TriHealth - Enterprise Ransomware &
Downtime Preparedness Exercise

TriHealth recognized that traditional downtime drills were not enough to prepare for the growing threat of ransomware and multi-day IT outages. The organization engaged Stone Risk Consulting to design and lead an immersive, multi-day tabletop exercise simulating a large-scale cyberattack that crippled EHR systems, communications, and vendor connectivity.

Over 100 stakeholders across clinical operations, IT, supply chain, communications were involved, including 60 board and executive leaders. The exercise tested critical downtime procedures, manual workarounds, supply chain contingencies, and central cache readiness - validating what would actually work under duress.

Stone Risk facilitated structured discussions, complex decision-making challenges, and real-time escalation paths to mimic the chaos of a real-world ransomware incident. The exercise increased organizational awareness of interdependencies and operational constraints, elevated executive readiness under uncertainty, and resulted in a prioritized After-Action Report (AAR) with recommendations for resilience improvements.