ISO 22398 scenario testing with simulations
What is ISO 22398?
ISO 22398 provides guidelines for exercises, including how to plan, conduct and evaluate them.
iluminr simulations let teams rehearse the decisions ISO 22398 cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.
Simulations mapped to ISO 22398
AI RiskGreen Light: AI Board GovernanceThis Microsimulation builds your awareness of director accountabilities when a company deploys AI into customer-facing operations. You will be asked to evaluate an AI deployment proposal under commercial pressure, navigate conflicting advice from executives, and test how governance, documentation and disclosure expectations apply when things go wrong. The scenario is based on real-world AI governance and D&O risk patterns faced by organizations across sectors.
Physical SecurityA Dark Day: Bomb ThreatAn anonymous caller threatens the safety of colleagues at a key site location with the imminent detonation of a bomb. Strategic response teams must move through critical decisions regarding the threat to delineate roles, responsibilities and delegated authorities in alignment with emergency response teams and stakeholders.
Physical SecurityAccess Denied: Building FireNavigate a building fire by ensuring employee safety, coordinating with emergency services, communicating with stakeholders, and planning for alternative business locations due to site inaccessibility.
Cyber & DataBracing for Impact: Communications TestTest your organization's ability to send timely Emergency Notifications in response to a sophisticated, self-learning malware threat that targets critical infrastructure.
AI RiskBreached: AI IP LeakRespond to a sensitive data leak involving AI-generated content, focusing on incident assessments, situational awareness, and securing communication protocols.
Conduct & ReputationCEO Fallout: Racial CommentsManage the fallout from controversial racial comments made by the CEO, addressing crisis management, stakeholder communication, and executive safety concerns.
Natural Hazards & ClimateClaims Surge: Severe WeatherProlonged severe weather drives widespread power outages, sparking a surge of storm-related claims that overwhelm triage teams and push systems beyond capacity. Respond to compounding severe but plausible event causing significant impacts to a critical operation.
Third-Party & TechnologyConnectivity Down: Severe WeatherRespond to severe weather-induced operational disruptions, including widespread internet outages, by verifying role responsibilities and ensuring continuity in communications and operations.
Third-Party & TechnologyCore Platform Outage: RollbackA critical platform update turns into a live-fire incident as a scheduled patch unexpectedly brings down key systems. Participants must navigate real-time service degradation, mounting customer pressure, and rollback decisions under duress. This Microsimulation tests cross-functional coordination, incident escalation, and communication flow - providing vital validation of operational resilience, rollback protocols, and regulatory compliance readiness.
Natural Hazards & ClimateCrisis Mode: Natural DisasterActivate a multi-team response to a natural disaster impacting your infrastructure and staff safety, focusing on communication protocols and validating roles in essential service delivery.
Cyber & DataData Breach: Major LeakA massive data breach has struck some of the world’s largest organizations, including your own, leading to the potential compromise of sensitive personal information. The breach has exposed the names, phone numbers, and addresses of millions of customers, raising immediate concerns about privacy, identity theft, and the security of your data handling practices.
AI RiskDeepfake Threat: Cyber AttackYour organization grapples with an AI-driven cyber-attack, where advanced deepfake technology is being used to generate highly convincing fraudulent communications. This attack triggers a governance breakdown, posing severe risks to the organization’s reputation and operational integrity. --- [EngUS] Your organization grapples with an AI-driven cyber-attack, where advanced deepfake technology is being used to generate highly convincing fraudulent communications. This attack triggers a governance breakdown, posing severe risks to the organization’s reputation and operational integrity.
Conduct & ReputationDefrauded: Vendor PaymentsA long-standing vendor highlights non-payment of a significant volume of invoices, flagging an internal fraud situation. Participants are required to review their own roles and responsibilities in conjunction with their organization structure, including policies and anti-fraud compliance frameworks.
Conduct & ReputationDirty Loans: Regulatory BreachA public notification by the regulator emanates in the media for your company regarding misconduct in loan origination and management. Your team must respond to compliance, operational and brand and reputation impacts.
Third-Party & TechnologyExit Plan: Vendor InsolvencyA critical third-party vendor has filed for insolvency, causing both operational and data losses. Can your team execute the exit plan under pressure?
