Make one real security decision

Read the situation, commit to a recommendation, then see why the strongest option wins and why the others fall short. It takes about three minutes. No account needed, and nothing is saved.

Security management · Incident response

Friday 17:00: your payroll provider may have been breached

Your payroll provider calls at 17:00 on Friday. An attacker may have accessed a database holding your employees’ names and bank details. Their investigation will take “a few days”.

HR wants to email all 2,400 staff tonight. Legal wants confirmed facts first. Communications points out the CEO presents quarterly results on Monday morning.

As the security lead, what do you recommend in the next hour?

A.Email all 2,400 staff tonight that their bank details may have been exposed.B.Convene HR, Legal and an incident owner now to agree duties and next steps.C.Wait for the provider to confirm the scope before taking any action.D.Hold all staff communication until after Monday’s results to avoid market impact.