How do I conduct a realistic and effective tabletop exercise for our emergency response team?

A realistic tabletop exercise (TTX) should test decisions, coordination, communications, and procedures—not reward people for knowing the “right” answer. FEMA’s HSEEP framework uses a cycle of design, conduct, evaluation, and improvement planning, which is a useful structure for almost any emergency-response team.FEMA Training+1

1. Start with 3–5 concrete objectives

Avoid a vague objective such as “test our emergency plan.” Instead, make objectives observable:

• Determine whether the team can establish incident leadership within 15 minutes.
• Test how quickly critical information reaches decision-makers.
• Determine whether staff understand evacuation/shelter-in-place authorities and responsibilities.
• Test coordination with external responders.
• Identify gaps in communications, staffing, supplies, or continuity procedures.

Your objectives should drive the scenario and evaluation criteria. FEMA specifically recommends aligning exercise objectives with the capabilities and critical tasks being evaluated.Preparedness Toolkit

2. Pick a scenario that is plausible—but uncomfortable

Use a hazard your organization could realistically face, based on your risk assessment.

For example:

09:15 Monday: A major incident disrupts normal operations. Initial information is incomplete and conflicting. Several employees/customers are affected. Communications are degraded. The emergency response team must determine what happened, protect people, establish priorities, communicate internally, and coordinate with outside agencies. Then introduce complications progressively:

1. Initial incident.
2. Conflicting information.
3. Loss of a key person or communication channel.
4. Increased number of affected people.
5. External agency involvement.
6. Media/social-media attention.
7. Resource shortage.
8. Transition from immediate response to recovery.

The important part is not making the disaster spectacular. It is creating situations where participants have to make realistic decisions.

3. Don't give participants the whole scenario

Have a facilitator reveal information in stages through injects.

Example:

A good facilitator should occasionally say “You don't know” when participants ask for information that their team would not realistically have.

That uncertainty is valuable—it tests how they operate with incomplete information.

4. Make participants use their actual procedures

This is where a tabletop becomes much more useful than a discussion about emergency preparedness.

Put the team's actual:

• Emergency Operations Plan
• contact lists
• organizational chart
• evacuation maps
• notification procedures
• communications procedures
• vendor/contractor information
• continuity procedures
• mutual-aid agreements

on the table.

Then ask:

“Show me where that is addressed in your plan.” If nobody can find it, that is an exercise finding, not a failure to be hidden.

FEMA describes exercises as a way to validate plans and capabilities and identify gaps and areas for improvement.Preparedness Toolkit

5. Assign a facilitator and separate evaluators

Ideally, don't have the person running the exercise simultaneously trying to evaluate everyone.

Facilitator

• Introduces injects.
• Keeps the discussion moving.
• Challenges assumptions.
• Prevents one person from dominating.
• Does not solve problems for participants.

Evaluators/observers

• Record what actually happened.
• Note decisions and timing.
• Compare performance against objectives.
• Capture both strengths and deficiencies.

FEMA's Exercise Evaluation Guides are specifically designed to make observation and data collection consistent and to support the eventual After-Action Report.Preparedness Toolkit+1

6. Force decisions, rather than hypothetical discussion

Instead of:

“What would you do if communications failed?” say:

“Your primary communications system has just failed. You have five minutes. What communication method are you using, who activates it, and who needs to be notified?” Then follow up:

• Who has authority?
• What information do you need?
• Where will you get it?
• What is your deadline?
• Who documents the decision?
• What happens if your first option fails?

This exposes ambiguity in roles and procedures very quickly.

7. Include realistic friction

Real emergencies rarely provide perfect information.

Consider deliberately introducing:

• conflicting reports
• unavailable personnel
• failed technology
• competing priorities
• incomplete information
• delayed external assistance
• language/accessibility needs
• transportation problems
• unexpected resource shortages
• a decision-maker who cannot be reached

Don't make the exercise artificially difficult just for drama. Each complication should test one of your objectives.

