ISO ARTICLES BUSINESS CONTINUITY & OPERATIONAL RESILIENCE ARTICLE 99

Testing Leadership Decision-Making Under Time Pressure

Design crisis exercises that test executive judgement, decision authority, information quality and escalation under realistic time pressure without creating performative confusion.

ISO Toolkits Editorial Team Business continuity guidance

A senior crisis team can know the corporate continuity policy and still struggle when confronted with incompatible priorities, delayed information and a choice that cannot be delegated. A polished tabletop often hides this weakness by giving leaders complete data and a single obvious decision. Decision-making competence is tested when executives must establish priorities, authorize proportionate action, acknowledge uncertainty and communicate defensible reasons before every fact is available. The test should be stressful enough to reveal process weaknesses, while remaining controlled and psychologically safe.

Photo pending: Executive crisis management group making time-sensitive resource allocation decisions in a facilitated tabletop exercise

01Define which leadership decisions the exercise must expose

Choose questions that only the strategic response group can resolve: when to activate wider governance, allocate scarce recovery capacity, accept a temporary reduction in service, communicate a serious uncertainty or authorize expenditure. Avoid filling senior participants’ time with technical tasks that process owners should perform. Clarify the decision authority and its limits before the scenario starts.

Set observable criteria for a useful decision: what information was requested, which stakeholders were considered, what risks were accepted and how the decision was communicated. The exercise should not reward a leader merely for selecting the facilitator’s preferred option. ISO 22361:2022 addresses crisis leadership and decision complexity as guidance; the organization should adapt evaluation to its own governance and obligations.

Decision scope. Choose strategic issues that genuinely need executive authority, such as allocating one recovery team to two priority services. Technical restoration steps belong to the competent operators. The exercise should expose ambiguous delegation or risk acceptance boundaries at leadership level.

Technical context: ISO 22361:2022 — Crisis management — Guidelines is one verified source for the concepts discussed here.

02Introduce information gaps that resemble real incidents

Crisis information rarely arrives as a complete and coherent report. Provide partial status from operations, a credible but unverified supplier estimate and a customer escalation with a different version of events. Then observe whether leaders identify assumptions, ask for independent verification and preserve urgent action where uncertainty cannot be eliminated.

Keep injects fair. Do not conceal information that participants could reasonably obtain from their assigned teams solely to manufacture failure. State what is known, what is not known and which sources are available. The aim is to test the quality of escalation and prioritization under ambiguity, not the ability to guess hidden facts in an artificial game.

Uncertain facts. Provide conflicting but credible reports and observe whether executives seek validation without abandoning urgent protective action. The objective is not guessing the facilitator’s secret information. Note when the group treats an unverified supplier estimate as a guaranteed recovery time.

03Apply time pressure without undermining safety

Time constraints can be useful when they reflect a meaningful deadline: a safety isolation choice, an expiring transport window or a required customer notification. A countdown with no operational consequence is theatrical. Set a simulated time scale and tell observers which durations are real. Participants must be able to pause for a safety concern or exercise-control issue.

Assign an exercise controller who can adjust tempo and prevent unreasonable overload. A useful challenge may have two simultaneous demands with one scarce specialist team, forcing executives to select a priority and explain what is postponed. Watch for impulsive decisions that bypass known legal duties, but avoid punishing a prudent temporary hold when the evidence is insufficient.

Pressure realism. A real safety isolation or communication deadline provides meaningful urgency. Artificial countdowns with no operating consequence measure theatrical speed. Keep an exercise stop authority and fair access to information that a real leadership group could reasonably request.

04Observe decision rights, dissent and escalation

Check whether the team recognizes who can approve a public statement, stop an unsafe operation, invoke an external contract or accept a material business risk. Note whether a legal, technical or frontline perspective is invited before a consequential decision. Silence in the meeting may reflect status dynamics rather than agreement.

Use the exercise to reveal where governance is ambiguous: two executives may both believe they own activation, or everyone may wait for a chief executive who is unavailable. Test deputies and delegated limits. An effective decision log should record options considered, chosen action, rationale, uncertainty, owner and review trigger without becoming so elaborate that it delays urgent containment.

Dissent and escalation. Observe whether legal, operational and site perspectives reach the decision table and whether deputies can act when the usual executive is absent. A decision log should record option, consequence, authority and review trigger without delaying immediate containment.

