Procurement Wargame · by SYBX Group

Most crisis exercises never reach procurement.

A one-day crisis wargame in which supply is not a supporting role. Escalating disruption, scarce resources, and decisions whose consequences arrive rounds later.

Defence & dual-useCritical infrastructureGovernmentIndustrial mid-market

01The gap

83 % expect the crisis. 10 % rehearse for it.

The exercise market is well served. It just trains the wrong function.

83 %expect a serious crisis from hybrid attacks
10 %run crisis exercises regularly
16 %have agreements with alternative suppliers
20 haverage time a company can operate without internet

Bitkom study on hybrid attacks, 2026, based on a survey of more than 600 companies.

Crisis simulations almost always rehearse two things: external communication and IT recovery. Procurement sits at the table as a supporting role and is asked whether it can source a replacement. That is where the role ends.

In most real disruptions of the last three years the critical path was neither in the press office nor in the data centre. It was in supply. Nexperia halted car plants because a corporate dispute interrupted material flows. China's export controls hit defence manufacturers through magnet materials, not through their IT. Sabotage at a substation stops production and the supply chain behind it, not communication.

Only 16 % have an agreement with an alternative supplier, and that is the cheapest resilience measure there is. This is not an awareness problem. It is an execution problem.

02The format

A procurement game with a real crisis. Not a crisis game with procurement in it.

IT IS

A decision exercise

A procurement and supply chain organisation works an escalating disruption across several time jumps. Decisions are made under scarce resources, and their consequences arrive rounds later.

IT IS

More than a drill

A drill rehearses an existing procedure. A wargame tests whether that procedure holds when the situation does not fit the template. Most clients believe their emergency manual already covers this.

IT IS NOT

Communications training

Not an IT continuity drill, not a certification, not a forecast. And explicitly not a threat briefing. Every trigger is anchored in a documented event and cited as such.

IT IS NOT

Alarmism

A session that ends with a threat picture has achieved nothing. A session that ends with three decisions for next week has. That is a design constraint, not a marketing line.

03The session

Six rounds, from twelve months before to six months after.

The rounds are not equal intervals. They are time jumps, and that is the point: almost every effective measure takes longer than the crisis allows.

Round 0
T−12 M
Preparation. A scarce resilience budget against a catalogue of measures. Nobody knows which scenario is coming.
Round 1
T+4 h
First report, unclear picture. Who is responsible, who is allowed to decide?
Round 2
T+48 h
The scale becomes visible. First escalation, stock cover is calculated for the first time.
Round 3
T+10 d
Stock runs out. An unrelated second situation ties up capacity.
Round 4
T+6 w
Structural decisions. The cost of early improvisation becomes real.
Round 5
T+6 m
Resolution. The effect of the Round 0 decisions is revealed.

Round 0 is where the session earns its fee. Qualifying a second source takes six to eighteen months depending on the category. A team that decides it in Round 2 has nothing by Round 5. A team that decided it in Round 0 wins. That insight arrives at the table, not in a slide.

SCARCITY

Six resources in limited supply: liquidity, management capacity, supplier goodwill, stock cover, rule latitude and political capital. Every measure costs a combination. Without scarcity a team decides everything at once and learns nothing.

ADJUDICATION

Measures are assessed on the quality of the reasoning, not the idea. “We call the supplier” earns no modifier. “We call, we have grown volumes with them since 2019, our payment record is clean, and their Czech plant has free capacity” earns three.

FRICTION

Each round draws a friction card, drawn rather than chosen. The information from Round 1 turns out to be wrong. The board wants an assessment by 4 pm that is possible tomorrow at the earliest. Two plants report contradictory stock figures.

04Scenarios

Every trigger is anchored in something that has already happened.

Nothing is invented and nothing is extrapolated. Scenarios are built from four card sets: triggers, escalations, side situations and friction, adapted to your categories and lead times.

A1

Export controls on critical materials

A material does not become more expensive. It becomes legally unavailable.

