FFIEC BCM Handbook scenario testing with simulations

iluminr simulations let teams rehearse the decisions FFIEC BCM Handbook cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.

Simulations mapped to FFIEC BCM Handbook

Physical SecurityA Dark Day: Bomb ThreatAn anonymous caller threatens the safety of colleagues at a key site location with the imminent detonation of a bomb. Strategic response teams must move through critical decisions regarding the threat to delineate roles, responsibilities and delegated authorities in alignment with emergency response teams and stakeholders.Physical SecurityAccess Denied: Building FireNavigate a building fire by ensuring employee safety, coordinating with emergency services, communicating with stakeholders, and planning for alternative business locations due to site inaccessibility.Natural Hazards & ClimateClaims Surge: Severe WeatherProlonged severe weather drives widespread power outages, sparking a surge of storm-related claims that overwhelm triage teams and push systems beyond capacity. Respond to compounding severe but plausible event causing significant impacts to a critical operation.Third-Party & TechnologyConnectivity Down: Severe WeatherRespond to severe weather-induced operational disruptions, including widespread internet outages, by verifying role responsibilities and ensuring continuity in communications and operations.Third-Party & TechnologyCore Platform Outage: RollbackA critical platform update turns into a live-fire incident as a scheduled patch unexpectedly brings down key systems. Participants must navigate real-time service degradation, mounting customer pressure, and rollback decisions under duress. This Microsimulation tests cross-functional coordination, incident escalation, and communication flow - providing vital validation of operational resilience, rollback protocols, and regulatory compliance readiness.Natural Hazards & ClimateCrisis Mode: Natural DisasterActivate a multi-team response to a natural disaster impacting your infrastructure and staff safety, focusing on communication protocols and validating roles in essential service delivery.Third-Party & TechnologyExit Plan: Vendor InsolvencyA critical third-party vendor has filed for insolvency, causing both operational and data losses. Can your team execute the exit plan under pressure?Natural Hazards & ClimateFlooded Future: Climate ReckoningNavigate the chaos of a climate disaster resulting in major flooding, and the aftermath of public scrutiny. Safeguard operations, protect staff, and build resilience under the spotlight of regulatory oversight.Natural Hazards & ClimateHeatwave Havoc: Grid CollapseManage a complete multi-site grid collapse triggered by an intense heatwave, focusing on stakeholder communication and implementing contingency plans across multiple affected locations.Natural Hazards & ClimatePower Outage: Localized Weather CrisisManage prolonged power outages caused by severe weather, focusing on stakeholder communication and implementing contingency plans for the affected area.Third-Party & TechnologyRipple Effect: Fourth-Party FalloutA critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.Physical SecurityShooter Threat: Event CancellationAn active shooter crisis unfolds at a major city stadium just hours before a high-profile sporting event. Participants must address the immediate physical security threat while also evaluating the potential need for event cancellation. This involves balancing the safety of attendees and staff against the financial implications of activating event cancellation insuranceNatural Hazards & ClimateSustained Power Outage: DC ShutdownA catastrophic heatwave leads to widespread grid failure, forcing organizations to consider drastic action: a controlled shutdown of their primary data center. This Microsimulation tests tactical preparedness, technical decision-making, and procedural clarity under constrained, real-time conditions. Ideal for stress-testing your organization’s ability to respond, coordinate, and protect data when the lights go out.Third-Party & TechnologyTrapped: Vendor Modern SlaveryNavigate the ethical, legal, and operational challenges posed by a tech supplier embroiled in a modern slavery scandal, focusing on incident assessment and communication strategies.Third-Party & TechnologyVendor Outage: System DownRespond to a critical vendor cyber-attack that has disrupted essential services, focusing on business impact assessment, data review, and immediate contingency actions.Physical SecurityVIP Down: Severe IllnessAn executive is found to be severely ill while travelling to one of the company's offshore locations. This microsimulation exercises decision models and response protocols for dealing with the safety and potential repatriation of a VIP in an offshore location.Physical SecurityDisruption: Event ChaosManage an increasingly violent protest near a major conference, ensuring team safety, stakeholder communication, and preparedness for escalating risks.Physical SecurityHigh Security: Active ShooterHandle an active shooter incident near your organization by maintaining situational awareness, securing employee safety, and managing communications.Physical SecurityIntercepted: International Security ThreatA high-stakes security incident involving the violent interception of a corporate executive team's convoy during transit between office locations. The simulation aims to evaluate organizational readiness, response protocols, and decision-making processes during an international physical security crisis.Natural Hazards & ClimateSeismic Shift: Earthquake ResponseThis Microsimulation focusses on reviewing and validating response plans and critical functions, strengthening cross-functional collaboration and alignment, and verifying communication protocols to ensure clarity and consistency during a crisis.Cyber & DataPlan Under Pressure: Cyber IncidentA confirmed disruption is unfolding. You're drawn into the early response and asked whether a formal plan should be activated.

Mapping is indicative. Confirm scope against your own obligations.

Frequently asked questions

More in United States