Team C · Round 4 Outcome

By now, the pattern is painfully familiar. Another wave of malicious traffic hits and once again, there's nothing in place to stop it. Office systems crash. The plant network buckles. Staff sit staring at frozen screens for the third time this quarter, and IT are running out of ways to explain why the same problem keeps happening. The board is asking uncomfortable questions about why basic network defences still haven't been implemented. Clients and partners are losing patience. The share price doesn't just dip this time - it nosedives.

Could have been prevented by: Firewall (Office), Firewall (Plant)

Attackers exploit a well-known vulnerability in the outdated software still running across office machines - a flaw that was patched months ago, but never applied here. Cryptocurrency mining malware is deployed across infected PCs, hijacking processing power and grinding systems to a near standstill. The office is forced to shut down while IT teams work to clean and rebuild affected machines. A major loss of business activity follows. The share price crashes.

Could have been prevented by: PC Upgrade

Data from the office server is found for sale on the dark web, including sensitive company information such as emails, HR records, client contracts, and banking details. The breach becomes public, leading to significant reputational damage and a sharp drop in share price.

Could have been prevented by: Server Upgrade, Database Encryption

As it turns out, the previous anomalies in the plant database weren't random. The Mafia has been changing the entries to affect the share price. The business is now being investigated for insider trading - it should have gotten encryption on that database!

Could have been prevented by: Database Encryption

An employee's laptop is stolen from a car. It contains unencrypted client data and internal documents. Regulatory notification is required and share price suffers lightly.

Could have been prevented by: PC Encryption