Disclosure Rejected as Breach Response Takes Flight

Decisions 4 today

The business responds

• When the fly sent “Phishing wave: A wave of credential-harvesting mail is hitting staff inboxes” up to the board, IT / Infrastructure agreed in principle, then started haggling over every detail. They cooled on the fly a little.

  “Escalating to the Board is very airborne. Can we first give staff one clear notice and confirm what is actually exposed?”

  IT / Infrastructure Negotiated trust -2

  Next, they want: “Authorize a 30-minute operational review with Communications, Legal, HR and plant owners to confirm scope, disclosure timing, continuity impacts and staff messaging.” They have already asked for a slot in the fly's diary.

• When the fly threw out “Public data breach: disclosure decision”, Executive Board dug in its heels. Their opinion of the fly took a real knock.

  “Rejecting disclosure because your escape circuit twitched is not a Board recommendation. Send the one-page plan, counsel's view, costs, owners and the decision slot.”

  Executive Board Pushed back trust -8

  Next, they want: “Within one hour: a costed one-page disclosure decision paper with confirmed facts and gaps, named incident, legal and communications owners, interim 24/7 coverage, residual risk, counsel's view, and the exact Board decision time.” Expect an email.

• When the fly threw out “Public data breach: disclosure decision”, International Communications dug in its heels. Their opinion of the fly took a real knock.

  “Rejecting disclosure is not a communications plan. It is a plan for the disclosure to happen without us, wearing a very expensive hat.”

  International Communications Pushed back trust -8

  Next, they want: “Approve a provisional holding statement, named spokesperson, privacy boundaries, and notification posture within two hours.” Expect an email.

• When the fly threw out “Public data breach: disclosure decision”, Legal / Compliance dug in its heels. Their opinion of the fly took a real knock.

  “Rejected is not a disclosure decision. Please send the counsel-reviewed assessment before the regulators learn about it from someone with a microphone.”

  Legal / Compliance Pushed back trust -9

  Next, they want: “Immediately provide a written assessment naming the applicable regulator, notification deadlines, accountable risk owner, preservation confirmation, investigation status, and documented basis for rejecting escalation.” Expect an email.

• When the fly sent “Phishing wave: A wave of credential-harvesting mail is hitting staff inboxes” up to the board, HR dug in its heels. Their opinion of the fly took a real knock.

  “The board has been escalated. Splendid. Now please tell 20,000 people what to do before they invent six different versions in the break room.”

  HR Pushed back trust -7

  Next, they want: “Send HR today a board-approved plain-language staff message, reporting route, manager script, attendance and coverage guidance, employee support contact, and one named decision owner.” Expect an email.

Diary

• Executive Board: “One costed one-page fortnight plan within the hour, with owners, dates, interim coverage, residual risk and the exact Board decision time.” Meeting · dropped

  Back on day 35, Executive Board asked for a meeting with the fly about “One costed one-page fortnight plan within the hour, with owners, dates, interim coverage, residual risk and the exact Board decision time”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• Finance: “A one-page options sheet today: minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline.” Meeting · went ahead

  Back on day 37, Finance asked for a meeting with the fly about “A one-page options sheet today: minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline”, and against the odds it went ahead.

  How it went: Twenty minutes of silence, then a firm request for a written summary.

• Finance: “By 3 p.m., send one costed option with minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline.” One-to-one · dropped

  Back on day 38, Finance asked for a one-to-one with the fly about “By 3 p.m., send one costed option with minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• Executive Board: “A single one-page plan today: interim 24/7 coverage, costs, owners, dates, residual risk, counsel's view and the exact Board decision time.” Meeting · postponed

  Back on day 40, Executive Board asked for a meeting with the fly about “A single one-page plan today: interim 24/7 coverage, costs, owners, dates, residual risk, counsel's view and the exact Board decision time”. It was due today, and got pushed back over a diary clash nobody will explain.

• Finance: “By 3 p.m., provide a one-page option sheet with minimum containment cost, deferred-risk cost, funding source, accountable owner, and a firm decision deadline.” One-to-one · postponed

  Back on day 41, Finance asked for a one-to-one with the fly about “By 3 p.m., provide a one-page option sheet with minimum containment cost, deferred-risk cost, funding source, accountable owner, and a firm decision deadline”. It was due today, and got pushed back over a diary clash nobody will explain.

• Public data breach: incident war-room War room · postponed

  Only yesterday, International Communications, Legal / Compliance and Executive Board asked for an incident war-room. It was due today, and got pushed back over a diary clash nobody will explain.

What each department thinks of the fly