Why Most Crisis Tabletop Exercises Fail to Change Real Behavior
By Ann Marie van den Hurk, Mind The Gap Advisory
The uncomfortable pattern
Most organizations run tabletop exercises with good intentions.
They check the box.
They walk through a scenario.
They identify a few action items.
And then, months later, a real incident hits and leadership still hesitates.
The problem isn’t effort.
It’s design.
What most tabletop exercises actually test
Traditional tabletop exercises tend to focus on:
Whether teams recognize the scenario
Whether playbooks exist
Whether people know their roles
These are useful questions.
They are not the questions that fail organizations in real crises.
In real incidents, teams don’t struggle with awareness.
They struggle with decision convergence under pressure.
The missing element: decision stress
Real crises introduce constraints tabletop exercises often avoid:
Incomplete or conflicting information
Time compression
External narrative pressure
Legal, technical, and reputational risk colliding at once
When exercises remove those constraints, they produce confidence without proof.
Everything works… because nothing is stressed.
Why alignment breaks anyway
Even well-run tabletop exercises often assume:
Decisions will be made once facts are clear
Leaders will naturally align once the scenario unfolds
Authority will be obvious in the moment
None of these assumptions hold under pressure.
In practice:
Information clarity arrives late, if at all
Functional priorities compete
Leaders default to caution, not coordination
Exercises that don’t surface this tension give a false sense of readiness.
The difference between rehearsal and readiness
Rehearsal answers:
“Do we know what should happen?”
Readiness answers:
“Can we decide fast enough when it’s unclear?”
Exercises that change behavior do three things differently:
They introduce timed decision points
Leaders must choose with partial information, not perfect clarity.They force functional disagreement
Legal, security, and communications are intentionally misaligned to test convergence.They measure alignment, not completion
The outcome isn’t whether the exercise finishes.
It’s whether leaders reach shared decisions quickly.
This is uncomfortable by design.
Why this matters more now
Modern incidents escalate before internal consensus forms.
Screenshots spread.
Emails leak.
AI-generated content accelerates confusion.
Exercises that don’t reflect this environment train teams for a crisis that no longer exists.
The real value of a tabletop exercise
A good tabletop exercise doesn’t make teams feel prepared.
It shows them where they are not.
That insight:
Reduces hesitation later
Clarifies authority
Improves coordination before it’s visible externally
That’s the return.
Quiet next step
Organizations that take crisis readiness seriously don’t run exercises to confirm competence.
They run them to expose friction.
Because friction found early is survivable.
Friction found in public is not.
Ann Marie van den Hurk, MSc., APR is the founder of Mind The Gap Advisory and originator of the CrisisOS5™ Framework. She advises CISOs, General Counsel, Chief Risk Officers, and boards on decision authority and executive crisis readiness for the AI era. Based in Newport, Rhode Island — serving organizations in Providence, Boston, Portsmouth, Portland, and Hartford, and across New England, nationally, and globally. mindthegapcyber.com