Exercise Builder

null

[{"category": "Cyber", "context": "At 07:45 on a Monday morning the IT helpdesk begins receiving reports of encrypted files and ransom notes appearing on workstations across two sites. Core business applications are unavailable. The attacker demands payment within 72 hours or threatens to publish exfiltrated data.", "default_objectives": ["Activate and test the Cyber Incident Response Plan", "Assess communication and escalation protocols", "Evaluate decision-making under time pressure", "Test data recovery and system restoration procedures", "Assess third-party and regulatory notification processes"], "description": "Critical systems are encrypted by ransomware, threatening operational continuity and data integrity.", "id": 1, "is_builtin": true, "name": "Ransomware Attack", "sample_injects": ["IT team confirms 60% of servers are encrypted", "Ransom demand of $2M received via email", "Media outlet contacts PR team for comment", "Regulator requests a status update within 4 hours", "Backup systems found to also be compromised", "Key supplier reports they cannot receive orders"]}, {"category": "Health \u0026 Safety", "context": "A respiratory illness has spread rapidly within the workforce. Within 72 hours, 40% of staff across all departments are absent. Public health guidance recommends isolation for close contacts. No immediate end to the outbreak is in sight.", "default_objectives": ["Test people resilience and cross-training coverage", "Assess remote-working and reduced-capacity operating procedures", "Evaluate staff welfare and communication channels", "Test prioritisation of critical versus non-critical activities", "Assess regulatory reporting obligations"], "description": "A rapidly spreading illness causes 40% staff absence, disrupting critical operations.", "id": 4, "is_builtin": true, "name": "Pandemic / Mass Staff Absence", "sample_injects": ["Three members of the senior leadership team are absent simultaneously", "A key regulatory submission deadline falls within the exercise period", "A client requests evidence of business continuity arrangements", "Occupational Health recommends further protective measures", "Media enquiry about the organisation\u0027s response to the outbreak"]}, {"category": "Natural Disaster", "context": "Unprecedented rainfall causes flash flooding in the city centre. The primary office building is flooded to ground-floor level, all staff have been evacuated, and access is prohibited by emergency services. The situation is expected to persist for at least 5 days.", "default_objectives": ["Activate invocation of the Business Continuity Plan", "Test work-from-home and alternate-site arrangements", "Assess staff communication and welfare protocols", "Evaluate critical process recovery within RTO targets", "Test supplier and customer communication procedures"], "description": "Extreme rainfall causes flooding that renders the primary office inaccessible and damages infrastructure.", "id": 2, "is_builtin": true, "name": "Severe Flooding", "sample_injects": ["HR confirms 30% of staff cannot access the VPN", "A critical server room is flooded; primary data centre offline", "A key customer threatens contract cancellation due to service failure", "Local authority requests the building for use as an emergency shelter", "Media arrives outside the building"]}, {"category": "Reputational", "context": "A national newspaper publishes an expos\u00e9 alleging malpractice by a senior employee. Social media amplifies the story rapidly. The story is partially inaccurate but contains some factual elements. The CEO is overseas and unreachable for 4 hours.", "default_objectives": ["Test crisis communications and spokesperson protocols", "Assess social media monitoring and response procedures", "Evaluate escalation and decision-making in the absence of senior leadership", "Test legal and regulatory notification obligations", "Assess internal staff communication during a reputational event"], "description": "A damaging story about the organisation breaks in national media, requiring immediate crisis communications.", "id": 6, "is_builtin": true, "name": "Reputational Crisis", "sample_injects": ["Story