All tabletop exercises
Crisis·Intermediate·Executive audience
Extortionists threaten to publish staff home addresses
The prompt — read this to the room
Three days after attackers stole HR files from a 900-person engineering consultancy, they change tactics. Twelve employees, including the CEO and two HR staff, receive texts on their personal phones listing their home address and their children’s school, with a demand: tell your company to pay, or this goes online. One message includes a photo of an employee’s front door. The attackers’ leak site now lists the company with a five-day countdown. Staff are frightened and some want to stay home. The board meets tomorrow. What do you do for your people today?
Total duration
2 h
People to involve
7
Best fit
Any sector
Who to involve
Most important first.
- CEO / Managing director
- HR
- Legal counsel
- CISO / Head of security
- Physical security / facilities
- Communications / PR
- Privacy officer / DPO
What it tests
- Put staff safety and support ahead of the payment debate, with concrete actions today.
- Make the payment decision on its merits, with sanctions and law-enforcement input.
- Meet data-protection obligations for the stolen HR records.
- Communicate with staff honestly without spreading fear or amplifying the threat.
Outline of activities
- 1The texts arrive: who is affected and how frightened they are
- 2Duty of care: safety measures, police, support and leave
- 3The payment question under pressure
- 4Regulatory duties for stolen employee data
- 5Board briefing and staff communication
Run sheet (Pro)
The facilitator's timeline of execution, the detailed steps for running the session and the questions to ask each person.
Loading…