External Red Team + Pre-Mortem

Paul Kidston
Oct 1, 2025
3 min read

Stress-test a big plan in two hours—assume it failed, surface the risks, and wire in mitigations.

What it is (plain language)

An External Red Team + Pre-Mortem is a single, focused challenge of your plan by a couple of trusted outsiders. They read a short pre-read, then run a 2-hour session where you assume the plan already failed and list every reason why. You convert the top risks into mitigations with owners, dates, and thresholds/kill switches. Then you monitor for 30/60/90 days. No standing committee. No theatre.

Job statement (copy/paste):“In the next 90 days, we need outside help to [specific outcome], so we can [business goal], measured by [1–3 metrics].”

Examples

“Open a second crew without increasing safety incidents.”
“Buy $250k equipment with a 24-month payback and bankable utilization.”
“Launch vertical pricing that lifts gross margin +2 pts.”

When to use it—and when not to

Use this when:

A single decision carries material risk (capex, new market, MSA, site).
You want blind spots surfaced without installing a formal board.
You can provide a tight pre-read (≤5 pages) and stick to a 2-hour agenda.

Don’t use it when:

You’re missing the plan + numbers (do that work first).
Lenders/investors require formal governance (see Board-in-a-Box pilot later).

The 2-hour pre-mortem (no slides)

Ground rules (10 min). Owner states the success target and constraints.
Assumptions scan (15 min). “What must be true?” Rank by fragility.
Pre-mortem (50 min). “It’s 12 months later; this failed—why?” Free-list → cluster.
Mitigations (25 min). Convert the top risks into actions with owners/dates.
Thresholds & kill switches (15 min). Early warnings and actions when tripped.
Next steps (5 min). Owner sends a one-page Decision Memo within 24 hours.

What you actually get in 90 days

A risk catalog tied to assumptions, not opinions.
A mitigation plan with names and dates (not a parking-lot).
Thresholds/kill switches that stop slow losses early.
A Decision Memo you can show to lenders/partners to prove discipline.
A 30/60/90 review rhythm to close the loop.

Guardrails that keep it honest

Two outsiders max; total group ≤4.
Pre-read only (one-page plan + four pages of numbers).
Every idea → owner + date + metric or it doesn’t make the list.
Sunset at Day 90; renew only if the metrics moved.

Light ROI math

Catching one “silent killer” (e.g., utilization 10% lower than assumed) on a $250k capex can avoid a year of under-earning or a covenant wobble. For a $4M firm, preventing a 1-point margin miss is ~$40,000. The cost of a single Red Team is a fraction of that—and you keep the thresholds and templates.

Common traps (and fixes)

Vague assumptions.

Fix: Write them down and assign evidence/tests with dates.

Laundry lists.

Fix: Cluster and prioritize; only top-risk items get mitigations.

No teeth.

Fix: Publish thresholds/kill switches with automatic actions.

Drift after the workshop.

Fix: Lock in 30/60/90 reviews; update the action tracker before you meet.

Quick start (copy this)

Week 0: Pick the plan; confirm scope; invite 1–2 outsiders; send NDA.

Week 1: Send the pre-read (one-page plan + four pages of numbers).

Week 2: Run the 2-hour pre-mortem; complete mitigation, thresholds, owners/dates. Within 24h: Send the Decision Memo.

Weeks 4/8/12: 30/60/90 reviews—what changed, what crossed threshold, what decisions taken?

What to do next

Copy the templates above into Excel/Sheets and schedule your two-hour session.
Capture the Decision Memo within 24 hours.
Use 30/60/90 to prove impact—and if you want a tough, neutral chair to run the first one, I can do that.

Business Support Series footer

DIY Templates: External Red Team + Pre-Mortem (copy tables above into your workbook).
Book: 30-minute Diagnostic Call → Click Here
Email: paulkidston@gmail.com (DIY first. I’m here when you want the fast path.)