Insider threat training: Last Day

Last Day [0:01] Paolo: Six years in one box. [0:07] Helen: When someone leaves, I sit at this window myself, to say goodbye. Six years, Paolo! [0:14] Paolo: I've sent my best proposals to my personal email, as samples for my portfolio. [0:20] Helen: They're Nakhlora's work, Paolo, and they stay with Nakhlora, even when you leave. Please delete them today. [0:32] Karim: Helen, a word? Last week he asked me for every supplier's price agreement. 'For handover', he said. [0:39] Karim: I said no: it isn't his area. And all week he's stayed past ten at night. [0:48] Helen: Thank you, Karim. Don't confront him or go looking yourself. Leave it with me. [0:56] Helen: Helen, Staff Services. Someone leaving today asked for data outside his job, and he's stayed late all week. [1:04] Helen: Access ends at four today. Sooner? Your call. And you'll check what his account copied. [1:11] Helen: For the record, no blame: someone leaving Sales sent work to his personal email. He's deleting it now. [1:21] Narrator: Paolo's checklist for leaving. One line is missing. Which one would you add? [1:31] Narrator: No work copies kept: the line Paolo's case needed. [1:35] Narrator: You or a team member leaving? Return devices and badges, keep no copies, and make sure access ends on the last day. [1:46] Karim: Helen, what if I'm wrong about him? [1:49] Helen: Then it was still the right call. Reports are handled in confidence, even ones that turn out to be nothing. [1:58] Helen: Most harm from insiders, people who work here, isn't planned. It's careless: good people sending or keeping work where it shouldn't go. [2:08] Helen: The signs are in what people do: asking for data outside their job, big downloads or copies. [2:15] Helen: Odd hours with no reason, or getting round the rules. But one sign alone isn't proof. [2:23] Narrator: Seen signs like these? Don't confront anyone or investigate yourself. Tell your security team quietly. [2:31] Paolo: Deleted. All of them. [2:34] Helen: Then good luck, Paolo. [2:39] Narrator: Notice something odd in how a colleague handles data? Tell your security team quietly. Leaving? Leave the work behind.