Core Capability

Exercises that find the cracks — before something else does.

Most exercises are pageantry. They rehearse what people already know, fail safely, and produce after-action reports nobody reads. Fenix EM designs HSEEP-compliant exercises that actually stress the seams of your operation — the ones that will fail under real conditions, the ones your AAR/IP needs to find before an event finds them for you.

What's Included

HSEEP-Compliant Exercise Programs

  • Discussion-based through full-scale
  • Multi-year exercise programs
  • Scenario design & injects
  • Facilitation & controller staff
  • AAR / IP development
  • ICS 100 – 800 instruction
Who This Is For

If you have a grant requirement, a training cycle, or a specific failure mode you need to test.

Public Sector
01

EM Directors & Training / Exercise Coordinators

Cities, counties, and tribal governments executing HSGP-, UASI-, or EMPG-funded exercise requirements — or building a multi-year IPP that progresses from discussion-based through full-scale.

02

Public Health, Fire, Law Enforcement

Agency-specific exercise programs covering pandemic response, mass casualty incidents, active threat, and inter-agency coordination scenarios across public safety disciplines.

Private Sector
03

Healthcare & Critical Infrastructure

Hospital systems facing CMS Conditions of Participation requirements, utility operators preparing for NERC CIP exercises, and critical infrastructure operators rehearsing cyber, physical, and integrated scenarios.

04

Resorts, Venues & Multi-Site Enterprises

Casinos, stadiums, festivals, and large enterprises validating crisis response, business continuity, and active threat plans through executive tabletops and operational exercises.

Exercise Types

From seminar to full-scale.

The HSEEP exercise progression spans seven types, each calibrated to test a specific level of capability. Most engagements begin where your program is and progress upward.

Discussion-Based · 01

Seminar

Informal, instructor-led overview of plans, policies, or capabilities. The right starting point when staff are new to a topic or doctrine has changed.

Half-day · 10 – 50 participants
Discussion-Based · 02

Workshop

Structured working session producing a deliverable — a draft plan, an updated SOP, a refined policy. Discussion with output, not just discussion.

Half- to full-day · Working group sized
Discussion-Based · 03

Tabletop Exercise (TTX)

Scenario-driven discussion in a low-stress setting. Stress-tests decisions, authorities, and information flow without real operations. Most common entry point.

Half- to full-day · Decision-makers focused
Discussion-Based · 04

Game

Simulated decision-making against a competing or adapting opponent or system. Useful for cyber, threat actor, and adversarial scenarios.

1 – 2 days · Specialized facilitation
Operations-Based · 05

Drill

Single-function or single-team rehearsal. Tests one thing — alert and warning, evacuation, mass dispensing — under realistic conditions.

2 – 4 hours · One function
Operations-Based · 06

Functional Exercise (FE)

Multi-function, multi-team simulation in real time. Tests EOC, command, and coordination without deploying field resources. Significant inject library required.

4 – 12 hours · EOC / command focus
Operations-Based · 07

Full-Scale Exercise (FSE)

Multi-jurisdictional, multi-agency, in-the-field exercise involving actual deployment of personnel and equipment. The most realistic — and most resource-intensive — exercise type. Typically the capstone of a multi-year IPP.

1 – 3 days plus build-up · Field deployment · Full controller / evaluator staff
Methodology

The work, in three phases.

Every HSEEP-compliant exercise follows the same disciplined arc — design grounded in real risk, conduct that stresses the seams, and post-exercise work that drives actual change.

01Design

Concept & Objectives Development

We start with what you actually need to test — not what's easiest to design. Capabilities-based objectives tied to real risk, scenario design grounded in plausible events, and an inject library that forces decisions under stress. The Concept & Objectives Meeting (C&O) is where most exercises succeed or fail before they begin.

Typical timeline: 8 – 16 weeks pre-exercise
Deliverables
  • Concept & Objectives document
  • Situation Manual (SitMan)
  • Master Scenario Events List (MSEL)
  • Exercise Plan (ExPlan)
  • Controller / Evaluator handbook
  • Player handbook & pre-exercise briefings
02Conduct

Exercise Execution

The exercise itself — facilitated, controlled, and evaluated to HSEEP standard. We staff facilitator and controller roles directly or train your team to run them. Evaluation is structured around capability targets, with data captured in real time for the after-action.

Typical timeline: Exercise day(s) plus immediate hot-wash
Deliverables
  • Exercise facilitation & control
  • Evaluator structure & data capture
  • Player observation & documentation
  • Hot-wash facilitation
  • Initial findings briefing
03Improve

After-Action & Improvement Planning

The phase most exercises skip or do badly. We build an AAR that names actual findings — not platitudes — and an Improvement Plan that converts each finding into a tracked corrective action with owners, deadlines, and validation criteria. Then we follow up.

Typical timeline: 4 – 8 weeks post-exercise
Deliverables
  • After-Action Report (AAR)
  • Improvement Plan (IP) with tracked actions
  • Stakeholder findings briefing
  • Corrective action ownership matrix
  • Follow-up validation framework
How to Engage

Three ways to engage.

Engagement scales to the type of exercise, scope of participants, and whether this is a one-time event or a multi-year program. Most clients begin with a single exercise and expand into a program from there.

Why Fenix EM for Exercises

Exercises that change something — by design.

The test of an exercise isn't whether it ran on schedule or whether participants enjoyed it. It's whether the AAR named real findings, whether those findings were converted into tracked corrective actions, and whether something in your program is meaningfully better six months later.

Fenix EM designs exercises with that test in mind from the C&O meeting forward.

  • 1

    Master Exercise Practitioner (MEP)

    One of the most rigorous exercise design credentials in the field — earned through demonstrated competency, not coursework alone.

  • 2

    HSEEP & FEMA Adjunct Instructor

    Active HSEEP Instructor and FEMA Adjunct Instructor credentials. Exercises are built by someone who teaches the doctrine, not someone who learned it for the engagement.

  • 3

    Real-deployment scenario realism

    Scenarios informed by sixteen years of actual deployments — Kerrville, Helene, Milton, Hawaii, COVID, Route 91. Injects designed to mirror what actually happens, not what's supposed to happen.

  • 4

    Built around the AAR / IP

    Most exercises are designed around the exercise day. Ours are designed around the corrective actions the AAR will generate — because that's where the value actually is.

Common Questions

What buyers actually ask.

Below are the questions that come up most often in pre-engagement conversations. If yours isn't here, the discovery call is the right place for it.

How far in advance do we need to start to hit a specific exercise date?
For a tabletop, 8 to 12 weeks is comfortable; tighter timelines are possible for low-complexity scenarios. Functional exercises need 4 to 6 months. Full-scale exercises typically need 6 to 9 months minimum, sometimes more if multiple jurisdictions or agencies are involved. The single biggest cause of weak exercises is starting design too late.
Can this be funded through a grant?
Yes — exercises are directly funded under HSGP, UASI, EMPG, and most state-level preparedness grants. Healthcare exercises may be funded under HPP. Grant cycles drive a lot of exercise scheduling, and we structure engagements to align with reporting periods and obligation deadlines whenever possible.
What's the difference between a tabletop and a functional exercise?
A tabletop is a discussion exercise — participants talk through how they would respond, in a low-stress setting. A functional exercise is operations-based — participants actually execute their roles in real time, but without deploying field resources. A full-scale takes it further by deploying actual personnel and equipment in the field. Cost, complexity, and lead time scale accordingly.
We've never done a full-scale. Should we start there?
No. Almost never. Full-scale exercises that aren't preceded by foundational discussion-based work usually fail badly — and the failure isn't useful, because the AAR can't distinguish between people who don't know the plan and people who do but couldn't execute it under stress. The HSEEP building-block progression exists for a reason. We'll usually recommend a tabletop first, then a functional, then a full-scale across an 18 – 24 month arc.
Can you handle hospital, healthcare, or CMS-required exercises?
Yes. Healthcare exercises governed by CMS Conditions of Participation, Joint Commission, and HPP requirements follow the same HSEEP architecture but with healthcare-specific scenario design (mass casualty, surge, evacuation, infectious disease). The core methodology transfers; the doctrine context shifts.
Do you handle ICS / NIMS training as well?
Yes. ICS 100 through ICS 800 instruction is included as a service, delivered to FEMA-Adjunct-Instructor standard. Most clients bundle ICS training with their exercise program so participants are credentialed before they walk into a functional or full-scale exercise.
What happens if our AAR identifies something embarrassing?
It often does — and that's the point. Findings that don't make leadership uncomfortable usually weren't worth running an exercise for. Our AARs are written to be honest but constructive: they name what failed, identify the root cause, and convert each finding into a corrective action with an owner. We can structure the AAR distribution (executive summary vs. full report, internal vs. external) to match your governance environment.
Do you work with private-sector clients on exercises?
Yes — healthcare systems, utilities, casinos, stadiums, multi-site enterprises, and critical infrastructure operators all run HSEEP-style exercises. Private-sector exercises tend to focus more on executive tabletops, business continuity validation, active threat scenarios, and crisis communications. The methodology is the same.
Next Step

A discovery call is the right starting point.

Thirty minutes, no pitch deck, no contract pressure. We talk through what you're trying to test, what's driving the timeline, what your participants will tolerate, and whether a Fenix EM exercise is the right fit. If it is, we'll discuss scope and structure. If not, you'll leave with a clearer view of what the right next step is.

Prefer to start smaller?

Both Fenix EM diagnostics surface exercise-program currency as a domain. Free, immediate.

Municipal Preparedness Audit (PDF) → Business Continuity Risk Snapshot (PDF) →