Help

On the sign-in page, click "Forgot your password?" and enter your email. If there is an account, you receive a single-use link valid for 30 minutes. Changing the password doesn't skip the authenticator app, ends your other open sessions and sends a notification email.

Write to info@crisarium.com from your registered email. After verification, we reset your second factor, and the next time you sign in you set up the app again.

Three wrong passwords or codes lock the account for 10 minutes, for security. Wait and try again.

12 hours. After that, Crisarium asks for your password and code again.

Write to info@crisarium.com and we'll send another one.

There are 5 rounds. Each round stays open for 24 or 48 hours, your choice, and closes early if everyone responds. The next one opens right away. With a 24-hour window, the session ends within 5 days; with 48, within 10.

A few minutes per round. Each decision has a 2-minute clock (5 when it asks for a written text), and each person decides when they can, within the window.

In the up-to-5 tier: CEO, CFO, Compliance/DPO, Communications and Cybersecurity/CISO. The up-to-10 tier adds IT/CTO, Operations/COO, Legal, Customer Service and Investor Relations (or Board / Shareholders). Each person has one role, and each role, one person.

AI decides for it. The same goes for anyone who doesn't respond in time; in that case, the absence is recorded.

Yes. In "Company name in the scenario", the name replaces the fictitious company's in every text and image, always with the simulation watermark. Session materials must not be shared outside the company (Terms of Use, section 6).

The one that governs the operation you want to train: Brazil, the European Union or the United States. It changes the scenario's regulatory deadlines and obligations. The headquarters country doesn't set the jurisdiction. Outside those three, choose International: deadlines and obligations follow the most widely adopted international model, with 72 hours as the notification reference. You can enter your country's deadline, which appears in the group report. International is available in all four scenarios.

Cost per hour of downtime, revenue and contracts bring the report's financial impact closer to the company's reality. They are optional: if left blank, the report uses the revenue band from the company details and marks the figure as an estimate.

When the first round opens, at the start time you set. Scheduling sends nothing.

Yes, until the start: click "Cancel the schedule", adjust what you need and schedule it again. The reserved exercise goes back to the plan. After the start, the setup doesn't change.

On the session page, use "Resend link" next to the name. The person can also request one on their own at crisarium.com/entrar. The new link replaces the previous one.

The link at the start; a reminder 4 hours before the round ends, only to those who still have a decision pending; a notice when each round is completed; and a notice at the end. You receive a summary after each round closes, with who responded and who didn't.

Yes, in a role that was with the AI. The person receives the link right away and decides from the open round on.

Yes, with "End the simulation now", typing the session's exact name. The AI makes every remaining decision, marked "ended by the administrator", and the certificates and reports become available. It can't be undone, and the exercise doesn't go back to the plan.

Yes. In the session, use "Include me as a participant" and choose the role. You receive the link like everyone else and, with the session in progress, you can decide from the dashboard with "Make my decisions".

When the first round opens. Scheduling only reserves it. An ended session can be rerun once, without using an exercise, with the same scenario and the same jurisdiction — use "Rerun this session".

A PDF with text (not scanned as an image) or Word (.docx), up to 4 MB and 60 pages. Up to 5 uploads per day.

It is read in memory and discarded: the file is never stored. The extracted text stays encrypted until you confirm the rules (or for at most 7 days) and is then deleted. What remains are the rules you confirmed, each with the passage of the plan it came from.

An AI model extracts the rules; you review each one before confirming and can correct it, change its topics, add or reject. Nothing enters the comparison without your confirmation.

Topics the scenario requires deciding on and the plan doesn't cover, by severity. They appear right after confirmation.

In the session draft, choose the confirmed version under "Crisis plan". After scheduling, the choice doesn't change. At the end, the group report shows, rule by rule, what was followed, not followed, decided by the AI or not exercised by the scenario.

As soon as the session ends, in the session's "Reports" section, on screen and as a PDF.

Administrators see the group report and all the individual ones. Each participant sees only their own individual report. If the session used the crisis plan, the group report also exists without the adherence section, so it can circulate more widely.

Only if you allow it, session by session, under "Quality control". The permission can be revoked at any time, and every access is recorded.

Anyone who decided in at least one round. The certificate states participation, not performance, and has a public verification page.

The exercise is training: the reports are for discussion and learning and must not be the sole basis for decisions on hiring, promotion, pay or termination (Terms of Use, section 6).

A training exercise in which the leadership team faces a fictitious cyber crisis over several rounds. You decide in your role, under the pressure and deadlines of a real crisis. Nothing that happens in the scenario is real.

Simulation emails come from noreply@crisarium.com and the subject starts with "[Simulation]". They never ask for passwords or payment details. If in doubt, check at crisarium.com/convites or talk to whoever organized the session at your company.

Through the personal link in the start email, button "Join the simulation". The same link works until the end of the session and lets you come back as many times as you need. It is yours alone: don't forward it.

Request another one at crisarium.com/entrar with your email. The new link replaces the previous one.

No. It works in the browser on your phone or computer.

A few minutes per round. There are 5 rounds, and each stays open for 24 or 48 hours; you decide when you can within that time.

Each decision has 2 minutes (5 when it asks for a written text). The clock starts when the decision appears, not when the round opens, so read the items that came in before calmly before moving on to the decision. Reloading the page doesn't give the time back.

AI decides for your role, and this is recorded.

It's part of the exercise: some choices draw an objection. You can keep the decision or change it once.

No. Apart from the objection, the confirmed decision stands.

Yes, when the round closes: decisions from every role appear, including those made by the AI. The explanation of each effect appears only on yours.

Your organization's administrators and, after each round, the other participants in the session. The Crisarium team sees them only with your organization's permission.

When the session ends, you see the Board / Shareholders meeting, your individual report and, if you decided in at least one round, the certificate of participation, which can be posted on LinkedIn.

It's training. The report is for you and your organization to discuss the decisions and learn from them.

The language your organization set for the session.

Name, email, role, your decisions and the time each one took, the date you confirmed the "Before you start" screen and your access dates. Details in the Privacy Policy.