goes viral with 10,000 social media mentions within 1 hour", "Three major clients call to request immediate reassurance", "Regulator contacts the compliance team for an urgent call", "The named employee contacts HR demanding to respond publicly", "A TV news crew arrives at head office"]}, {"category": "Supply Chain", "context": "The organisation\u0027s primary IT managed-service provider announces it has entered administration with immediate effect. All support contracts are suspended, and access to hosted systems may be withdrawn within 48 hours.", "default_objectives": ["Test third-party dependency identification and escalation", "Assess contingency arrangements for critical services", "Evaluate contract and legal response procedures", "Test communication to internal stakeholders and clients", "Identify alternative supplier options and onboarding speed"], "description": "A sole-source critical supplier enters administration, cutting off a key input to operations.", "id": 3, "is_builtin": true, "name": "Critical Supplier Failure", "sample_injects": ["Supplier confirms all SLAs are immediately suspended", "Hosted application credentials may be revoked within 24 hours", "Legal team identifies a data-custody clause requiring urgent action", "Alternative supplier identified but needs 5 days to mobilise", "Client SLA breach notification issued automatically"]}, {"category": "Technology", "context": "At 14:30 on a Tuesday, a power surge followed by a cooling failure causes an unplanned shutdown of the primary data centre. All production systems are offline. The DR site is available but failover has not been fully tested in 18 months.", "default_objectives": ["Test the IT Disaster Recovery Plan invocation", "Assess DR site failover procedures and timelines", "Evaluate internal and external communication protocols", "Test manual workaround procedures for critical processes", "Assess RTO/RPO achievement against targets"], "description": "An unplanned outage at the primary data centre takes all production systems offline.", "id": 5, "is_builtin": true, "name": "Data Centre Outage", "sample_injects": ["DR failover estimated to take 6 hours \u2014 RTO is 4 hours", "Customer-facing portal has been down for 2 hours; complaints escalating", "A regulatory transaction cut-off deadline is in 3 hours", "DR site network connectivity is intermittent", "Media pick up on the outage and request a statement"]}]

{"aim": "To evaluate Barwon Water\u0027s response and recovery capabilities in managing a burst water main incident, ensuring continuity of critical services and compliance with regulatory obligations.", "audit_findings": "", "builder_stage": 7, "business_impacts": ["Customer Impact", "Service Outage", "Reputational Impact"], "complexity": "moderate", "controls_to_test": "", "created_at": "2026-06-10T02:45:19.864780", "dependencies": ["People", "Site / Facility", "Emergency Services", "Supplier / Vendor"], "description": "", "discussion_breakpoints": true, "disruption_level": "", "duration_minutes": 120, "evaluation_checklist": null, "exercise_category": "", "exercise_format": "tabletop", "exercise_type": "tabletop", "external_stakeholders": ["Regulator", "Suppliers", "Government", "Emergency Services"], "facilitator_guide": null, "facilitator_name": "", "functions_in_scope": ["Executive / Crisis Management Team", "Business Continuity", "Operations", "Facilities", "External Agency Liaison"], "has_observers": false, "has_role_players": false, "hot_wash": true, "id": 133, "inject_cadence_minutes": 8, "inject_channels": ["Email", "Phone Call", "Teams / Slack", "radio", "Supplier Update", "News Bulletin", "Social Media Post"], "inject_count": 12, "injects_data": [{"branch_condition": null, "channel": "Teams", "content": "Customer called about low water pressure in Grovedale. Any updates? They\u0027re quite upset.", "delivered_at": "2026-06-12T07:01:44.139846", "evaluation_criteria": "Timely acknowledgment and coordination with Ops.", "exercise_id": 133, "expected_actions": "Participants should acknowledge and promise to investigate, then relay information to relevant teams.", "facilitator_notes": "Observe CMT\u0027s prioritization of customer