8. Conduct a hot wash immediately afterward

Spend roughly 15–30 minutes asking:

1. What went well?
2. What surprised you?
3. Where did you get stuck?
4. Which procedures worked?
5. Which procedures were unclear or missing?
6. What information did you wish you had?
7. What should we change before the next incident?

Capture observations before people leave.

9. Turn findings into an improvement plan

This is arguably the most important step.

Don't finish with:

“We'll improve communications.” Turn it into an actionable item:

HSEEP explicitly treats improvement planning as part of the exercise cycle, with corrective actions tracked toward completion.Preparedness Toolkit

A practical 2-hour format

0:00–0:10 — Introduction

• Purpose
• Ground rules
• Objectives
• Roles

0:10–0:25 — Initial situation

• Present scenario
• Let team establish its initial response

0:25–1:15 — Interactive play

• Introduce 4–6 injects
• Force decisions
• Introduce uncertainty

1:15–1:30 — Escalation/recovery

• Introduce a major complication
• Test transition toward recovery

1:30–1:50 — Hot wash

• Strengths
• Problems
• Surprises
• Immediate recommendations

1:50–2:00 — Close

• Explain next steps
• Assign responsibility for the AAR/improvement plan

The biggest mistakes to avoid

• Making it a lecture. Participants should be doing most of the talking.
• Trying to test everything. Pick a handful of objectives.
• Making the scenario too dramatic. Realistic ambiguity is more valuable than cinematic disaster.
• Rescuing participants when they get stuck. Their confusion may be the finding you need.
• Treating the exercise as a pass/fail test. The purpose is learning and improvement.
• Failing to follow up. An exercise without corrective-action tracking can become an expensive discussion rather than a preparedness improvement.

For a U.S. organization, FEMA's HSEEP templates are particularly useful: they include planning, facilitator, evaluation, Master Scenario Events List, and improvement-planning materials. Preparedness Toolkit CISA also provides tabletop exercise packages with planner, facilitator/evaluator, participant-feedback, and AAR templates.cisa.gov

If you tell me what kind of organization your emergency response team supports (e.g., hospital, school, corporate office, manufacturing site, campus, municipality) and the hazard you want to exercise, I can build you a complete 90–120 minute tabletop package with the scenario, injects, facilitator script, participant questions, evaluator checklist, and AAR template.

A good tabletop exercise (TTX) should feel just realistic enough to force decisions, without becoming a scripted test that participants can simply “pass.” FEMA’s HSEEP framework is a useful model: establish objectives, design the scenario, conduct and facilitate the exercise, evaluate performance, and turn findings into corrective actions.FEMA Training+1

1. Start with 2–4 specific objectives

Don't start with “test our emergency plan.” Start with observable things you want the team to demonstrate.

For example:

• Establish an incident-management structure within 15 minutes.
• Demonstrate how the team obtains and shares situational information.
• Make and document decisions when critical resources are unavailable.
• Issue an initial internal/external communication using the organization's approved process.
• Identify when and how the team escalates an incident to executives or outside agencies.

FEMA recommends aligning objectives with the capabilities you actually want to evaluate.Preparedness Toolkit

Rule of thumb: If you can't tell afterward whether an objective was achieved, rewrite it.

2. Pick a scenario that is plausible for your organization

Use your actual risk assessment, previous incidents, near misses, outages, or exercise findings.

A strong scenario has:

• A credible initiating event.
• Incomplete information.
• Several simultaneous problems.
• Decisions that genuinely have tradeoffs.
• A plausible reason the situation could deteriorate.
• No single obvious solution.

For example:

09:15 Monday: A severe storm causes a regional power outage. Your primary facility is operating on backup power. Several employees cannot reach the site, one critical vendor is unreachable, and social media reports are circulating that the facility has been evacuated. Then progressively introduce complications.

The objective isn't to predict exactly what will happen in a disaster. It's to expose whether your plans, people, communications, authorities, and resources work under pressure.

