🚪 Insider Threat

The attacker already has badge access.

Advanced 90 min 5-10 players

A departing employee has been quietly exfiltrating proprietary data and customer records over several months, and earlier DLP alerts were dismissed as false positives. This advanced tabletop exercise challenges your team to unravel the full scope of data loss, coordinate between HR, legal, and IT security, and navigate the delicate balance between protecting company assets and respecting employee rights. Participants will practice evidence preservation, internal investigation procedures, and decisions around law enforcement referral.

View Full Scenario Get the Kit