concerns. Note any gaps in information flow.", "id": 134, "image_required": false, "inject_type": "comms", "notes": null, "objective_links": [1, 2], "phase_id": 104, "phase_name": "Initial Response", "recipient": "Crisis Management Team", "response": null, "sender": "Customer Service", "sequence_number": 1, "status": "delivered", "team_assignment": ["all"], "time_offset_minutes": 15, "title": "Ambiguous Customer Complaint", "video_script": "Attention team, we have an urgent update from Customer Service. A customer has reported experiencing low water pressure in the Grovedale area. They are notably upset and seeking immediate answers. As this situation unfolds, it\u0027s crucial for us to gather information quickly and coordinate our response effectively. Please prioritize this issue and update the team with any developments or insights. Let\u0027s ensure we address the customer\u0027s concerns promptly and professionally.", "video_status": "ready", "video_talk_id": "clp_T4Or6rd1U2t0ClDv6VCp8", "video_ticker": "Ambiguous Customer Complaint", "video_url": "https://d-id-clips-prod.s3.us-west-2.amazonaws.com/auth0%7C6a1d0207e4bd08294f2c2620/clp_T4Or6rd1U2t0ClDv6VCp8/v2_public_Rian_NoHands_RedJacket_Lobby%40eEW_j8_sK6.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Content-Sha256=UNSIGNED-PAYLOAD\u0026X-Amz-Credential=AKIA5CUMPJBIJ7CPKJNP%2F20260612%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20260612T053215Z\u0026X-Amz-Expires=86400\u0026X-Amz-Signature=149957ec85224238a29d97a2f4d95afdb5d95a48a47cd9c0070b1feee0b4de80\u0026X-Amz-SignedHeaders=host\u0026x-amz-checksum-mode=ENABLED\u0026x-id=GetObject"}, {"branch_condition": null, "channel": "Phone", "content": "We\u0027ve just received reports of a burst water main affecting supply to the Geelong area. Immediate action is needed.", "delivered_at": null, "evaluation_criteria": "CMT activation within 10 minutes of notification.", "exercise_id": 133, "expected_actions": "Participants should activate the CMT and begin initial situation assessment.", "facilitator_notes": "Ensure CMT\u0027s rapid convening. Note any delays in team response.", "id": 133, "image_required": false, "inject_type": "escalation", "notes": null, "objective_links": [1], "phase_id": 104, "phase_name": "Initial Response", "recipient": "Crisis Management Team", "response": null, "sender": "Operations Manager", "sequence_number": 2, "status": "pending", "team_assignment": ["all"], "time_offset_minutes": 5, "title": "Initial Water Main Burst Notification", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "Email", "content": "Hello, can you confirm reports of a burst water main affecting service in Geelong? What is Barwon Water doing to address this?", "delivered_at": null, "evaluation_criteria": "Response sent within 15 minutes, consistent with golden rules.", "exercise_id": 133, "expected_actions": "Draft and send a holding statement, ensuring factual accuracy.", "facilitator_notes": "Encourage prompt and accurate media response. Watch for adherence to the \u0027one voice\u0027 rule.", "id": 135, "image_required": false, "inject_type": "comms", "notes": null, "objective_links": [2], "phase_id": 105, "phase_name": "Communication and Coordination", "recipient": "Communications Lead", "response": null, "sender": "Local News Reporter", "sequence_number": 3, "status": "pending", "team_assignment": ["all"], "time_offset_minutes": 30, "title": "Media Inquiry on Water Supply Disruption", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "Phone", "content": "Just spoke with our pipe supplier. Delivery of replacement parts might be delayed. Checking alternatives.", "delivered_at": null, "evaluation_criteria": "Third-party coordination actions logged and alternatives identified.", "exercise_id": 133, "expected_actions": "Identify alternative suppliers and update procurement strategy.", "facilitator_notes": "Push participants to consider alternative supply options and document decisions.", "id": 136, "image_required": false, "inject_type": "decision", "notes": null, "objective_links": [5], "phase_id": 105, "phase_name": "Communication and Coordination", "recipient": "Crisis Management Team", "response": null, "sender": "Supplier