Most Boards Have an Incident Response Plan They’ve Never Actually Tested
The NSW Treasury insider breach exposed how a trusted staff member accessed 5,600+ sensitive documents across multiple departments before detection. Most boards approve incident response plans built for external attacks, not insider threats. The gap between what boards think they’ve approved and what operates in practice leaves organisations vulnerable to legitimate users doing normal work … Read more