Example of an interaction with correct/incorrect answers
Javier has found a document that contains the credit card numbers and recent online purchases of all the VPs at the company.
What should Javier do?
Shred the document immediately.
Deliver the document in person to his compliance officer.
Take the document into the parking lot and burn it.
Feedback for a: In the Dormug case, clever elves reconstructed shredded documents and ended up bankrupting the company. What would be a more secure solution?
Feedback for b: On his way to the compliance officer, Javier could be tripped by conniving colleagues and the document could be secretly photographed during the confusion. What would be a more secure solution?
Feedback for c: This is the best choice, but only if Javier makes sure the document is reduced to a powder, with no recognizable text. He could use a blowtorch to speed the process.
Example of an interaction with graphic buttons
Text on screen: Decide whether each item should be encrypted or filed normally.
Feedback for incorrect answer
A BCR document contains only a client's BCR number. Documents that have only one personally identifying item don't need to be encrypted.
A Nebura cancellation form contains several items that identify clients. See a sample form. please supply a completed Nebura cancellation form that can serve as a model>
Please provide a scan of a card so we can create a fictional facsimile
The card contains both the policy number and client's name.
This email contains enough information to make identity theft simple.
An email address and policy number alone aren't enough to require encryption. If the client's name were included, this should be encrypted.