3. Build the exercise around "injects"

An inject is new information introduced during the exercise.

A 90-minute exercise might look like:

Don't make every inject a catastrophe. Ambiguity and conflicting information are often more revealing than bigger disasters.

FEMA provides a Master Scenario Events List (MSEL) specifically for managing exercise injects.Preparedness Toolkit

4. Separate players, facilitators, controllers, and evaluators

This is particularly important for realism.

Players make decisions as they would during an actual incident.

Facilitators keep discussion moving and ask questions such as:

“What would you do next?” “Who has authority to make that decision?” “What information do you need?” Controllers manage the exercise and release injects.

Evaluators observe and record what actually happens.

Don't let evaluators constantly correct participants. If the team makes a mistake, let the exercise expose it.

FEMA's HSEEP materials explicitly distinguish these exercise functions and provide separate conduct and evaluation resources.Preparedness Toolkit+1

5. Give participants only information they'd actually have

This is one of the biggest differences between a realistic TTX and a discussion about a disaster.

Don't tell participants:

"The backup generator will fail in 20 minutes." Instead:

"Facilities reports that fuel consumption is higher than expected. Current estimates suggest approximately 45 minutes of remaining runtime." Let them decide what to do.

Likewise, don't automatically answer questions they wouldn't be able to answer in reality. If they ask, “What's the status of the vendor?” the facilitator might respond:

“You have attempted to contact them twice. No response yet.” That uncertainty is part of the exercise.

6. Force decisions, not just conversation

A common TTX failure mode is:

“We would call X.” “We would notify Y.” “We have a plan for that.” Whenever someone says “we would…”, ask:

“Okay—who does it, when, using what authority or procedure, and what happens if it doesn't work?” Have participants actually identify:

• Who makes the decision.
• What information they need.
• Which plan/procedure applies.
• Who needs to be notified.
• What resource is required.
• What the fallback is.
• How the decision gets documented.

That turns a conversational exercise into a capability test.

7. Introduce friction deliberately

Real incidents rarely fail because the first plan is completely useless. They fail because several small assumptions stop being true simultaneously.

Useful friction includes:

• A key person is unavailable.
• A communication channel fails.
• Information conflicts between two sources.
• A vendor doesn't respond.
• A resource is delayed.
• Leadership asks for an answer before the facts are complete.
• An employee reports something on social media.
• A neighboring organization requests assistance.
• The situation improves in one area while deteriorating in another.

Don't manufacture absurd complications just to make the exercise difficult. Each inject should connect to an objective.

8. Establish ground rules before starting

Tell participants:

• This is an exercise, not an evaluation of individual employees.
• Assume normal policies and authorities unless the scenario says otherwise.
• Say what you would actually do, rather than what sounds ideal.
• It's acceptable to say “I don't know.”
• If you discover that a procedure doesn't exist, that's a useful finding.
• Don't solve problems by inventing resources or authorities that don't exist.
• Exercise information stays within the agreed exercise boundaries.

A psychologically safe environment is important because you want people to expose weaknesses rather than hide them.

9. Evaluate behaviors, not personalities

Instead of:

“The operations manager didn't communicate well.” Record something observable:

“No common operating picture was established during the first 30 minutes, and participants used three different versions of the incident status.” Then ask:

• What was supposed to happen?
• What actually happened?
• What explains the difference?
• What consequence could that have?
• What corrective action would reduce the gap?

FEMA's Exercise Evaluation Guides are designed to make observation and data collection more consistent and to connect findings to objectives and corrective actions.Preparedness Toolkit

10. End with a structured hotwash

Immediately afterward, ask each participant:

1. What worked?
2. What didn't?
3. What surprised you?
4. What information did you wish you had?
5. Which decision was hardest?
6. Which procedure or plan needs clarification?
7. What is one thing we should change before the next incident?

Don't immediately argue about whether someone's observation is correct. Capture it first.

