Alert Triage
Insider Pattern: Quiet Exfiltration Drills
Evaluate slow data movement that could be research—or theft—using DLP-style clues without vilifying employees.
KRW 480,000 informational only
Description
Participants weigh HR-safe language, review DLP alerts with ambiguous intent, and practice escalation memos that protect people while protecting data. The scenario emphasizes measured tone for employee relations partners.
Features
- Synthetic HR context panels with neutral phrasing
- DLP alert clustering exercises
- Escalation matrix for employee relations
- Privacy-preserving redaction drills
- Manager script for one-on-one safety conversations (training only)
- Cross-org workflow map for legal partners
- Reflection prompts on unconscious bias
Outcomes
- Classify alerts into watch, verify, or escalate buckets
- Draft documentation that withstands HR review
- Recommend technical controls that preserve proportionality