Liaison", "sequence_number": 4, "status": "pending", "team_assignment": ["all"], "time_offset_minutes": 40, "title": "Ambiguous Supplier Update", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "News Bulletin", "content": "Residents in Geelong are facing water shortages after a major water main burst. Authorities are working to restore supply.", "delivered_at": "2026-06-11T11:02:04.566254", "evaluation_criteria": "Timeliness and accuracy of public communication.", "exercise_id": 133, "expected_actions": "Issue a public update and reassure affected communities.", "facilitator_notes": "Note participant response to increased public pressure.", "id": 137, "image_required": false, "inject_type": "escalation", "notes": null, "objective_links": [3], "phase_id": 106, "phase_name": "Sustained Operations", "recipient": "General Public", "response": null, "sender": "Local Radio", "sequence_number": 5, "status": "delivered", "team_assignment": ["all"], "time_offset_minutes": 60, "title": "Water Supply Impact Escalation", "video_script": "A major water main burst in Geelong is causing severe water shortages for residents. The rupture happened early this morning, affecting thousands of homes and businesses. Local authorities are on-site, working around the clock to fix the issue. They estimate repairs could take up to 48 hours. In the meantime, residents are urged to conserve water and use emergency supplies. Bottled water distribution points are being set up across the city. Authorities promise regular updates to keep the public informed. Stay tuned for more as this situation develops. Live from the newsroom, I\u0027m Local Radio, BC Studio News.", "video_status": "ready", "video_talk_id": "clp_k4zpToRuHTsyqY2hVxZR3", "video_ticker": null, "video_url": "https://d-id-clips-prod.s3.us-west-2.amazonaws.com/auth0%7C6a1d0207e4bd08294f2c2620/clp_k4zpToRuHTsyqY2hVxZR3/v2_public_Alyssa_NoHands_RedSuite_Lobby%40qtzjxMSwEa.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Content-Sha256=UNSIGNED-PAYLOAD\u0026X-Amz-Credential=AKIA5CUMPJBIJ7CPKJNP%2F20260611%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20260611T110143Z\u0026X-Amz-Expires=86400\u0026X-Amz-Signature=a99ba81f8b5067e076c764870e617ead7efa90adbddff48e3b3289921f7fba30\u0026X-Amz-SignedHeaders=host\u0026x-amz-checksum-mode=ENABLED\u0026x-id=GetObject"}, {"branch_condition": null, "channel": "Social Media Post", "content": "Our water\u0027s been off for hours in Geelong! When will this be fixed? #BarwonWater #Outage", "delivered_at": null, "evaluation_criteria": "Response time and empathy shown in social media handling.", "exercise_id": 133, "expected_actions": "Respond to the post with empathy, providing an update and contact info.", "facilitator_notes": "Test use of social media monitoring and response capabilities.", "id": 138, "image_required": false, "inject_type": "comms", "notes": null, "objective_links": [2], "phase_id": 106, "phase_name": "Sustained Operations", "recipient": "Public", "response": null, "sender": "Customer", "sequence_number": 6, "status": "pending", "team_assignment": ["all"], "time_offset_minutes": 70, "title": "Customer Social Media Outcry", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "Email", "content": "Reminder: Notification to the water authority must be sent within the hour. Please confirm submission.", "delivered_at": "2026-06-12T05:21:35.055384", "evaluation_criteria": "Compliance with notification timeframe and documentation.", "exercise_id": 133, "expected_actions": "Prepare and send regulatory notification with documented evidence.", "facilitator_notes": "Emphasize regulatory deadlines. Encourage precise tracking of notification requirements.", "id": 139, "image_required": false, "inject_type": "action", "notes": null, "objective_links": [4], "phase_id": 107, "phase_name": "Regulatory and Recovery Actions", "recipient": "Crisis Management Team", "response": null, "sender": "Legal Compliance Officer", "sequence_number": 7, "status": "delivered", "team_assignment": ["all"], "time_offset_minutes": 85, "title": "Regulatory Notification Reminder", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "Radio", "content": "Heavy