Design each tabletop with three required artifacts: a timed decision log, a draft customer notice, and a gap list with owners. Participants should leave the room carrying documents, not vibes.
Injects that force trade-offs
Generic “system is down” injects invite generic answers. Prefer injects that pit merchant settlement against fraud freezes, or lending originations against bureau timeouts. Those tensions produce decisions auditors recognize.
Grade the chronology
Appoint a scribe whose only job is the detection-to-containment timeline. In our Detection Timeline Clinic, that role is graded separately so the narrative cannot hide behind facilitation charm.
Close with unfinished business
A credible drill ends with open items. Pretending the firm is fully ready invites harder questions later. Capture residual risk in language a partner can quote without embarrassment.
Compare Desk Review and Field Simulation if you want external facilitation.