisis plans under pressure. The after-action insights were immediately actionable.

Chief Operating Officer · Regional Health System

$18M → $8M

a live ransom negotiation, practiced by executives in-exercise

25–73%

the spread in whether companies define board vs. management crisis roles (Deloitte / Society for Corporate Governance)

40+

after-action recommendations adopted by a single client

Health InsuranceDeciding Under Fire: An Executive Cyber-Extortion Exercise for a Major Health InsurerExecutive leadership tested the decisions that matter most in a ransomware crisis: whether to pay, when to notify members, and how to face regulators.Read the case study →UtilitiesC-Level Active Shooter Exercise for a Major Utility CompanyA customized executive-level exercise elevated crisis response capability and engagement at the top of a major electric, gas, and nuclear utility.Read the case study →TechnologyFrom Disruption to Action: Preparing a Technology Firm’s C-Suite for CrisesA customized C-Suite exercise built around a major vendor disruption sharpened executive readiness and produced actionable recommendations.Read the case study →
Explore Our Case Studies

What You Get

  • Custom scenario designed from leader interviews and your actual risk profile
  • Senior practitioner facilitation, with your counsel and advisors in their real roles
  • A decision log of what your leadership actually chose, and why
  • Concise executive after-action readout, board-presentation ready
  • A defined path for the next cycle: the executive layer joins the enterprise simulation, or the board exercises annually

Frequently Asked Questions

How much executive time does this take?

Most executive and board exercises run 2 to 4 hours. The design work happens with your staff and ours over 4 to 8 weeks, so your leaders spend hours in the room, not days in preparation.

What does an executive exercise cost?

Executive and board exercises are scoped to your organization after a consultation. Facilitated tabletop exercises start at $25,000; executive engagements are quoted based on scenario complexity, advisor involvement, and format.

Can the board and management team exercise together?

Yes, and that seam is often the point. Survey data shows most companies have never defined board versus management responsibilities in a crisis. We design exercises that put that handoff under pressure deliberately.

Will our executives take it seriously?

Yes, because it does not feel like training. The scenario is built from your actual risk profile, your outside counsel and advisors play their real roles, and the decisions are real ones with no scripted answers. Executives stay engaged because the pressure is credible.

Are the findings confidential?

Yes. Executive exercise findings are handled discreetly, distribution is limited to the audience you define, and where appropriate the exercise can be structured with counsel in a privileged setting.

What scenarios work best at the board level?

The crises boards actually face: cyber extortion with a disclosure clock, reputational fires, regulatory investigations, and major litigation. The best scenarios force decisions only the top of the house can make.


Your executives will make
these decisions eventually.

The only question is whether the first rehearsal is real.

Fifteen minutes with a practitioner gets you a straight answer on format, timing, and cost.
Schedule an Initial Consultation

Footer

Contact

BRYGHTPATH LLC
+1.612.235.6435

PO Box 131416
Saint Paul, MN 55113
USA


contact@bryghtpath.com

  • Facebook
  • LinkedIn
  • RSS
  • Twitter
  • YouTube

Our Capabilities

  • Business Continuity
    • Business Continuity Software
    • Coaching
    • IT Disaster Recovery Consulting Services
    • Resiliency Diagnosis®️
  • Crisis Communications
  • Crisis Exercises & Simulations
  • Crisis Management
    • Cyber Incident Response Planning
    • Global Security Operations Center (GSOC)
  • Resilience as a Service
    • Business Continuity as a Service (BCaaS)
  • Speaking
  • Training

Our Free Courses

Business Continuity 101

Crisis Communications 101

Crisis Management 101

Our Products

After-Action Templates

Books

Business Continuity Plan Templates

Communications & Awareness Collateral Packages

Crisis Plan Templates

Crisis Playbook®

Disaster Recovery Templates

Exercise in a Box®

Exercise in a Day®

Maturity Models

Ready-Made Crisis Plans

Resilience Job Descriptions

Pre-made Processes & Templates

Site Footer

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.


Bryghtpath®, Crisis Management Academy®, Crisis Playbook®, Exercise in a Box®, Exercise in a Day®, Resiliency Diagnosis®, Resilience Operating Model®
and their respective logos are registered trademarks of Bryghtpath LLC in the United States and other countries.


About Bryghtpath LLC | Disclaimer | Privacy | Status Page | Terms of Use

Proudly powered by Mai Theme, the Genesis Framework, and Wordpress.