rains expected across Victoria over the next 24 hours, potentially worsening current water disruptions.", "delivered_at": null, "evaluation_criteria": "Proactive adjustment of recovery strategies.", "exercise_id": 133, "expected_actions": "Re-evaluate recovery plans considering weather forecast.", "facilitator_notes": "Watch for CMT\u0027s adaptation to evolving conditions.", "id": 140, "image_required": false, "inject_type": "information", "notes": null, "objective_links": [3, 4], "phase_id": 107, "phase_name": "Regulatory and Recovery Actions", "recipient": "Public", "response": null, "sender": "Weather Alert Service", "sequence_number": 8, "status": "pending", "team_assignment": ["all"], "time_offset_minutes": 95, "title": "Unexpected Weather Complication", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "Teams", "content": "Quick update needed on recovery efforts and expected timeline. Board meeting in 15 minutes.", "delivered_at": "2026-06-12T05:23:07.755461", "evaluation_criteria": "Clarity and conciseness in briefing back to executives.", "exercise_id": 133, "expected_actions": "Prepare a brief recovery update with key timelines.", "facilitator_notes": "Test management\u0027s succinctness and clarity in reporting.", "id": 141, "image_required": false, "inject_type": "decision", "notes": null, "objective_links": [4], "phase_id": 107, "phase_name": "Regulatory and Recovery Actions", "recipient": "Crisis Management Team", "response": null, "sender": "CEO", "sequence_number": 9, "status": "delivered", "team_assignment": ["all"], "time_offset_minutes": 100, "title": "Executive Inquiry on Recovery Progress", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": null, "channel": "Internal Memo", "content": "Subject: Recovery Plan Activation\n\nTeams,\n\nWe are transitioning to our recovery phase following the water main burst incident. Please follow your team\u0027s specific recovery plans and report progress by EOD.", "delivered_at": null, "evaluation_criteria": "Effectiveness of recovery activation and internal communication.", "exercise_id": 133, "expected_actions": "Activate recovery plans and communicate the transition clearly.", "facilitator_notes": "Ensure recovery initiation is clear and structured.", "id": 142, "image_required": false, "inject_type": "action", "notes": null, "objective_links": [3], "phase_id": 107, "phase_name": "Regulatory and Recovery Actions", "recipient": "All Staff", "response": null, "sender": "Crisis Management Team", "sequence_number": 10, "status": "pending", "team_assignment": ["all"], "time_offset_minutes": 105, "title": "Recovery Plan Activation", "video_script": null, "video_status": "none", "video_talk_id": null, "video_ticker": null, "video_url": null}, {"branch_condition": "", "channel": "News Bulletin", "content": "Attention. We\u0027ve got a crowd forming outside the headquarters. Residents are demanding updates and asking for bottled water. Security\u0027s managing the situation, but we need a plan to address this quickly.", "delivered_at": "2026-06-12T05:23:23.040432", "evaluation_criteria": "Assess the team\u0027s ability to quickly formulate and communicate a response plan, including effective crowd management and resource allocation to meet residents\u0027 needs.", "exercise_id": 133, "expected_actions": "The Crisis Management Team should convene to devise a strategy for addressing the residents\u0027 concerns, coordinating with the communications team to provide timely updates and arranging for the distribution of bottled water if necessary.", "facilitator_notes": "", "id": 186, "image_required": false, "inject_type": "information", "notes": null, "objective_links": [], "phase_id": null, "phase_name": "", "recipient": "", "response": null, "sender": "", "sequence_number": 11, "status": "delivered", "team_assignment": ["all"], "time_offset_minutes": 0, "title": "Residents Demand Immediate Action", "video_script": "Breaking news this hour. A large group of residents has gathered outside the city water department headquarters. They\u2019re demanding immediate updates and access to bottled water. This comes after reports of possible contamination in the local water