Building total recall through Business Continuity Micro-simulations

Micro simulations work on the basis of short. highly focused tests on one specific aspects of incident response. Their focus tends to be on assuring the understanding and proficiency on organisations incident response that will affect the wider organisation.  They are designed to either confirm knowledge of response actions or capability to operate communications facilities.

Microsimulation exercises are designed to take minutes by leveraging technology.  By keeping these simulations small and punchy, they can be conducted regularly and build familiarity and expertise without major disruption.  Performing several microsimulations throughout a year will build awareness, proficiency and expertise that can often decline between larger, annual simulation exercises.

It is important to note that microsimulations can’t replace the more complex incident management or disaster recovery exercises, but they can help build the capability of individuals across the organisation, providing a more effective learning environment than larger exercises. Micro-simulations can be thought of a means to develop “people capability” across the organsation. This development of people competence compliments the organisations intrinsic resilience and recovery capability within the organisation’s infrastructure (such as IT recovery and workplace recovery strategies) and provides a more comprehensive framework). In this way, micro-simulations make an enormous contribution to creating an effective business continuity exercising and proving framework:

  • Procedural based recovery capabilities such as IT recovery can be tested thoroughly without worrying too much about specific scenarios. 

  • Micro-simulations help to preserve individual’s knowledge of response action and build their familiarity with the organisation’s incident management facilities – reversing the “forgetting curve”. A micro-simulation will concentrate on sustaining both “know what” and “know how” within the organisation 

​To make a micro-simulation program work, one thing that must be considered is authenticity which, in this case, means recreating the environment in which the a “live” incident situation could occur.  For instance, crises rarely take place when everyone is at their desk – it’s safe to assume that when an incident occurs a significant proportion of the organisation will be somewhere other than their desk and will contactable only by telephone.   A micro-simulation, therefore, will always include an element of technology to facilitate, execute the exercise and capture the results.  Two technologies are are important for this:

  • Learning management systems – these can provide a platform for capturing he results of “know-that” based simulations

  • Incident notification systems – these can be used to simulate notification processes and capturing metrics related to responses.

Here’s a few examples of some specific micro-simulations: