Coordination: Civil Response
Master team coordination during regional unrest
Complete Foundations to unlock.
PHYSICAL · INTELLIGENCE · CYBER
Read converging signals. Make a defensible call. Practice the judgment that turns incomplete information into a clear operating posture.
Proceed with enhanced monitoring.
Reduce exposure with compensating controls.
Halt affected operations.
01 / THE CAMPAIGN
Complete each chapter to unlock the next.
Learn structured decision-making when a critical vendor fails
Master team coordination during regional unrest
Complete Foundations to unlock.
Navigate IT/GSOC coordination under compromise
Complete Coordination to unlock.
Integrate physical, cyber, and intel in real-time
Complete Technical to unlock.
Protect leadership from multi-vector coordinated attack
Complete Fusion to unlock.
Lead real-time insider threat response with subject on-site
Complete Executive to unlock.
02 / FREE PLAY
Every scenario is available here. No campaign unlock required.
Multi-vector threat targeting executive leadership: cyber reconnaissance, physical surveillance, and vendor compromise converge.
Building automation vendor compromised by APT group. Life-safety systems at risk, physical security blueprints exposed.
Privileged employee showing indicators of data theft and external coordination. Real-time investigation with subject on-site.
Coordinate multi-regional team response during downtown protests affecting HQ. Practice executive briefings, shift handoffs, and stakeholder management.
Lead global team through critical platform failure. Maintain operations, coordinate vendor escalation, and influence technology roadmap.
Badge system vendor experiences ransomware attack affecting credential management.
Anomalous network behavior from VMS suggests potential supply chain compromise.
Third-party alarm monitoring service experiences critical infrastructure failure.
THE PRACTICE
Work with timed signals, explicit posture calls, and a documented decision trail. Finish with an after-action review you can examine and export.
Hourglass Command is a training simulation, not a live incident-management system.