supply. Security teams are on-site managing the situation, but tensions are high. The city has yet to release an official statement or a plan to address the crowd\u2019s concerns. Residents are urging prompt action to ensure safe drinking water. Authorities say they are working on a response. We will continue to follow this developing story. Live from the newsroom, I\u0027m BC Studio Correspondent, BC Studio News.", "video_status": "ready", "video_talk_id": "clp_b3K22d_nvs-IVSTgzKh1O", "video_ticker": null, "video_url": "https://d-id-clips-prod.s3.us-west-2.amazonaws.com/auth0%7C6a1d0207e4bd08294f2c2620/clp_b3K22d_nvs-IVSTgzKh1O/v2_public_Alyssa_NoHands_RedSuite_Lobby%40qtzjxMSwEa.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Content-Sha256=UNSIGNED-PAYLOAD\u0026X-Amz-Credential=AKIA5CUMPJBIJ7CPKJNP%2F20260611%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20260611T110504Z\u0026X-Amz-Expires=86400\u0026X-Amz-Signature=9bb22cc8d38db6738092c6b4c54e80f8e2ebe6e9c62fb3425418710a5986614b\u0026X-Amz-SignedHeaders=host\u0026x-amz-checksum-mode=ENABLED\u0026x-id=GetObject"}, {"branch_condition": "", "channel": "News Bulletin", "content": "Jubilant crowd of Aussie loving the world cup and the win against Nigeria", "delivered_at": "2026-06-12T05:28:23.234069", "evaluation_criteria": "", "exercise_id": 133, "expected_actions": "", "facilitator_notes": "", "id": 210, "image_required": false, "inject_type": "information", "notes": null, "objective_links": [], "phase_id": null, "phase_name": "", "recipient": "", "response": null, "sender": "", "sequence_number": 12, "status": "delivered", "team_assignment": ["all"], "time_offset_minutes": 0, "title": "World Cup Update with Australia beating Nigera", "video_script": "Australia clinches victory in a thrilling World Cup match against Nigeria. Fans are celebrating across the nation as the Socceroos secure a 3-1 win. The game, held in Brisbane, saw a packed stadium with roaring support for the Aussie team. This win propels Australia to the top of their group, increasing their chances of progressing to the knockout stages. Nigerian fans are disappointed but hopeful for a comeback in future matches. The World Cup excitement continues to grow, uniting fans worldwide. Live from the newsroom, I\u0027m BC Studio Correspondent, BC Studio News.", "video_status": "ready", "video_talk_id": "clp_n1j6igrUpZu0I_zW9d1N6", "video_ticker": "Australia triumphs over Nigeria in thrilling World Cup match as jubilant Aussie fans celebrate victory", "video_url": "https://d-id-clips-prod.s3.us-west-2.amazonaws.com/auth0%7C6a1d0207e4bd08294f2c2620/clp_n1j6igrUpZu0I_zW9d1N6/v2_public_Alyssa_NoHands_RedSuite_Lobby%40qtzjxMSwEa.mp4?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Content-Sha256=UNSIGNED-PAYLOAD\u0026X-Amz-Credential=AKIA5CUMPJBIJ7CPKJNP%2F20260612%2Fus-west-2%2Fs3%2Faws4_request\u0026X-Amz-Date=20260612T052757Z\u0026X-Amz-Expires=86400\u0026X-Amz-Signature=2f3d5b2dd08e692ea3f128902a0f03c347295c68ea3aa87cd774350abb3ff923\u0026X-Amz-SignedHeaders=host\u0026x-amz-checksum-mode=ENABLED\u0026x-id=GetObject"}], "is_multi_team": false, "knowns_at_start": "- Burst water main reported under a major intersection\n- Immediate water supply disruption to local areas\n- Flooding affecting road traffic and access\n- Initial media interest reported", "num_phases": 4, "objectives": [], "objectives_data": [{"capability_area": "Incident Escalation and Decision-Making", "evaluation_method": "checklist", "exercise_id": 133, "id": 105, "objective_text": "Test the effectiveness of the Crisis Management Team\u0027s activation and decision-making processes.", "sequence_number": 1, "success_criteria": "The Crisis Management Team is activated within 30 minutes of incident notification, and key decisions are logged with timestamps and responsible parties identified."}, {"capability_area": "Crisis Communications", "evaluation_method": "checklist", "exercise_id": 133, "id": 106, "objective_text": "Validate the timeliness and accuracy of internal and external communications during the incident.", "sequence_number": 2, "success_criteria": "All communications are approved by the Communications Lead and disseminated within predefined timeframes, maintaining consistency and factual accuracy."