Insider threat resulting in a data breach exercise
Understand how your organisation would respond to an insider threat, specifically a user allowing unauthorised third parties access to sensitive information.
iStock.com/bsd studio
Participants and timing
Allow 30 - 60 minutes to perform this exercise. It may help group activity to have a shared screen.
Essential attendees
- Senior leader – Someone who can make important business and IT decisions for your organisation, and has knowledge of business continuity plans.
- Cyber security engineer – Someone who has technical knowledge of the cyber defence activities across your IT estate, including awareness of vulnerability disclosure practice.
- HR advisor – Someone who has oversight of your company policies, such as those relating to people management and information technology.
- Communications advisor – Someone who manages internal and external communications for your organisation, including during an incident.
Desirable attendees
- Scribe – Someone to take notes during the exercise delivery.