Anchor: China listed Rheinmetall among 14 European companies on an export control list, July 2026.
A2

A sub-tier supplier you did not know

Your supplier reports failure because of an upstream vendor nobody in the house can name.

Anchor: the Nexperia crisis from late 2025, halting production at VW and others.
A3

Sabotage of infrastructure

A substation fails, a supplier plant stops, restart unknown.

Anchor: German federal police recorded over 320 sabotage cases in 2025.
A6

Reservist call-up

Three key buyers are away for six weeks at the same time. Who holds the supplier relationships in their head rather than in the system?

Anchor: German reserve legislation, planned for early 2027.
A8

Sanctions and compliance trap

A supplier is listed or a payment is held by the bank. Goods in transit, prepayments made, no qualified alternative.

Anchor: ongoing EU sanctions packages and listings.
A9

Insolvency during ramp-up

A single-source supplier files for insolvency while volumes have just tripled. The tooling sits in their plant and ownership is unclear.

Anchor: insolvency exposure in supplier industries under capacity ramp-up.

Twelve triggers in total, including cyber compromise at a supplier, corridor disruption, competition for logistics capacity in a defence readiness scenario, withdrawal of a dual-use licence and an insider case in the sourcing process.

05What you get

A maturity profile and five to eight findings you can act on.

01

The record. Course of the session and the decisions taken, documented factually, with the timing of each.

02

The maturity profile. Six observed dimensions on a scale of one to five, tracked round by round: situational picture, decision speed, mandate and responsibility, supplier leverage, rule discipline, and interfaces to production, sales, finance and legal.

03

The findings. Five to eight concrete observations, each supported by a moment in the session rather than by assertion.

04

The measures. Proposals sorted by effort and effect, with realistic lead times, and compared against Round 0: which preventive measure would have avoided what.

05

The debrief. A 60 to 90 minute closing session with the leadership level, held by the person who ran the game.

Confidentiality

Results stay with you. No attribution, no onward use, no reference without written release. Observation sheets record roles, not names, and there is no audio or video recording without the written consent of everyone in the room.

The sentence participants hear at the start decides the quality of the session: nobody can embarrass themselves here, everybody can learn. Without that assurance, senior people do not play honestly, and a wargame with dishonest participants is worthless.

06Formats

Four formats and an annual cycle.

Every format includes scenario design, facilitation and a written report. Preparation runs four to six weeks and includes interviews on your critical categories, single-source positions and stock cover.

Compact
Format S
4,900 €Half a day
  • One team, up to 8 people
  • Standard scenario
  • Short assessment, 6 to 8 pages
  • Associations, events, first contact
Extended
Format L
On requestTwo days
  • Several teams or a red cell
  • External role players for supplier and authority
  • Four preparatory interviews
  • Report with action plan, 25 to 35 pages
Sector
Format XL
On requestOne to two days
  • Several organisations along one chain
  • Or within an association, with authorities
  • Sector report plus confidential individual reports

An annual cycle with three sessions, changing scenarios and maturity tracking over time is available on request. Companies based in Luxembourg may be eligible for Fit 4 Innovation funding, which covers 50 % of consultancy cost in phase one up to 15,000 €.

07Who runs it

Run by procurement people, not by exercise designers.

The difference is not the game. It is who is sitting opposite you. Communications consultants can build a convincing crisis; they cannot tell you that requalifying a defence component takes eighteen months, or which contract clause would have secured capacity.

SYBX Group is a Luxembourg procurement advisory founded in 2019, working with clients in defence, energy, government and manufacturing. The wargame draws on the same category and supplier work, and the maturity profile connects directly to the Dual-Use Procurement Readiness framework.

METHOD

Exercise design follows ISO 22398 and BSI Standard 200-4. Adjudication uses matrix game practice as applied in professional wargaming.

SECURITY

Sessions are run explicitly at unclassified level and take place on your premises. Classified formats are assessed separately.

LANGUAGE

Sessions, material and reports in German or English.

Next step

Thirty minutes is enough to tell whether this fits.

Send a short note about your sector and the category that worries you most. You get an honest assessment of whether a session is worth it, and if not, why not.