OPENING & CONFIDENCE CHECK
Warmup — Before the first alert
Confirm every participant can vote and capture baseline role confidence.
ReFlex
Train. Repeat. Improve.
THE CYBER FITNESS SUITE
INSIDE AN EXERCISE · BANKING
ZERO HOURThe Friday Cut-off
A payroll deadline. Untrusted payment records. Recovery under pressure.
A fictional Friday cyber crisis at Fortuna Bank. The central question is whether payments and recovery evidence can be trusted, while employers and vulnerable customers cannot wait for perfect information.
6–50Participants
105 minFacilitated exercise
10Decisions
AdvancedDifficulty
THE CHALLENGE
Payments can be available.
But can they be trusted?
Fortuna Bank faces a payroll deadline while evidence conflicts. Security, operations and business leaders must coordinate containment, customer protection and recovery without waiting for perfect information.
THE EXERCISE JOURNEY
A crisis that unfolds in phases.
Follow the story, weigh the trade-offs and agree what comes next. The facilitator controls the pace; fictional story time advances between phases.
- 01
- 02
1 DECISION
Act I — A normal Friday, until it is not
Separate facts from assumptions and establish decision ownership.
- 03
2 DECISIONS
Act II — Availability is not integrity
Contain compromise while preserving trustworthy transaction evidence.
- 04
2 DECISIONS
Act III — Two clocks and an unreliable witness
Manage extortion, communications and reporting without waiting for perfect evidence.
- 05
2 DECISIONS
Act IV — The recovery trap
Establish evidence for a safe recovery rather than a rapid reboot.
- 06
2 DECISIONS
Act V — The second incident
Connect data exposure to customer harm without confusing it with ledger compromise.
- 07
1 DECISION
Act VI — A green dashboard is not a recovery decision
Set defensible service and customer-remediation gates.
TRAINING PRIORITIES
Five perspectives.
One shared response.
These weights show each component’s share of the overall exercise score. They remain fixed while the team’s choices and story events change the component scores.
20%
Security
20%
Financial
20%
Operations
20%
Regulatory
20%
Reputation
KEY TAKEAWAYS
Habits to take
back to work.
- 01
Separate service availability, payment integrity and customer-data exposure.
- 02
Protect customers while reconciling uncertain transaction status.
- 03
Test supplier dependencies and evidence-based recovery gates.
- 04
Coordinate truthful reporting, communications and fraud prevention.
- 05
Balance harm, continuity and financial resilience under a bank-specific deadline.
PERSPECTIVES IN THE ROOM
Bring the whole
response together.
Explore the responsibilities and constraints of the people involved. Every submitted vote carries equal weight.
REFLECT, THEN FOLLOW THROUGH
The conversation continues
after the final decision.
Replay the key moments.
Discuss what changed your team’s response and where evidence or ownership remained unclear.
Turn learning into action.
Choose practical improvements to payment reconciliation, escalation and recovery acceptance.
Build confidence through practice.
Assign owners, agree dates and test the improvements in a follow-up exercise.
TRAIN. REPEAT. IMPROVE.
Experience ZERO HOUR.
Explore the decisions and live dashboard in a self-paced demo, then shape the exercise around your team.