Cyber & DataExtortion: Ransomware InvasionAddress a widespread ransomware attack demanding cryptocurrency payments, focusing on stakeholder communication and restoring operational control.
Natural Hazards & ClimateFlooded Future: Climate ReckoningNavigate the chaos of a climate disaster resulting in major flooding, and the aftermath of public scrutiny. Safeguard operations, protect staff, and build resilience under the spotlight of regulatory oversight.
Natural Hazards & ClimateHeatwave Havoc: Grid CollapseManage a complete multi-site grid collapse triggered by an intense heatwave, focusing on stakeholder communication and implementing contingency plans across multiple affected locations.
Cyber & DataInside Job: Data BreachNavigate the high-stakes initial response to a sophisticated insider threat that has compromised sensitive organizational data, testing your incident response protocols when the threat comes from within.
Conduct & ReputationMisrepresented: Product LawsuitA catastrophic product misrepresentation causes significant regulatory, financial and brand pressure.
GeopoliticalOn the Brink: Curbing ConflictNavigate the challenges posed by escalating tensions between economic powers, focusing on managing disrupted supply chains and validating critical response strategies.
People & WorkforcePandemic: Remote ReadinessThis Microsimulation focuses on evaluating and enhancing your organization's ability to support a rapid shift to remote work.
AI RiskPoisoned: Data CorruptionAssess and mitigate the impact of a sophisticated data poisoning cyber-attack that has corrupted critical operational data and disrupted decision-making processes.
Natural Hazards & ClimatePower Outage: Localized Weather CrisisManage prolonged power outages caused by severe weather, focusing on stakeholder communication and implementing contingency plans for the affected area.
Third-Party & TechnologyRipple Effect: Fourth-Party FalloutA critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.
Physical SecurityShooter Threat: Event CancellationAn active shooter crisis unfolds at a major city stadium just hours before a high-profile sporting event. Participants must address the immediate physical security threat while also evaluating the potential need for event cancellation. This involves balancing the safety of attendees and staff against the financial implications of activating event cancellation insuranceNatural Hazards & ClimateSustained Power Outage: DC ShutdownA catastrophic heatwave leads to widespread grid failure, forcing organizations to consider drastic action: a controlled shutdown of their primary data center. This Microsimulation tests tactical preparedness, technical decision-making, and procedural clarity under constrained, real-time conditions. Ideal for stress-testing your organization’s ability to respond, coordinate, and protect data when the lights go out.
People & WorkforceTalent Exodus: Workforce ResilienceAddress operational disruptions caused by a wave of employee resignations following your CEO’s controversial climate change remarks, focusing on maintaining business continuity and workforce stability.
Cyber & DataTrading Halt: Ransomware ChaosAddress a major ransomware attack causing a service outage, suspected to be state-sponsored, by coordinating with cybersecurity experts and effectively communicating with stakeholders.
Third-Party & TechnologyTrapped: Vendor Modern SlaveryNavigate the ethical, legal, and operational challenges posed by a tech supplier embroiled in a modern slavery scandal, focusing on incident assessment and communication strategies.Third-Party & TechnologyVendor Outage: System DownRespond to a critical vendor cyber-attack that has disrupted essential services, focusing on business impact assessment, data review, and immediate contingency actions.
Physical SecurityVIP Down: Severe IllnessAn executive is found to be severely ill while travelling to one of the company's offshore locations. This microsimulation exercises decision models and response protocols for dealing with the safety and potential repatriation of a VIP in an offshore location.
AI RiskFairplay: AI Bias in a Critical ServiceAddress the fallout from AI-driven bias in critical business services, focusing on managing stakeholder concerns and reassessing operational fairness.
AI RiskDigital Deceit: Workplace ThreatA deepfake video falsely depicting the CEO making controversial remarks has been traced back to an employee's corporate laptop credentials. The video is circulating online, causing backlash, and prompting an urgent response to mitigate reputational damage and address the misuse of AI. --- Formerly titled 'Deepfake: Workplace Safety'
Physical SecurityDisruption: Event ChaosManage an increasingly violent protest near a major conference, ensuring team safety, stakeholder communication, and preparedness for escalating risks.
Cyber & DataDouble Tap: Cyber AttackA major information services provider faces a cyber crisis, leading to system outages, regulatory scrutiny, and eroded client trust. Participants will manage rapid response adjustments, client communication, and rebuilding credibility under intense pressure.