11. Turn findings into an improvement plan

This is arguably the most important step.

For every significant finding, assign:

Finding → Corrective action → Owner → Due date → Measure of completion

For example:

FEMA describes improvement planning as a continuous process rather than simply producing a report and putting it on a shelf.Preparedness Toolkit

A practical 2-hour TTX format

Before the exercise

• Define objectives.
• Choose scenario.
• Identify players/facilitators/evaluators.
• Prepare injects.
• Establish evaluation criteria.
• Brief facilitators separately.
• Prepare participant materials.

0:00–0:10 — Briefing

Explain purpose, rules, scenario assumptions, and exercise boundaries.

0:10–0:30 — Initial incident

Give participants the opening situation and let them establish their response.

0:30–0:50 — Complication #1

Introduce a significant operational problem.

0:50–1:10 — Complication #2

Introduce uncertainty, resource constraints, or conflicting information.

1:10–1:30 — Escalation

Test leadership, communications, coordination, or external interfaces.

1:30–1:40 — Transition

Introduce stabilization/recovery decisions.

1:40–2:00 — Hotwash

Capture strengths, gaps, and immediate corrective actions.

The realism test

Before running the exercise, ask your planning team:

“Could this actually happen to us, and would the participants genuinely have to make difficult decisions?” If the answer to either is no, redesign the scenario.

FEMA's HSEEP resources include templates for exercise plans, facilitator guides, MSELs, evaluation plans, participant materials, and after-action/improvement planning.Preparedness Toolkit+2

If you tell me what kind of emergency response team you have (corporate ERT, hospital, school, government, industrial facility, etc.) and the hazard you want to exercise, I can build you a complete tabletop package: scenario, objectives, inject timeline/MSEL, facilitator questions, evaluator sheet, and hotwash questions.

“We would call X.” “We would notify Y.” “We have a plan for that.” Whenever someone says “we would…”, ask:

“Okay—who does it, when, using what authority or procedure, and what happens if it doesn't work?” Have participants actually identify:

• Who makes the decision.
• What information they need.
• Which plan/procedure applies.
• Who needs to be notified.
• What resource is required.
• What the fallback is.
• How the decision gets documented.

That turns a conversational exercise into a capability test.

7. Introduce friction deliberately

Real incidents rarely fail because the first plan is completely useless. They fail because several small assumptions stop being true simultaneously.

Useful friction includes:

• A key person is unavailable.
• A communication channel fails.
• Information conflicts between two sources.
• A vendor doesn't respond.
• A resource is delayed.
• Leadership asks for an answer before the facts are complete.
• An employee reports something on social media.
• A neighboring organization requests assistance.
• The situation improves in one area while deteriorating in another.

Don't manufacture absurd complications just to make the exercise difficult. Each inject should connect to an objective.

8. Establish ground rules before starting

Tell participants:

• This is an exercise, not an evaluation of individual employees.
• Assume normal policies and authorities unless the scenario says otherwise.
• Say what you would actually do, rather than what sounds ideal.
• It's acceptable to say “I don't know.”
• If you discover that a procedure doesn't exist, that's a useful finding.
• Don't solve problems by inventing resources or authorities that don't exist.
• Exercise information stays within the agreed exercise boundaries.

A psychologically safe environment is important because you want people to expose weaknesses rather than hide them.

9. Evaluate behaviors, not personalities

Instead of:

“The operations manager didn't communicate well.” Record something observable:

“No common operating picture was established during the first 30 minutes, and participants used three different versions of the incident status.” Then ask:

• What was supposed to happen?
• What actually happened?
• What explains the difference?
• What consequence could that have?
• What corrective action would reduce the gap?

FEMA's Exercise Evaluation Guides are designed to make observation and data collection more consistent and to connect findings to objectives and corrective actions.