Photo pending: Exercise observers documenting real decisions and contradictory updates during a simulated multisite disruption

05Test communication of decisions to operational teams

A leadership decision has little value if the response organization cannot implement it. After each material choice, ask the team to draft and send a direction through the exercise’s controlled channel. Observe whether the instruction specifies the intended action, affected services, deadline, safety boundaries and confirmation required from recipients.

Introduce a contradictory update from a site or customer and see whether executives revise the instruction coherently. Distinguish a corrected decision from inconsistent orders issued to separate teams. The observation record should link a boardroom-level choice to the operational result or remaining uncertainty, not stop at the meeting minute.

Decision transmission. After a leadership choice, test the actual direction sent to operational responders. A boardroom decision that never reaches the affected site is not an effective response. Check clarity on scope, action, timing, safety conditions and acknowledgment.

Decision domainOwner or objectiveObservable evidence
DecisionActivation and resource allocationRationale and delegated authority
InformationIncomplete status reportsVerification request and timestamp
CommunicationCross-site instructionsConsistent direction and receipt
DebriefDecision process weaknessRevised governance and retest

06Debrief how reasoning changed as facts arrived

Use a structured after-action discussion to compare initial assumptions with later evidence. Ask leaders which information they trusted, what they would now verify earlier and which authority gap caused delay. Reconstruct the decision sequence without reducing it to personal blame. Observers should separate a defensible choice made under uncertainty from a poor process that happened to produce a favorable simulated outcome.

Capture concrete changes: revised delegation levels, a simpler crisis briefing format, an escalation trigger or a new communications approval route. Assign owners and a follow-up test. Do not declare success because every senior participant attended; the relevant outcome is whether critical decisions can be made and transmitted under the conditions likely to occur.

Reasoning review. Debrief the information available at each decision point instead of judging outcomes using facts learned later. A defensible choice under uncertainty may differ from the eventual best-case result. Distinguish process errors from good judgement affected by an unfavorable scenario outcome.

07Build recurring executive practice into resilience governance

Leadership teams change, and skills can decay between rare incidents. Use a programme of focused simulations that rotates scenarios, deputies and decision tensions. Include external dependencies, cross-site conflicts and reputational or legal communication when they match actual risks. A short executive inject during an operational exercise may reveal more than another annual theoretical presentation.

Management review should examine recurring weaknesses in information quality, authority, resource allocation and follow-through. If participants improve their rationale but operational response still stalls, the solution may be governance redesign rather than more individual training. Continuity leadership is a repeatable organizational capability, not the charisma of one incident commander.

Practice cycle. Rotate crisis scenarios and authority holders, including supplier failure, cross-site capacity conflict and external communication pressure. Track whether delegation clarity, information quality and operational follow-through improve. Management review should address systemic capability gaps rather than rank personalities.

Four resilience outcomes

AuthorityWho can decide

EvidenceKnown and unknown facts

ChoiceConsequence and trade-off

ExecutionReceived and acted upon

Practical Review Questions

  • Are the exercise decisions genuinely executive rather than technical tasks?
  • Does time pressure represent a real service or safety deadline?
  • Can leaders express uncertainty without delaying urgent containment?
  • Are decisions actually transmitted and acknowledged by operational teams?

Facilitate One Crisis Decision Under a Credible Deadline

Design an executive scenario with a material resource conflict, imperfect but available information and a realistic time-sensitive choice. Clarify the legal, safety and financial authorities that may be exercised, but do not tell participants which substantive option to choose. Controllers should introduce a supplier estimate that needs verification and a competing customer consequence, then observe whether leaders distinguish facts from assumptions, seek competent advice and issue a defensible direction.

Test the handoff of the decision to operations, including acknowledgment and how conflicting updates are corrected. Debrief the reasoning against what was known at each moment, not against later facts that the team could not have possessed. Produce a short change list addressing delegation, briefing format or escalation, with evidence from a subsequent focused test.

Closing Perspective

A meaningful leadership exercise examines decision quality and execution under uncertainty. It should produce clearer authority, more reliable information paths and tested response—not a theatrical winner or loser.

References & Further Reading

Official ISO publications informing the continuity method discussed above. Guidance publications provide recommendations; ISO 22301 contains BCMS requirements. The organization must validate any sector-specific legal duties separately.

  1. ISO 22361:2022 — Crisis management — Guidelines
  2. ISO 22398:2013 — Guidelines for exercises
  3. ISO 22320:2018 — Guidelines for incident management
  4. ISO 22301:2019 — Business continuity management systems — Requirements (with Amd 1:2024)
  5. ISO 22336:2024 — Organizational resilience policy and strategy guidelines