Threatened leak of sensitive data exercise
Understand the controls your organisation has in place to prevent against the leak of sensitive information and to identify and respond to threats to leak data.
iStock.com/nadia_bormotova
Participants and timing
Allow 30 - 60 minutes to perform this exercise. It may help group activity to have a shared screen.
Essential attendees
- Senior leader – Someone who can make important business and IT decisions for your organisation, and has knowledge of business continuity plans.
- Cyber security engineer – Someone who has technical knowledge of the cyber defence activities across your IT estate, including awareness of vulnerability disclosure practice.
- HR advisor – Someone who has oversight of your company policies, such as those relating to people management and information technology.
Desirable attendees
- Communications advisor – Someone who manages internal and external communications for your organisation, including during an incident.
- Scribe – Someone to take notes during the exercise delivery.