A strong tabletop exercise (TTX) should feel real enough to expose weaknesses, but controlled enough that people can learn without fear of failure. FEMA’s HSEEP framework is a good model: establish objectives, design a realistic scenario, conduct the exercise, evaluate performance, and turn findings into corrective actions.FEMA Training+1

1. Start with 3–5 specific objectives

Don't make the objective “practice emergency response.” Make it measurable.

For example:

• Determine whether the team can activate the emergency response plan within 15 minutes.
• Test how leadership makes decisions when information is incomplete.
• Validate internal and external communication procedures.
• Identify who has authority to shut down operations or evacuate.
• Test coordination with fire/EMS, law enforcement, utilities, vendors, or local government.

FEMA recommends aligning objectives with the capabilities you actually want to evaluate.FEMA Training

2. Pick a scenario that is plausible for your organization

Choose a hazard based on your actual risk assessment—not the most dramatic disaster you can imagine.

Good TTX scenarios might include:

• Severe weather followed by a prolonged power outage
• Fire or hazardous-material release
• Active threat requiring shelter/evacuation decisions
• Cyberattack disrupting critical systems
• Loss of a key facility or utility
• Mass casualty incident
• Pandemic/communicable-disease event
• Supply-chain failure
• Combined events, such as tornado → power outage → communications failure

The best scenarios contain ambiguity and competing priorities, rather than having an obvious correct answer.

3. Give participants only what they would actually know

This is one of the biggest differences between a useful exercise and a rehearsal where everyone already knows the answers.

At the beginning, give them something like:

08:15 — A severe storm has moved through the area. Several employees report structural damage at the facility. Power is intermittent. Cellular service is congested. The emergency operations center has not yet been activated. Then ask:

“What do you do?”

Don't immediately provide the next step.

Let participants explain:

• Who makes the decision?
• Who gets called?
• What information do you need?
• Where do you get it?
• What authority do you have?
• What happens if that person isn't available?
• How do you communicate with employees?
• What happens to critical operations?

That exposes gaps in plans much more effectively than simply walking through the emergency plan page by page.

4. Use injects to progressively complicate the situation

Prepare a sequence of developments that force decisions.

For example:

FEMA's HSEEP materials specifically provide tools for developing scenarios and a Master Scenario Events List (MSEL) to manage injects.Preparedness Toolkit

5. Assign clear exercise roles

You generally want:

• Players — the emergency response team making decisions.
• Facilitator — keeps discussion moving and asks probing questions.
• Controller — manages scenario information and injects.
• Evaluators/observers — document what actually happens.
• Exercise director — responsible for the overall exercise.

Don't let the facilitator become the person who solves every problem. Their job is to ask questions such as:

“Who has authority to make that decision?” “What procedure are you following?” “What information would you need before making that decision?” “Your normal communication channel isn't available. What do you do?” FEMA identifies facilitators/controllers and evaluators as distinct exercise roles.FEMA Training

6. Make the exercise psychologically safe

Tell participants explicitly:

This is not a test of individual performance. We're testing the system. Finding a problem is a successful outcome of the exercise. Avoid turning the exercise into a “gotcha.”

If someone discovers that a phone number is wrong, a backup generator procedure is unclear, or nobody knows who has authority to make a particular decision, that's valuable information.

7. Evaluate decisions—not just whether people followed the plan

Create a simple evaluation sheet around your objectives.

For each objective, capture:

• What was expected?
• What actually happened?
• What worked?
• What didn't?
• Why?
• What consequence could the gap create?
• What corrective action is needed?

FEMA describes Exercise Evaluation Guides as a way to systematically collect observations and connect results to objectives, capability targets, and corrective actions.Preparedness Toolkit+1

8. End with a structured hotwash

Immediately afterward, ask everyone:

1. What worked well?
2. What surprised you?
3. Where did we get stuck?
4. What information did you wish you had?
5. Which procedure or plan needs to change?
6. What should we fix first?

Don't spend the whole debrief discussing hypothetical improvements. Capture concrete issues.

9. Produce an After-Action Report—and actually fix things

The exercise isn't finished when everyone leaves the room.

