Data loss training: The Other Sara

The Other Sara [0:03] Helen: Sara Kassem? No, no. I meant Sara in Payroll. [0:08] Narrator: Thirteen minutes to the board deadline, her phone ringing, and autocomplete picked the wrong Sara. Forty-six colleagues' salaries just left Nakhlora. [0:17] Narrator: You're Helen. What do you do first? [0:25] Narrator: Recall is not a fix. It rarely works outside the company, and the email may already be open on a phone. [0:34] Narrator: And a 'please ignore' email? It makes people curious, so they open the first one, attachment and all. [0:42] Narrator: Road three: call your security team, straight away, before you do anything else. [0:51] Helen: Layla, it's Helen. I've just sent the Operations pay review to the wrong Sara, an outside recruiter. My mistake. [1:00] Layla: Thank you for calling straight away. Send her nothing else, not even an apology. Now tell me who, what and when. [1:08] Helen: Sara Kassem, Crestline Talent. One spreadsheet, 46 names and salaries. It went at 16:17, and only to her. [1:20] Layla: Next, I call her. I'll ask her to delete it and confirm that in writing. The sooner, the better. [1:27] Helen: And the 46? Should I email them and warn them myself? [1:32] Layla: Not yet. We decide who else must be told, and how. Careful people slip too; calling fast is what counts. [1:43] Narrator: Lose a laptop? The same first step: tell IT Support or your security team at once, so it can be locked. [1:52] Narrator: Shared a link with the wrong person? Turn the link off, then report it at once. [2:03] Layla: She's confirmed in writing: deleted, and not shared. I can't promise more than that, but it's on record. [2:11] Helen: The board can wait a little longer. That call couldn't. [2:16] Narrator: One habit: sent something to the wrong person? Contact your security team straight away, and don't rely on Recall.