}, {"capability_area": "Service Continuity", "evaluation_method": "checklist", "exercise_id": 133, "id": 107, "objective_text": "Assess the organisation\u0027s ability to maintain critical water supply services during the disruption.", "sequence_number": 3, "success_criteria": "Critical services are maintained at or above the Minimum Business Continuity Objective (MBCO) with no significant disruption to customers."}, {"capability_area": "Regulatory and Legal Compliance", "evaluation_method": "checklist", "exercise_id": 133, "id": 108, "objective_text": "Evaluate compliance with regulatory notification requirements within stipulated timeframes.", "sequence_number": 4, "success_criteria": "All relevant regulatory bodies are notified within required timeframes (e.g., 4 hours for FCA/PRA, 72 hours for ICO), with documented evidence of compliance."}, {"capability_area": "Third Party Management", "evaluation_method": "checklist", "exercise_id": 133, "id": 109, "objective_text": "Demonstrate effective coordination and management of third-party dependencies impacted by the incident.", "sequence_number": 5, "success_criteria": "All affected third-party suppliers are contacted and coordinated with to ensure continuity of supply chain services."}], "organisation": "", "participants": ["Executive / Crisis Management Team", "Business Continuity", "Operations", "Facilities", "External Agency Liaison"], "phases_data": [{"end_offset_minutes": 25, "exercise_id": 133, "focus": "Test CMT activation and initial decision-making processes", "id": 104, "name": "Initial Response", "phase_number": 1, "start_offset_minutes": 0}, {"end_offset_minutes": 55, "exercise_id": 133, "focus": "Validate internal and external communications and coordination with third parties", "id": 105, "name": "Communication and Coordination", "phase_number": 2, "start_offset_minutes": 25}, {"end_offset_minutes": 85, "exercise_id": 133, "focus": "Assess ability to maintain critical services and manage ongoing impacts", "id": 106, "name": "Sustained Operations", "phase_number": 3, "start_offset_minutes": 55}, {"end_offset_minutes": 105, "exercise_id": 133, "focus": "Evaluate compliance with regulatory notifications and recovery strategies", "id": 107, "name": "Regulatory and Recovery Actions", "phase_number": 4, "start_offset_minutes": 85}], "plans_to_test": ["Business Continuity Plan", "Crisis Management Plan"], "risk_alignment": "The operational response including recovery", "scenario_assumptions": "- Emergency services have been notified and are on the scene\n- Communication channels with key stakeholders are open\n- Temporary water supply solutions are available for critical services\n- The incident is isolated to one location without immediate threat to other infrastructure", "scenario_category": "", "scenario_name": "Critical service disruption, sink hole, extensive flooding to residential houses", "scenario_narrative": "Barwon Water is facing a crisis after a major water main bursts under a busy intersection in Geelong, Victoria, disrupting water supply to several residential and commercial areas. The unexpected rupture occurs during peak business hours, causing significant flooding and infrastructure damage. As the leading water utility, Barwon Water must coordinate an immediate response to mitigate the impact on its customers and maintain critical water supply services. The incident attracts media attention and regulatory scrutiny, challenging Barwon Water\u0027s crisis management capabilities and its ability to maintain public trust.", "scheduled_date": "2026-06-11T00:00:00", "scope_in": "", "scope_out": "", "status": "in_progress", "teams": ["alpha", "bravo", "charlie"], "title": "Burst Water Main", "trigger_event": "A burst water main under a key intersection in Geelong is reported to Barwon Water\u0027s control centre, simultaneously causing water service disruptions and significant road flooding.", "unknowns_at_start": "- Extent of the infrastructure damage\n- Timeline for repair and service restoration\n- Impact on water quality and customer safety\n- Full scope of affected customers and businesses"}