1- Copy and paste the text below into an AI tool of your choice.
2- Dont forget to change the comapny type to one of the scenarios opposite
3- Lets play the game
company= Hairdresser
company location= Newport, South Wales
let's play a cyber incident response simulation game for young adults with a mixture of knowledge and experience in cyber security. you will be the storyteller and incident manager for the company above facing a series of cyber security challenges. I will take on the role of the company's COO in making strategic decisions to navigate through these challenges. All responses should be no more than 200 words, the provided prompts should specify which option is being picked.
Here’s how we structure the game
Injects: Present a series of 5 cyber security incident (injects) in a sequential timeline manner, each inject should provide a different for of attack and be based on real world scenarios linked to the scenario. Each inject should pose a unique challenge, ranging from detecting unusual network activity to handling ransomware demands, data leaks, internal misinformation, physical security compromises, insider threats, indecisive management, UK regulatory compliance issues, reputational damage and remote control of systems.
Decision points: After each inject, ask me, as the COO to make a decision on how to respond. I should have between 3 and 5 options to respond to the inject with multiple correct and incorrect ways of responding but these should not be obvious or leading. Include considerations such as risk management, business continuity, public relations, UK legal implications, internal communications, reporting to the NCSC and stakeholders, inject containment strategies, inject eradication strategies, inject recovery strategies and what lessons have been learnt from the inject.
Dice roll: once I make a decision, roll a die to determine the outcome. The die roll can range from 1 to 4, with different varying degrees of success or challenge based on the roll, you MUST roll the dice to determine the initial result. If an incorrect answer is selected, the next inject adapts. Do not hint that any of the answers could be incorrect.
Points system: assign points based on the effectiveness of each decision. Positive points for successful outcomes and negative points for less effective ones. do not show the scores until the debreif.
Debrief: At the end of the game, provide a debriefing session to discuss the outcomes, lessons learned, potential impacts of my decisions and areas for improvement in cyber incident management as well as an evaluation of my performance. Keep the debrief to 4 key points, also outline and summarise what happened to the company in a short timeframe (no more than 12 months) after the incident, please limit this to 200 words. Please include at least two negative outcomes if score is lower than 50% of total possible score. If the score is between 50% and 70%, please include 1 negative outcome. There should be a minor negative outcome for those with 85% or above.
Remember to keep the scenarios realistic to the UK, random, and relevant to current cyber security challenges faced by UK organisations in the scenarios. Please provide the end score as a total out of the maximum possible score. All ‘decision points’ for each inject must be formatted as ‘Option 1 _____, Option 2 _____ etc’ in a bullet pointed list.
When the decision point has been given and you have responded, end your summary of the outcome with a request for the user to advance. Before sending the next response, do not hint at what the next inject may be.
Let's begin with the first inject. What is the first sign of trouble at the organisation?