Turn observations into an improvement plan:

This closes the loop between exercise → finding → corrective action → improved capability, which is a central principle of HSEEP.FEMA

A practical 2-hour format

For a first exercise, I'd use:

0:00–0:10 — Introduction

• Purpose
• Ground rules
• Objectives
• Participant roles

0:10–0:25 — Initial scenario

• Present the opening situation
• Let participants respond

0:25–1:15 — Escalation

• Introduce 4–6 injects
• Force decisions
• Introduce communication/leadership/resource complications

1:15–1:35 — Recovery/continuity

• Transition from immediate response to sustained operations

1:35–1:50 — Hotwash

• What worked?
• What failed?
• What surprised us?

1:50–2:00 — Priorities

• Identify the top 3–5 corrective actions

For a more formal exercise, FEMA provides templates for the exercise plan, facilitator guide, MSEL, evaluation plan, situation manual, and other components.Preparedness Toolkit+1

The key test

A realistic TTX should repeatedly make participants say:

“We need to figure that out.”

That's exactly what you want. If everyone instantly knows the answer to every problem, you're probably conducting a briefing rather than exercising the response system.

If you tell me what type of organization you have (business, hospital, school, municipality, nonprofit, etc.), team size, and the top 1–2 hazards you're concerned about, I can build a complete 90-minute tabletop package with the scenario, injects, facilitator questions, evaluator checklist, and hotwash questions.

A good tabletop exercise (TTX) should feel real enough to expose weaknesses, but controlled enough that nobody is actually put at risk. FEMA’s HSEEP framework is a strong model: design around clear objectives, conduct the exercise, evaluate performance, and turn findings into corrective actions.FEMA Training+1

1. Start with what you want to learn

Don't begin with a dramatic scenario. Begin with 2–4 specific objectives.

For example:

• Determine whether the emergency response team can establish incident command within 15 minutes.
• Test how quickly critical information reaches senior leadership.
• Determine whether evacuation/shelter decisions are made using the current plan.
• Test coordination between security, facilities, IT, communications, HR, and external responders.
• Identify gaps in emergency communications and business continuity.

Objectives should drive both the scenario and the evaluation—not simply be things you hope to observe afterward.Preparedness Toolkit+1

2. Choose a plausible scenario

Pick a hazard that is credible for your organization and difficult enough to test your objectives.

Examples:

• Severe weather causes building damage and loss of power.
• A fire requires evacuation while several employees are unaccounted for.
• A hazardous-material release affects part of the facility.
• A cyber incident disrupts communications during a physical emergency.
• A suspicious package triggers a security response.
• A regional disaster disrupts transportation, staffing, utilities, and suppliers.

The best scenario usually combines one primary incident with secondary complications.

For example:

10:05 a.m.: A severe storm damages the facility. Power is intermittent. 10:20: Two employees cannot be accounted for. 10:30: The primary communication system fails. 10:45: Local news reports conflicting information about the incident. 11:00: A critical supplier says it cannot deliver. 11:15: Senior leadership asks whether operations should be suspended. Those developments force participants to make decisions rather than simply recite the emergency plan.

3. Get the right people in the room

Include the people who would actually have to make or execute decisions.

Depending on your organization, that might include:

• Emergency response/team leadership
• Security
• Facilities
• IT/cybersecurity
• HR
• Communications/public information
• Business continuity
• Operations
• Senior management
• Safety/health personnel
• Key external partners or emergency-management representatives

Keep the exercise planning team separate from players where practical. CISA specifically recommends that planners develop the exercise rather than simultaneously participating as players.CISA

4. Make it interactive

A weak tabletop is essentially a PowerPoint presentation.

A strong one continually asks:

"What do you do now?" For every major inject, ask:

1. What information do you have?
2. What don't you know?
3. Who has authority to make the decision?
4. What is your immediate action?
5. Who needs to be notified?
6. What resources do you need?
7. What happens if that resource isn't available?
8. What policy, plan, or procedure are you relying on?

