Use this view live with players instead of consulting the separate cheatsheet.
One Wednesday morning, a staff member receives an email with what appears to be an important HR document. Having recently completed security awareness training, they spot the telltale signs — an unusual sender address and an unexpected attachment - and report it to IT without clicking. The threat is neutralised before any systems are impacted.
Blocked 2 attacks this round:
Data from the office server is found for sale on the dark web. However, the data is encrypted and cannot be meaningfully accessed or used. While the incident raises concern, no sensitive information is exposed.
Blocked 2 attacks this round:
The controller upgrade has really helped the business. It’s more secure, provides better visibility, and the team are confident in its reliability. Any issues from the earlier suspicious visit have been effectively neutralised. Operations continue as normal. Share price holds strong.
An unidentified individual is picked up on the Office CCTV. No one is quite sure how they got in, but security stops them within seconds of entering the building. They claimed to be lost.
By now, the pattern is painfully familiar. Another wave of malicious traffic hits and once again, there's nothing in place to stop it. Office systems crash. The plant network buckles. Staff sit staring at frozen screens for the third time this quarter, and IT are running out of ways to explain why the same problem keeps happening. The board is asking uncomfortable questions about why basic network defences still haven't been implemented. Clients and partners are losing patience. The share price doesn't just dip this time - it nosedives.
Could have been prevented by: Firewall (Office), Firewall (Plant)
Attackers exploit a well-known vulnerability in the outdated software still running across office machines - a flaw that was patched months ago, but never applied here. Cryptocurrency mining malware is deployed across infected PCs, hijacking processing power and grinding systems to a near standstill. The office is forced to shut down while IT teams work to clean and rebuild affected machines. A major loss of business activity follows. The share price crashes.
Could have been prevented by: PC Upgrade
While the business made efforts to encrypt the central database. An employee's laptop is stolen from a car. The laptop itself contains unencrypted client data and internal documents. Regulatory notification is required and share price suffers lightly.
Could have been prevented by: PC Encryption
These events occurred but had no share price impact this round.
All four rounds are complete.
View Full Game Report