An exercise that shows how your team decides when things go wrong.

Length

Half a day in the entry version; the length is shaped around your request.

Participants

6 to 20 people from different roles: management, finance, HR, IT, front office.

Events

Three to four, given to the participants one after another during the exercise.

Who runs it

An instructor, plus an observer who keeps the decision log.

1. 1

   Payroll on WhatsApp

   Insider data exposureA spreadsheet with the names, ID numbers and salaries of your staff is circulating on WhatsApp. A journalist calls within the hour.What it tests: Who is told first; whether this is a personal-data breach you must notify, and within what deadline; how you tell your own staff; how you look for the source without accusing everyone in the room.Best for: HR, finance, management. Almost everyone in Albania recognises it at once.
2. 2

   The changed invoice

   Business email compromiseA long-standing supplier emails new bank details on the day a large invoice is due. The email thread looks correct. The payment is scheduled for 16:00.What it tests: Your rule for confirming changes by phone; who can authorise an exception; what happens when the director cannot be reached; whether anyone says "no" to urgency.Best for: Finance, procurement, small and medium businesses.
3. 3

   The tax deadline

   Ransomware on the eve of a deadlineYour accounting server is encrypted four days before a filing deadline. Backups exist, but nobody has restored one in a year.What it tests: Whether to pay or not; working by hand in the meantime; what you tell the tax authority and your clients; who makes the call.Best for: Accounting firms and any company with strict regulatory deadlines. It ties directly to the duty to file returns on time under Law 9920 on tax procedures; the penalty for filing late stays with the taxpayer.
4. 4

   The director's voice

   Impersonation by cloned voice and faked videoA voice note, then a short video call, from the director, who is travelling, authorises an urgent payment and the release of a client file. The voice is right. The manner is right.What it tests: Whether there is any habit of checking at all; what the second channel for confirming is; whether a junior member of staff has the right to refuse.Best for: Everyone.
5. 5

   Copy and paste

   Client data pasted into a public AI toolA capable employee pasted a client contract, with names and figures, into a free chatbot to summarise it. They did it to save time. They did it three months ago.What it tests: Whether you know which tools your staff use; what your rule for using them is; whether this is a data breach; what you tell the client.Best for: Every office.

Variant for institutions: a state portal your work depends on is down or compromised for three days. It tests business continuity, working on paper in the meantime, and how you communicate with citizens.