Don't rescue participants when they get stuck. Let the exercise expose the gap.

Tabletops are specifically intended for discussion, problem-solving, and identifying strengths and shortfalls rather than simulating every operational action.Texas Division of Emergency Management

5. Introduce realistic friction

Real emergencies rarely provide perfect information.

Add complications such as:

• Conflicting reports
• Missing personnel
• Failed radios or phones
• Delayed information from outside agencies
• Key decision-makers unavailable
• Conflicting priorities
• Public/media inquiries
• Transportation problems
• Power or network outages
• Resource shortages
• Changing weather
• A second incident occurring while the first is unresolved

The goal isn't to "trick" the team. It's to see whether the system remains functional when assumptions fail.

6. Use an exercise controller/facilitator

Have one person facilitate rather than allowing the discussion to become an uncontrolled meeting.

The facilitator should:

• Introduce the scenario.
• Deliver timed injects.
• Keep discussion moving.
• Ask probing questions.
• Prevent one person from dominating.
• Record unresolved issues.
• Distinguish "we would do X" from "our plan actually says X."
• Stop debates that aren't relevant to the objectives.

Have separate evaluators/data collectors record what actually happens. FEMA recommends planning evaluation from the beginning and collecting objective data during exercise play.Preparedness Toolkit+1

7. Evaluate decisions, not personalities

Create an evaluation sheet around your objectives.

For each objective, capture:

FEMA's Exercise Evaluation Guides are designed specifically to organize observations against objectives, capabilities, and critical tasks and support the after-action report.Preparedness Toolkit

8. Finish with a structured hotwash

Immediately afterward, ask participants:

• What worked?
• What surprised you?
• What was unclear?
• Where did the plan fail?
• What information did you wish you had?
• Which decision was hardest?
• What capability do we need that we don't currently have?
• What should we change before the next exercise?

Avoid turning this into a blame session. The objective is organizational learning, not determining who made a mistake.

9. Produce an After-Action Report and Improvement Plan

This is arguably the most important part.

Within a reasonable period after the exercise, document:

• Strengths
• Areas for improvement
• Significant capability gaps
• Recommended corrective actions
• Responsible owner
• Priority
• Target completion date
• Method for verifying completion

Then actually track the corrective actions.

HSEEP treats improvement planning as part of the exercise cycle—not an optional report-writing exercise.Preparedness Toolkit+1

A practical 90-minute tabletop

A simple format that works well:

0–10 min — Introduction

• Objectives
• Ground rules
• Roles
• Scenario assumptions

10–25 min — Initial incident

• Present initial conditions.
• Ask participants what they do first.

25–45 min — Escalation

• Introduce the first major complication.
• Force decisions around communications, resources, leadership, and safety.

45–65 min — Cascading problems

• Introduce 2–3 simultaneous issues.
• Remove one assumed capability.

65–80 min — Executive decision point

• Give leadership a consequential decision: evacuate, close operations, shelter, notify authorities, activate continuity plans, etc.

80–90 min — Hotwash

• Capture strengths, gaps, and immediate actions.

Then conduct the formal evaluation and improvement planning afterward.

The key test

At the end, you should be able to answer:

"What did this exercise teach us that we didn't know before we started?" If the answer is "nothing," the exercise was probably too easy—or designed to demonstrate that the plan works rather than genuinely test it.

For a ready-made structure, FEMA provides HSEEP templates for exercise plans, facilitator guides, master scenario event lists, evaluation plans, and after-action/improvement planning; FEMA also provides Exercise Starter Kits that can be customized for specific hazards.Preparedness Toolkit+1

preptoolkit.fema.gov

If you tell me what kind of organization you have (corporate facility, hospital, school, municipality, etc.) and your biggest emergency risks, I can build a complete 90-minute tabletop package with the scenario, injects, facilitator script, participant questions, evaluator checklist, and AAR template.