Bespoke cyber crisis simulation: the Cisco case

Cisco

Duration
1 hour

Players
10 journalists

Production
2.5 months

Taking cybersecurity out of the “geek” corner

In a digital landscape where cyber threats never let up, information systems security can no longer be left to technical experts alone. For Cisco France, working with the agency Burson (formerly BCW), Arcane Experience created Suite 404, a cyber crisis simulation on a large scale. This immersive programme was designed to show that a security breach affects every one of an organisation’s stakeholders .

Explore our cybersecurity team building offers

 

The challenge: making cyber risk tangible for everyone

Cisco had a twofold aim: break digital risk out of its silo to reveal how systemic it is, and establish itself as the go-to voice for the media. A cyber attack is not just a network incident ; it’s an emergency that threatens the future of the company. The goal was to test decision-making under pressure and to show that digital crisis management is a matter of overall resilience, financial and reputational.

Our answer: luxury hotels as a mirror of universal vulnerability

To illustrate that every sector is exposed, we chose a narrative setting far removed from technology: luxury hospitality.

Picto management

The crisis scenario

Participants run the Hôtels Vauban as they face an intrusion by malware. The information system is paralysed by ransomware demanding they pay a ransom.

Picto Augmenter

Impact on every front

The game proves there is no miracle fix once an attack has happened. Pay or don’t pay, the damage is already done. The simulation makes the case for prevention and anticipation as the only real protection.

Picto prendre soin

The human factor

Over 60 minutes, players face wave after wave of attacks (leaks of sensitive data, media pressure). Each team has to weigh financial survival against legal responsibility, exposing the cognitive biases that surface under threat.

Impact and results: Cisco, a first-choice voice for the media

This simulation exercise brought together 10 journalists with real influence, turning a security demonstration into genuine Thought Leadership.

01
Press coverage

The programme gave participants a deep understanding of what resilience really involves, as shown by in-depth articles in specialist outlets such as CSO Online, which highlighted the strength of Arcane's teaching approach.

02
Working with the authorities

The game highlights the vital role of the national cybersecurity agency. Failing to cooperate with the authorities during an attack makes crisis communications far harder.

03
Recognised expertise

After this immersive session, Cisco's experts were identified by newsrooms as trusted sources for making sense of cyber news.

I'd like to thank the Arcane team for their invaluable contribution to this project. I really appreciated our conversations, the quality of the recommendations and of the many deliverables provided.
François Lesage
Head of Communications, Cisco France

FAQ: cyber crisis simulation and cyber strategy

Why run a cyber attack simulation exercise?

A cyber crisis simulation reveals your security weaknesses and tests how quickly your response setupreacts. It’s an essential stress testing tool to prepare your crisis teams to respond effectively to a real cyber attack .

How do you raise cybersecurity awareness among non-technical audiences?

Using storytelling and physical immersion is the key. Move the subject out of “tech” and you show that a cyber crisis hits sales, legal and communications alike. Decision-makers can then take real ownership of crisis management.

Should you cooperate with national authorities during an attack?

Absolutely. The simulation shows that cooperating with your ecosystem and the national authority builds resilience. Teams that shut themselves off put themselves in breach of their obligations and often make the crisis worse.