Download to read offline
Uploaded byKelly Ohlert
Multimedia SaaS Timed Game
The document outlines a virtual tabletop exercise simulating a data exfiltration crisis for a global company, emphasizing real-time responses to growing threats. Set on a Monday, the scenario escalates from an initial warning email to viral social media backlash and operational slowdowns. The situation continues to unravel with increasing pressure on company leadership from customers and the board.
![Computer Networks 01[1 using all terms].pptx](https://cdn.slidesharecdn.com/ss_thumbnails/computernetworks011-251214040533-327dd9f8-thumbnail.jpg?width=640&height=640&fit=bounds)
Multimedia SaaS Timed Game
- 1. 2021Tabletop for MultimediaCollaboration SaaS • This game was designed to test how a global company could react in real time to a data exfiltration situation that could be disastrous in terms of financial and reputational damage • The game was virtual; players were called in as needed by other team members as the scenario unfolded • Each 5 minutes of real time corresponded to one hour of scenario time
- 2.
- 3. The Story So Far It’s8am on a Monday, and the CEO has just received this email and screenshot: “Toy Story 15. Nice movie. Shame if a few spoilers leaked, right? LOL.”
- 4.
- 5.
- 6.
- 7.
- 8. "Now u knowwe have ur files. Pay us or everyone else will know too."
- 9.
- 10.
- 11.
- 12.
- 13.
- 15.
- 16.
- 17.
- 18. Something’s Not Right •Twitter has picked up on the fact thatWoody looks . . . different. • The retweets are going viral. • The customer isVERY angry.
- 19.
- 20.
- 21.
- 22.
- 24.
- 25.
- 26.
- 27. Denial of Service Customersin the UK and EU are reporting slowdowns in the rendering pipeline Access to VMs and containers is slow
- 28.
- 29.
- 30.
- 31. Support is delugedwith chat requests Engineering is overwhelmed with tickets The Board is pressuring C-suite
- 32.
- 33.
- 34.
Editor's Notes
- #4 Nothing alerted b/c it was an “authorized” download Where was it downloaded? Cloud, drive, etc? How do we know?
- #9 Another message lands in the same Inbox:
- #28 Nothing alerted b/c it was an “authorized” download Where was it downloaded? Cloud, drive, etc? How do we know?
- #29 DDOS b/c ransom not paid