Large Group Prep Worksheet

Large Group Prep Worksheet

WarningExperienced IMs Only

Large group formats require confident, experienced facilitation. Before using this worksheet, you should have successfully run at least 3-5 standard M&M sessions. If you are new to M&M, use the IM Session Prep Worksheet instead.

For full format guidance, see Chapter 11 – Scaling to Large Groups.

Dedicated prep sheet for sessions with 12-15+ players. Complete this before the session – large group formats require more structured preparation than standard sessions.

Session Basics

Date: Total Players:

Malmon: Scenario Variant:

Session Duration: Number of Rounds:

Format:

Multi-Team Coordination Shift Handover Specialist Bench Consensus Under Pressure Fishbowl Rotation

Team Structure

For Multi-Team Coordination. Adapt for other formats.

Incident Commander

IC Name: Real-world role:

IC rotation planned? Yes – handover at round: Second IC:

Alpha Team – Forensics

Team members:

Alpha team lead (IC contact point):

Bravo Team – Network/Infrastructure

Team members:

Bravo team lead (IC contact point):

Charlie Team – Business Impact

Team members:

Charlie team lead (IC contact point):

Artifact Distribution Plan

Artifacts are revealed progressively. Plan which artifact goes to which team at each tier. Use the scenario’s organizational context page as your source.

Tier 1 – Initial Indicators (Round 1)

Obvious symptoms: what triggered the alert. 2 artifacts per team.

Alpha R1-A:

Alpha R1-B:

Bravo R1-A:

Bravo R1-B:

Charlie R1-A:

Charlie R1-B:

Tier 2 – Deep Analysis (Rounds 2-3)

Technical detail requiring active investigation. 3 artifacts per team.

Alpha R2-A:

Alpha R2-B:

Alpha R3-A:

Bravo R2-A:

Bravo R2-B:

Bravo R3-A:

Charlie R2-A:

Charlie R2-B:

Charlie R3-A:

Tier 3 – Developments (Rounds 4-5)

Escalations, new attack phases, consequences of team decisions. 1-2 artifacts per team.

Alpha R4-A:

Alpha R5-A (extended only):

Bravo R4-A:

Bravo R5-A (extended only):

Charlie R4-A:

Charlie R5-A (extended only):

Round Timing Plan

Standard multi-team round = 30 min. Adjust to fit your total session time.

Round Situation Update Team Analysis Cross-Team Briefing IC Decision
1
2
3
4
5

Inject Schedule (Optional)

Injects are optional in large group sessions – cross-team dynamics already create pressure. If using, note which round, who receives it, and the content.

Inject 1 – Round: Recipient:

Inject 2 – Round: Recipient:

Inject 3 – Round: Recipient:

Scenario Hook

For large group sessions, deliver the hook to the full room before teams split. Practice this so you can do it in under 2 minutes.

Opening line (practice this):

Key hook components:

  • Professional context:
  • Time pressure:
  • Current symptoms:

NPC for IC interactions:

Debrief Questions

Large group debriefs benefit from structured cross-team reflection. Prepare these before the session.

Cross-team trust question:

IC experience question:

Information asymmetry question:

Real-world connection:

Pre-Session Checklist

Team logistics:

  • Team assignments confirmed and communicated before session starts
  • IC briefed on their role and the round structure
  • Team leads briefed as NPC contact points
  • Seating arranged so teams can huddle separately
  • Timer visible to all teams during team analysis phase

Artifacts:

  • All Tier 1 artifacts printed and sorted by team
  • Tier 2 and Tier 3 artifacts staged in order, face-down
  • Each artifact labeled with team name (Alpha/Bravo/Charlie)
  • Injects prepared and in round order (if using)

Materials:

  • Scenario card or planning document
  • Malmon card ready (do not show until players identify the pattern)
  • Role cards or reference sheets for all players

Mental preparation:

  • Hook practiced – can deliver in under 2 minutes
  • Round structure memorized (Situation Update / Team Analysis / Briefing / IC Decision)
  • Debrief questions ready
  • Have a plan if a team finishes analysis early

Related resources: