48 Hours of Confidence: Anatomy of a Deposit Run
Financial servicesFFIEC
RESOURCES
Ready-to-run scenarios, plain-language guides to the frameworks that require testing, and what we have learned watching exercise programs succeed and stall.
The Global Library is included on every plan — sign up free to open and explore any scenario.
Financial servicesFFIEC
HealthcareHIPAANIST CSF
Transportation & logisticsNIST CSFISO 27001
Utilities & energyNERC CIP
What the regulations that require exercise testing actually ask for, in plain language, and where a tabletop satisfies them.
Last verified: September 2026
What the CMS Emergency Preparedness Rule requires for testing exercises — who it covers, the inpatient and outpatient cadences, what surveyors ask for, and where the rule is deliberately silent.
CMS Emergency Preparedness
Read the guide →Last verified: September 2026
DORA's digital operational resilience testing obligations, article by article — the yearly floor in Article 24, what Article 25 actually lists, and why Article 26 is not the scenario-testing article it is usually cited as.
DORA
Read the guide →Last verified: September 2026
What ISO 22301's exercise clause asks of a business continuity management system — who it binds, what Clause 8.5 covers in substance, why it sets no frequency, why no source names an exercise type, and what a certification audit looks at.
ISO 22301
Read the guide →What separates an exercise that changes how a team performs from one that fills a compliance line.
September 12, 2026
A pre-scripted exercise delivers the next inject whatever the room decides, and participants work that out inside ten minutes. Crewcible shows you decisions as they arrive and proposes challenges built on what the crew actually chose — you decide what gets released and when.
Read more →September 12, 2026
A thorough scenario is days or weeks of research, writing and coordination, so exercises happen once a year and get reused until nobody is tested by them. Start from the Global Library and launch in minutes, build your own, or let AI help develop the objectives, roles and injects for your crew.
Read more →September 12, 2026
Tracking the clock, releasing injects, playing the regulator and the reporter, watching who has gone quiet and capturing all of it — one person cannot do all of that well, so exercises get staffed like a production or the notes get dropped. The facilitator command center puts the mechanical work in the system.
Read more →READINESS STARTS BEFORE THE CRISIS.
Build your first scenario and turn preparation into measurable progress.