All tabletop exercises
Email / BEC·Starter·Mixed audience
A supplier's new bank details
The prompt — read this to the room
Your accounts payable team receives an email from your largest packaging supplier, sent from their real address and replying to a genuine invoice thread. It says they have changed banks after an audit and attaches a signed letter with new account details. The clerk calls the number on the letter, gets a confirmation, updates the vendor record and pays $186,000 on Tuesday. On Friday the supplier's credit controller phones to ask why the invoice is overdue. Your bank says the receiving account is at another bank, which has not replied. What happens in the next hour?
Total duration
1 h 15 min
People to involve
5
Best fit
Manufacturing, Retail
Who to involve
Most important first.
- CFO / Finance
- Vendor / procurement manager
- CISO / Head of security
- Legal counsel
- IT operations
What it tests
- Practise the fast route to recalling a payment through your bank and reporting to law enforcement.
- Work out whether the compromise was in your mailbox or the supplier’s.
- Find out why the bank-change verification control failed even though it was followed.
- Decide what to tell the supplier, the insurer and the auditors.
Outline of activities
- 1The overdue invoice call
- 2The first hour: bank recall and reporting
- 3Whose mailbox was compromised?
- 4Why the callback control failed
- 5Hot wash
Run sheet (Pro)
The facilitator's timeline of execution, the detailed steps for running the session and the questions to ask each person.
Loading…