simler

Platform

Boardroom ReadinessCrisis Readiness

NIS2

Cbw checkBoard training
Pricing
Book a demoStart freeLog in

Know how your organization responds when things really go wrong.

Practice cyber incidents with employees, the crisis team and the board. simler shows what goes well, where the gaps are and whether your organization is demonstrably getting better.

Book a demoSee how simler works

How simler works

1Step 1 of 4

People

board and organization

The board practices in a tabletop exercise. The organization practices in a crisis simulation: IT, communications, legal and management, each from their own role.

Two ways to practice

1People

One platform. Two ways to practice.

Choose who practices. simler builds the scenario, guides the exercise and writes the debrief.

The board practices

Tabletop exercise30–60 minutes

Executives and management work through a cyber crisis together, round by round. An AI facilitator asks the questions that matter in a real crisis. You practice decision-making, roles, escalation and communication, and the responsibilities NIS2 places on the board.

More about Boardroom Readiness
Round 2 of 5

Facilitator

The attackers threaten to publish customer data unless they're paid by tomorrow. Who makes that call, and when do you inform the regulator?

Everyone sees the same screen. The conversation does the work.

The organization practices

Crisis simulation30–120 minutes

IT, communications, legal and executives: everyone who gets involved in an incident plays their own role live, with their own information. No dedicated crisis team needed. Roles you can't staff, simler plays.

More about Crisis Readiness

  • Security

    Defender alert: 14 file shares encrypted, last backup from last night.

  • Communications

    A journalist asks whether customer data is out in the open.

  • LegalAI

    A major customer demands a statement on the breach within 24 hours.

Every role sees something different. Just like the real thing.

2Practice

Cyber exercises without weeks of preparation

Organizing a good crisis exercise usually takes weeks of preparation, several colleagues and often an outside facilitator. simler writes the scenario from your own plans, guides the exercise and produces the debrief. So you can practice more often, without hiring a consultant every time.

  • Prepare

    The usual way: Weeks: writing the scenario, roles and script

    With simler: ±10 minutes for a tailored exercise

  • Schedule

    The usual way: Often postponed, cancelled or short of people

    With simler: Scheduled in simler, with a calendar invite for everyone. Empty roles in a crisis simulation are played by simler.

  • Practice

    The usual way: Half a day, with an outside facilitator

    With simler: 30–120 minutes, guided by simler

  • Debrief

    The usual way: The report follows afterwards

    With simler: simler writes the debrief for you

3Proof

Board and organization: everything comes together in one dashboard

From practice to demonstrable cyber resilience

An exercise only pays off if you do something with it afterwards.

You see where it goes wrong, improve what needs improving and show that your organization is prepared. In the next exercise, simler tests whether the improvement points have really been resolved.

  1. People
  2. Practice
  3. Proof
  4. Improve
  5. and again

Dashboard

Northwind Logistics · fictional company

Sample

Readiness index · organization

64

↑ 15 since the first exercise

Maturity

Level 2 of 5

Repeatable · your plans now set your level

Impact if it happened now

−€1.2M

Faster escalation cuts the disruption from 2.5 to 1.5 days

NIS2 · shown through exercises

7 of 16

5 partial · 2 gaps · 2 open

Latest exercise

Ransomware on the planning environment · 3 Oct

Time to each milestone. The tick is the target.

  • Severity assessed4m · target 30m
  • Escalated to decision-makers9m · target 1h
  • Ownership established12m · target 5m
  • External communication decided2h10 · target 8h

Improvement points

12 open · 3 retest

  • Agree the crisis roles for the first 15 minutes

    From: ransomware exercise · owner: COO

    High

  • Check backup integrity before restoring

    From: ransomware exercise · owner: IT

    Medium

  • Align IT and communications on messages to customers

    From: data breach exercise · included in the next exercise

    Retest

  • What went well

    The team brought in the executives quickly, so the big decisions were made in time.

  • What needs work

    For a long time it was unclear who was in charge, so IT and communications waited for each other.

  • What improved

    This time IT and communications aligned the messages to customers together. In the previous exercise that was still an improvement point.

4Improve

One exercise finds the gaps. The next one tests whether they're closed.

What goes wrong in a crisis simulation lands on your action list as an improvement point, with an owner. Think it's resolved? Mark it for a retest, and the next crisis simulation includes it. So you see not only what needs to improve, but also whether it has.

  • Every improvement point gets an owner and a severity
  • simler suggests how to update your plan
  • The next crisis simulation automatically includes marked points

Improvement points

From your exercises, with owner and retest

Open12

  • Agree roles for the first 15 minutes
  • Check backup integrity

In progress4

  • Regulator notification playbookRetest
  • Update the crisis contact list

Resolved9

  • Align IT and communications on messages to customers

The next crisis simulation automatically includes the points marked for retest.

Attackers now work at machine speed.

AI agents scan networks, find vulnerabilities and move through systems on their own. And a cloned voice of your CEO sounds just as convincing as the real one.

You can't stop every attack. You can make sure your team has been through the incident before it happens for real.

NIS2 makes your board personally liable.

The Cyberbeveiligingswet (Cbw), the Dutch implementation of NIS2, has been in force since 15 August 2026. Board members have to approve the measures, oversee them and be demonstrably trained. If they fall short, they can be held personally liable. With simler you don't just arrange that on paper: you practice it and record it.

Train the board first? See the NIS2 board training

Is your organization in scope for NIS2?

Check whether NIS2 applies to youFree, in 2 minutes, no account

Two subscriptions

Both 40% off in the first year. Billed annually, prices excl. VAT.

See pricingStart free

  • Boardroom Readiness

    Tabletop exercises with the board

    €249/ month in the first year

    then €415 per month

  • Crisis Readiness

    Crisis simulations with your organization, plus every tabletop exercise

    €498/ month in the first year

    then €830 per month

See in 30 minutes how simler fits your organization

We show you what an exercise for your organization looks like, from scenario to debrief.

Book a demoOr start free with a demo exercise
  • Built in the Netherlands
  • Exercises in Dutch or English
  • Aligned with NIS2 and the Dutch Cyberbeveiligingswet