Resilience

Run cyber exercises from plan to report, in one place

Define scope, sequence injects, align responders, and run a guided simulation with decisions, follow-ups, and review captured in the same Resilience workflow.

  • Structured planning, injects, and scope before the room
  • Facilitator-led simulation run with captured outcomes
  • Review, AAR, and export for leadership and next steps
Cyber Exercise simulation broadcast: scenario scene with narration and alert, scene and beat progress, roles in play, expected responders, and facilitator playback controls.

Plan the exercise and author the scenario

Start with structure. Define the exercise, set the scope, and build the scenario as an ordered sequence of injects. Facilitators can shape the flow before the room starts, with the context and sequencing needed to run the exercise deliberately.

  • Exercise definition and scoped systems, servers, and externals
  • Inject order matched to delivery
  • Facilitator prep and context before go-live

Exercise workspace: overview, phases, and facilitator

Cyber Exercise workspace in Resilience: navigation, Overview, Planning, Simulation run, and Review and AAR tabs, exercise status, phase shortcuts, Leadership facilitator assignment, and run phase posture panels.

Team reaction: decisions and follow-ups

Team reaction mode: capture decisions and follow-ups for the scene, facilitator notes, and navigation to review after the final scene.

Run the exercise and capture outcomes

Guide the room through the scenario in a structured run. As the exercise unfolds, capture decisions and follow-ups directly against the exercise so outcomes stay connected to the scenario instead of disappearing into meeting notes.

  • Expected responders set per scene
  • Structured, facilitator-led run
  • Decisions and follow-ups on the exercise record

What Cyber Exercises delivers

A structured workflow for planning, running, reviewing, and reporting on cyber exercises inside Resilience.

Scope tied to the scenario

Define the exercise around the systems, servers, and external parties that matter to the incident.

Ordered inject sequence

Author the scenario as a structured series of injects instead of a loose workshop document.

Role-aligned participation

Use your response roster and expected responders to clarify who each scene is expected to draw in.

Facilitator-led simulation run

Advance through the exercise in a guided run view that keeps the team focused on the current scene.

Decisions and follow-ups captured

Record decisions and actions in the same workflow, so important outcomes do not disappear into meeting notes.

Review and export

Close out the exercise with AAR inputs and a structured report that can be printed or saved as PDF.

From plan to report without losing the thread

One workflow from preparation through close-out, with the scenario, the room, and the outcomes kept together.

1

Define the exercise

Set the title, scenario type, facilitator, and scope across systems, servers, and external parties.

2

Build the scenario

Author injects, sequence the exercise, and add facilitator notes and responder expectations.

3

Align the cast

Set the roles involved in the exercise and clarify who each scene is expected to draw in.

4

Run the simulation

Move through injects and phases in a facilitator-led run, capturing decisions and follow-ups as the exercise unfolds.

5

Review and report

Capture lessons learned, complete the exercise, and generate a structured report for stakeholders.

  • Facilitator-led tabletop exercises with a clear record
  • Structured captures and reporting, including print or save as PDF
  • Works as part of your wider Resilience programme in CloudPilot

See Cyber Exercises in the context of your resilience programme

Book a walkthrough to see planning, run, review, and export in one flow.