Exercise mode

Exercises exist to find your organisation's weak points while they cost nothing. The whole flow works — clock, alerts, registry, filing — but every trace produced is marked as a rehearsal and the legal representative stays out of the escalation.

Switching it on and off

Switch it on from the menu, under Exercise. With the mode on, the header says so plainly and:

• every registry row produced is prefixed with [esercitazione];
• the legal representative is excluded from escalation;
• system alerts about undeliverable mail are suppressed;
• everything else — clock, reminders to contact and deputy, filing, dossier — behaves normally.

Switching it off restores ordinary behaviour. Rows already marked stay marked: they are the evidence that the exercise took place.

Why run one

The things you only discover by trying:

• the named contact changed role six months ago;
• the alerts land in the corporate spam filter;
• nobody knows where the reporting platform credentials are;
• whoever must approve the notification text is unreachable in the evening;
• the product involved is not in the register and nobody knows its part number.

A ready-made scenario

1. Switch on exercise mode.
2. Submit a report through the public form as an outside researcher would, naming a real product.
3. Check the alert reaches the security mailbox and the chat channels you configured.
4. Accept the report and run the triage to an «obligation» outcome: set the moment of awareness to the time of the report.
5. Verify the clock starts and that the start alert reaches contact and deputy.
6. Fill in the notification draft as if it were really going to be filed, and have it approved by whoever would really approve it.
7. Simulate the filing by uploading a test PDF as the receipt.
8. Generate the dossier and read it: it is what you would hand to an authority.
9. Switch exercise mode off and archive the test case.

The debrief

Answer four questions in writing and keep the answers with the exercise dossier:

Cautions