The First Six Hours: A Data-Exposure Crisis Simulation
Objective: Play the spokesperson through the first six hours of a live data-exposure crisis, choosing how to respond to reporters at two decision points, and see how an optimal, acceptable, or costly choice compounds into the next stage's starting conditions.
You're the designated spokesperson at Delhivery, the logistics and ecommerce fulfillment company, when a security researcher tweets that a misconfigured API exposed customer shipping addresses. A trade reporter calls with a 45-minute deadline before you have a single confirmed fact.
Decide what to tell the reporter with no facts yet, then decide how to update them three hours later once the facts are confirmed. Every choice routes to a different outcome, this can't be practiced live without a real breach, so it's played out here instead.
Before you start
What you'll need
Free path (everything below is enough to finish)
Free, shareable, prevents two team members giving different answers
Free tier covers a small shared template doc
Paid upgrades (optional, faster/deeper)
The free path (a shared log plus pre-drafted templates) is enough to run this simulation and a real small-scale crisis; a paid media-monitoring tool becomes worth it once you're tracking coverage across dozens of outlets simultaneously.
Real-time journalist database and coverage tracking beyond what free alerts catch
The process
Simulation
The 45-Minute Deadline
Hour 1A security researcher's tweet about exposed shipping addresses has 400 retweets. A trade reporter calls you, the designated spokesperson, needing comment for a story going live in 45 minutes. Legal has confirmed nothing yet.
Tweet: 400 RTs, rising. Inbound press calls: 1 confirmed, 2 voicemails. Confirmed facts: 0.
The reporter needs something in 45 minutes. What do you tell them?
Final deliverable
A decision log showing both choices made, the resulting stage-2 situation, and the final outcome, with a one-paragraph reflection on which choice most changed the story's framing.
See a reference example
Wise, Simulation Run Log Stage 1 decision: Holding statement (optimal) Outcome: Reporter ran a balanced story citing the 5pm commitment. Stage 2 decision: Full transparent update (optimal) Outcome: Coverage reframed from 'breach' to 'confirmed and responded,' affected-customer complaints dropped. Reflection: The stage-1 holding statement bought the six hours needed to get real facts without a 'no comment' story running in the meantime; the stage-2 transparency then cashed in that credibility instead of spending it on vagueness.
Success criteria
You're done when you can:
- Chooses the optimal or acceptable path at both decision points and can explain why the costly options fail
- Reflection correctly names how the stage-1 choice changed the starting conditions of stage 2