Phishing Wave Flies Straight to the Board

Decisions 3 today

The business responds

• OT / Grid Operations heard that the fly wanted more information on “Multi-factor authentication for all remote access” and refused, loudly enough to be heard two floors down. They cooled on the fly a little.

  “Excellent, another demand for information. Please name the missing evidence, reviewers, decision deadline, and confirm MFA can proceed without production changes or surprise visits.”

  OT / Grid Operations Pushed back trust -1

  Next, they want: “Provide the specific missing information, named reviewers, a dated decision deadline, and written confirmation that Grid Operations approves any action or escalation.” They have already asked for a slot in the fly's diary.

• IT / Infrastructure heard that the fly sent “Phishing wave: A wave of credential-harvesting mail is hitting staff inboxes” up to the board and refused, loudly enough to be heard two floors down. They cooled on the fly a little.

  “Understood. I will prepare the board update, after we warn staff and contain the mail. The inboxes may survive one operational decision before governance notices it.”

  IT / Infrastructure Pushed back trust -1

  Next, they want: “Authorize immediate staff warning and mailbox containment, with a 30-minute review limited to operational impact, dependencies, and disclosure phasing.” They have already asked for a slot in the fly's diary.

• When the fly sent “Phishing wave: A wave of credential-harvesting mail is hitting staff inboxes” up to the board, HR dug in its heels. They cooled on the fly a little.

  “The board may enjoy a dramatic inbox story, but employees need a plain message, a reporting route, and permission to finish their shifts without consulting the insectocracy.”

  HR Pushed back trust -2

  Next, they want: “Send HR the complete employee message, reporting alternatives, implementation timeline, exception process, and support arrangements in one package.” Expect an email.

Diary

• International Communications: “Approve the scope, employee messaging, privacy boundaries, spokesperson, and a holding statement within two hours.” One-to-one · dropped

  Back on day 23, International Communications asked for a one-to-one with the fly about “Approve the scope, employee messaging, privacy boundaries, spokesperson, and a holding statement within two hours”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• Executive Board: “Within one hour, provide the costed staffing model and fortnight implementation plan, with owners, dates, coverage, costs, and the board decision time.” One-to-one · postponed

  Back on day 26, Executive Board asked for a one-to-one with the fly about “Within one hour, provide the costed staffing model and fortnight implementation plan, with owners, dates, coverage, costs, and the board decision time”. It was due today, and got pushed back over a diary clash nobody will explain.

• OT / Grid Operations: “Identify the specific missing information and provide a dated decision deadline.” One-to-one · went ahead

  Back on day 27, OT / Grid Operations asked for a one-to-one with the fly about “Identify the specific missing information and provide a dated decision deadline”, and against the odds it went ahead.

  How it went: Twenty minutes of silence, then a firm request for a written summary.

• Board review of the security programme (day 28) Board review · went ahead

  The board review went ahead, as it always does: the board sits whatever it thinks of the fly.

  How it went: Twenty minutes of silence, then a firm request for a written summary.

What each department thinks of the fly