Cyber & DataEvolved: Adaptive MalwareA sophisticated form of malware has caused disruption across global health services, telecommunication and technology providers.
Physical SecurityHigh Security: Active ShooterHandle an active shooter incident near your organization by maintaining situational awareness, securing employee safety, and managing communications.
Physical SecurityIntercepted: International Security ThreatA high-stakes security incident involving the violent interception of a corporate executive team's convoy during transit between office locations. The simulation aims to evaluate organizational readiness, response protocols, and decision-making processes during an international physical security crisis.
GeopoliticalMIA: Global TensionsRising geopolitical tension leaves colleagues unaccounted for overseas. Assess the incident, manage stakeholders and escalation, and confirm your team can reach the communication templates and tools it needs.
Natural Hazards & ClimateSeismic Shift: Earthquake ResponseThis Microsimulation focusses on reviewing and validating response plans and critical functions, strengthening cross-functional collaboration and alignment, and verifying communication protocols to ensure clarity and consistency during a crisis.
AI RiskTrained: AI Bias in HiringA tech company gets shutdown over AI bias allegations, disrupting global recruitment processes.
Cyber & DataVished: Customer & Regulatory ImpactsA convincing voice-phishing call gives attackers a foothold, with consequences for customers and regulators. Assess the incident, identify the critical business functions at risk, and work through your regulatory obligations.
Cyber & DataWage Gap: Data Breach FalloutAddress the aftermath of a data breach revealing pay inequity, focusing on stakeholder engagement, implementing corrective measures, and restoring organizational trust.
AI RiskAgent Autonomous: Customer ServiceDeveloped to explore the adoption of Agentic AI as part of a severe but plausible threat impacting a Critical Operation.
AI RiskAgent Down: AI Agent FailureA forward-thinking Microsimulation that explores the potential impacts and response priorities associated with agentic AI in critical services.
AI RiskAI Lies: Fact vs FictionAI-generated misinformation about your organization spreads faster than you can verify it. Separate fact from fiction, decide what to say publicly, and protect trust while the story is still moving.
Cyber & DataPlan Under Pressure: Cyber IncidentA confirmed disruption is unfolding. You're drawn into the early response and asked whether a formal plan should be activated.
Cyber & DataAccount Takeover: Containment & ResponseA suspected account compromise points to a data breach. Contain it, escalate it and coordinate across functions.
AI RiskModel Switch: AI Service OutageAn issue affecting a foundational AI service triggers a wave of questions. Decide what matters, what doesn't and what to do next.
AI RiskAI Washing: Claims Under ScrutinyYour AI claims to investors and customers come under scrutiny. Decide what you can stand behind, and what you correct.
Crisis LeadershipDefensible Disclosure: ESG ReportingDirectors' accountabilities meet an evolving sustainability reporting landscape. Make disclosure decisions under time pressure.Mapping is indicative. Confirm scope against your own obligations.
Frequently asked questions
What is ISO 22398?
ISO 22398 provides guidelines for exercises, including how to plan, conduct and evaluate them.
How do simulations help with ISO 22398?
Simulations let teams rehearse the decisions ISO 22398 cares about against severe-but-plausible scenarios. iluminr keeps a record of who decided what, and when, which you can use as evidence of testing.
Which iluminr simulations map to ISO 22398?
Simulations mapped to ISO 22398 include Green Light: AI Board Governance, A Dark Day: Bomb Threat, Access Denied: Building Fire, Bracing for Impact: Communications Test, Breached: AI IP Leak and CEO Fallout: Racial Comments, among others.
Who should take part?
These simulations are most often run with Executive & Board, Risk, Technology & Security and Legal.
Can I build a 12-month ISO 22398 testing program?
Yes. The iluminr program builder suggests a 12-month plan of simulations for ISO 22398. You can add or remove scenarios and export the plan as a PDF for your board.
Can we customize these simulations?
Yes. Run any template as is, tailor the roles, plans, critical services and injects to your organization, or build your own from scratch with the iluminr builder.
Is this mapping legal or compliance advice?
No. The mapping between simulations and ISO 22398 is indicative. Confirm scope against your own obligations.