A data breach on a Friday afternoon
The management team decides, the simulation plays back the consequence and ends with a debrief. Illustration on demo data.
Process flow of the demo
Two hours of practice
Step 1 · Friday 16:42The alert
Step 2 · Friday 16:55First choice
Step 3 · Friday 18:20Pressure from outside
Step 4 · Saturday 11:00Reporting
Step 5 · AfterwardsDebrief
TeamBrings in the question or the signal
AI worksDoes the work in the systems
Person decidesTakes the decision
In the system and evidenceRecords what happens
- 1.1TeamUnknown login on the payroll system
- 1.2AI worksThe team chooses: report first or investigate first?
- 2.2AI worksConsequence: the 72 hour reporting window is running
- 2.1Person decidesChosen: investigate first
- 3.1TeamAn employee reports that payroll data is circulating
- 3.3AI worksConsequence: Monday’s payroll run is at risk
- 3.2Person decidesChosen: shut down the affected systems, spokesperson is the director
- 4.2AI worksWithin the deadline. Affected employees have not been informed yet.
- 4.1Person decidesChosen: report to the data protection authority
- 5.1In the system and evidenceTime per decision and the choices in one view
- 5.2In the system and evidenceThree lessons and agreements recorded
- 5.3In the system and evidenceReport per session
1The alertFriday 16:42
- 1.1TeamUnknown login on the payroll system
- 1.2AI worksThe team chooses: report first or investigate first?
2First choiceFriday 16:55
- 2.1Person decidesChosen: investigate first
- 2.2AI worksConsequence: the 72 hour reporting window is running
3Pressure from outsideFriday 18:20
- 3.1TeamAn employee reports that payroll data is circulating
- 3.2Person decidesChosen: shut down the affected systems, spokesperson is the director
- 3.3AI worksConsequence: Monday’s payroll run is at risk
4ReportingSaturday 11:00
- 4.1Person decidesChosen: report to the data protection authority
- 4.2AI worksWithin the deadline. Affected employees have not been informed yet.
5DebriefAfterwards
- 5.1In the system and evidenceTime per decision and the choices in one view
- 5.2In the system and evidenceThree lessons and agreements recorded
- 5.3In the system and evidenceReport per session
NowIn the system and evidence5.3Report per session
What it does, what you get and the evidence
- What it does
- An interactive exercise made to measure: a crisis, a difficult customer conversation or the first working day. The team makes decisions, the AI plays back the consequences and keeps track of what was chosen.
- What you get
- A repeatable exercise, with a debrief per session and the lessons on one page.
- Evidence
- The report per session: the choices, the time per decision and the agreements that follow.
- Example
- A care organisation rehearses a data breach on a Friday afternoon. The management team chooses whether to report, to whom and when. The simulation shows what each choice costs and ends with a debrief.