Cyber
Advanced
75 min
Insider Threat at a Healthcare Facility
A disgruntled employee exfiltrates patient data and threatens to release it online. IT discovers unusual data access patterns.
🎯 Objectives
- Detect insider threats, protect patient data, coordinate with law enforcement, manage public relations
📋 Exercise Modules
- Detection
- Containment
- Notification
- Remediation
💬 Discussion Questions
- How was the insider detected? What legal steps apply? How to notify affected patients?
📚 References
- HIPAA Guidelines
- NIST Insider Threat Guide
- Data Breach Notification Laws