Tabletop Exercises, Drills and After-Action Reviews
Test plans safely through discussion and drills, then capture lessons and track corrective actions to closure.
Why it matters
Plans that are never tested fail under pressure. Exercises reveal gaps cheaply; after-action reviews make sure they get fixed.
Who it's for: Managers, emergency coordinators, security and safety teams.
Learning objectives — by the end you can:
- Design a simple tabletop exercise with objectives and injects.
- Run an after-action review: strengths, gaps, lessons, actions.
- Track actions with owner, due date and verification.
Key terms
- Tabletop exercise
- A discussion-based walk through a scenario, without deploying resources.
- Inject
- A new piece of scenario information given during the exercise.
- After-action review (AAR)
- A structured review of what was planned, what happened, why, and what to change.
Lesson notes
Running a tabletop
- 1Set 2–4 measurable objectives (e.g. 'test escalation to senior management within 15 minutes').
- 2Write a realistic, non-sensitive scenario and 4–6 injects.
- 3Invite decision-makers; assign a facilitator and note-taker.
- 4Run in 60–90 minutes; encourage honest discussion.
- 5Hot debrief, then a written AAR within a week.
AAR structure
| Section | Questions |
|---|---|
| Objectives | What did we want to test? |
| Timeline | What happened, when? |
| Strengths | What worked well? |
| Gaps | What did not work, and why? |
| Actions | What will we change, who, by when? |
Video lesson
Video to be added
A verified video from an official or reputable channel has not yet been selected for this topic. The text lesson above covers the full content.
Search YouTube for related videosPractical story: The phone tree nobody had updated
Fictional teaching example
Situation. A company ran a tabletop for a building power failure during night shift.
Known facts
- The duty manager's call list had three numbers of people who had left.
- Nobody knew who authorised overtime for emergency contractors.
Decisions
- AAR assigned HR to maintain the call list monthly.
- Finance pre-approved emergency spend limits.
Outcome. A real outage two months later was managed within the planned times.
Lessons
- Tabletops find administrative gaps.
- Assign owners and dates.
- Re-test after changes.
Worked example
Worked example: AAR action log
| Gap | Action | Owner | Due | Verification |
|---|---|---|---|---|
| Outdated call list | Monthly HR update | HR lead | 30 days | Spot-check 3 numbers |
| No spend authority | Pre-approved limit | Finance | 14 days | Policy published |
Practice exercise
Design a 3-inject tabletop for 'fire alarm during a visitor tour'.
After-action review template (CSV)Quiz
Sign in to save quiz results.
References
- Official guidanceCISA — Tabletop Exercise Packages
- Official guidanceFEMA — HSEEP
Verify current editions and applicability. Standards are copyrighted; consult licensed copies for exact requirements.
Report an issue with this contentRelated topics
Facility & Event Security
Event and Public-Facing Venue Security Awareness
Plan crowd flow, entry, communications and emergency coordination for events and busy public venues.
Threat Awareness
Suspicious Activity: Objective Observation and Reporting
Notice behaviour — not appearance — describe it objectively and report it quickly through the right channel.
Emergency Roles
Fire Warden Awareness
What fire wardens do before, during and after an alarm — and what they must not do.