A data breach on a Friday afternoon

The management team decides, the simulation plays back the consequence and ends with a debrief. Illustration on demo data.

Process flow of the demo

Two hours of practice

Step 1 · Friday 16:42The alert
Step 2 · Friday 16:55First choice
Step 3 · Friday 18:20Pressure from outside
Step 4 · Saturday 11:00Reporting
Step 5 · AfterwardsDebrief
TeamBrings in the question or the signal
AI worksDoes the work in the systems
Person decidesTakes the decision
In the system and evidenceRecords what happens
  1. 1.1TeamUnknown login on the payroll system
  1. 1.2AI worksThe team chooses: report first or investigate first?
  1. 2.2AI worksConsequence: the 72 hour reporting window is running
  1. 2.1Person decidesChosen: investigate first
  1. 3.1TeamAn employee reports that payroll data is circulating
  1. 3.3AI worksConsequence: Monday’s payroll run is at risk
  1. 3.2Person decidesChosen: shut down the affected systems, spokesperson is the director
  1. 4.2AI worksWithin the deadline. Affected employees have not been informed yet.
  1. 4.1Person decidesChosen: report to the data protection authority
  1. 5.1In the system and evidenceTime per decision and the choices in one view
  2. 5.2In the system and evidenceThree lessons and agreements recorded
  3. 5.3In the system and evidenceReport per session
  1. 1The alertFriday 16:42

    1. 1.1TeamUnknown login on the payroll system
    2. 1.2AI worksThe team chooses: report first or investigate first?
  2. 2First choiceFriday 16:55

    1. 2.1Person decidesChosen: investigate first
    2. 2.2AI worksConsequence: the 72 hour reporting window is running
  3. 3Pressure from outsideFriday 18:20

    1. 3.1TeamAn employee reports that payroll data is circulating
    2. 3.2Person decidesChosen: shut down the affected systems, spokesperson is the director
    3. 3.3AI worksConsequence: Monday’s payroll run is at risk
  4. 4ReportingSaturday 11:00

    1. 4.1Person decidesChosen: report to the data protection authority
    2. 4.2AI worksWithin the deadline. Affected employees have not been informed yet.
  5. 5DebriefAfterwards

    1. 5.1In the system and evidenceTime per decision and the choices in one view
    2. 5.2In the system and evidenceThree lessons and agreements recorded
    3. 5.3In the system and evidenceReport per session
NowIn the system and evidence5.3Report per session
What it does, what you get and the evidence
What it does
An interactive exercise made to measure: a crisis, a difficult customer conversation or the first working day. The team makes decisions, the AI plays back the consequences and keeps track of what was chosen.
What you get
A repeatable exercise, with a debrief per session and the lessons on one page.
Evidence
The report per session: the choices, the time per decision and the agreements that follow.
Example
A care organisation rehearses a data breach on a Friday afternoon. The management team chooses whether to report, to whom and when. The simulation shows what each choice costs and ends with a debrief.