Every PR team says it has a crisis plan. Far fewer have actually tested it against a person playing an angry reporter at 7am.
A crisis simulation, often called a tabletop exercise (TTX), is a structured rehearsal where your team responds to a fictional scenario in real time. No systems go down, no real journalists call, but the pressure and decisions are treated as if they did. The goal isn't to memorize a script, it's to find out where your plan breaks before a real crisis finds that gap for you.
Why the plan on paper always looks fine
A written crisis communications plan is a static document. It says who approves the statement, who talks to media, who updates employees.
What it can't show you is that your legal approver is on a flight, your CEO freezes on camera, or three teams think they own the response. Tabletop exercises are discussion-based, low-pressure sessions that let teams practice crisis response in a controlled setting, exactly so those gaps surface with no real damage attached.
The exercise works because it compresses time. A real crisis unfolds over hours or days; a good drill forces the same decisions into 90 minutes, so the pressure of "we need to say something now" is real even though the crisis is fake.
What a useful drill actually contains
Weak drills are read-throughs where everyone nods and agrees the plan is great. Useful drills are built to make the plan fail somewhere.
- A specific, researched scenario, not "there's a crisis." Base it on an incident type your industry has actually faced: a data breach, a product recall, an executive scandal, a viral customer complaint.
- Injects, new information dropped in mid-exercise to simulate how real crises evolve. A reporter calls with a detail you didn't share publicly. A competitor posts about it. An employee leaks a screenshot.
- A realistic media feed. Simulated reporter emails, mock social posts, and a role-player acting as a hostile journalist push participants past generic talking points into real pressure-tested language.
- Cross-functional participants, not just the PR team. Legal, HR, customer support, and the executive who'd actually be on camera all need to be in the room, because a plan that only PR has rehearsed will collapse the moment another department improvises.
- A hard time constraint. Real journalists don't wait a week for comment, so your drill shouldn't either.
If everyone in the room already knows exactly what to do and the exercise wraps early with no disagreements, you didn't test anything. Redesign it to include at least one decision nobody has a clean answer for.
Drill vs. theater: the tell
Theater is when the exercise exists so leadership can say a drill happened. It has a scenario picked for how easy it is to resolve, no real time pressure, and a debrief that's really just praise.
A real drill is uncomfortable. People get caught contradicting each other, someone realizes they don't actually have the phone number they need, and the fake statement drafted in the room is genuinely bad on the first pass. That discomfort is the entire value, because it happens now instead of during an actual crisis your company's reputation depends on.
The clearest signal you ran theater instead of a drill: nothing changes afterward. If your crisis plan, contact list, or approval chain is identical after the exercise as before it, the exercise didn't find anything, which usually means it wasn't hard enough.
Running the debrief so it sticks
The exercise itself is only half the value, the debrief is where it becomes institutional knowledge. Immediately after, while memory is fresh, walk through what broke: which decision took too long, which handoff had no clear owner, which message the CEO couldn't say convincingly.
Write the fixes down as concrete plan changes, not vague lessons. "Update legal approval to allow a designated backup approver" is actionable, "we should communicate better under pressure" is not.
Run a lightweight version at least twice a year and a full cross-functional drill annually. Muscle memory decays, and your team, tools, and spokespeople change more often than your written plan gets updated.
Scale the drill to the org
A startup's crisis simulation might be a 45-minute Slack-based exercise with five people. A public company running IPO-adjacent disclosure risk needs a full-day exercise with legal, IR, and outside counsel in the room, because the stakes and the audiences are both larger.
Match the drill's complexity to what you're actually defending against. Running a Fortune 500-style simulation for a 20-person company wastes everyone's time; running a five-minute tabletop for a company handling sensitive customer data under-prepares you badly.
The test of a good crisis simulation program isn't how polished the drills look. It's whether the real crisis, when it comes, feels like something your team has already half-lived through.