NPSA’s communications advice for reducing the impact of an insider event, highlights the importance of regularly testing your crisis communications plans. To help do this in a safe space, NPSA behavioural scientists have worked with crisis communication specialists to develop a range of insider crisis scenarios that are inspired by real-life events. This content will be available in a range of formats to meet the needs of all organisations.
“82% improved understanding of insider risk, and what they would need to do”
“74% confident that I now know what to do to better reduce our risk”
IR Simulation Evaluation Data 2023-24
Regularly testing your crisis communications ahead of an insider event helps build collaboration and resilience. Real-time test how your team comes together. Explore communications approaches in a safe environment and give thought to how you mobilise your workforce – your most important asset – before, during and after an insider event occurs. All scenarios can be delivered in a variety of delivery formats. Scenarios include unauthorised disclosure, sabotage and physical threat (violence).
“Working with NPSA was a pleasure from beginning to end. Insider risk is complex but the session was able to engage with the audience in a way that a presentation couldn’t and related the subject back to specific roles. The feedback from participants has been overwhelmingly positive and has sparked conversations that will help drive our strategy.”
Civil Nuclear Constabulary, October 2023
Our management team is having an internal meeting in their board room.
NEW INTRO TITLE: (Typed on screen over the top of our footage. See PDF for ref)
Wednesday 9.03am
Just an ordinary team meeting
Until…
SFX: Someone’s phone rings.
VISUAL: One of the team takes the call. Their face suddenly drops.
VO: SECURITY HAS JUST ALERTED YOU…
VISUAL: Cracks appear on the edges of the screen.
VO: THE SENSITIVE INFORMATION THAT YOUR ORGANISATION HAS DEVELOPED…IT’S BEEN LEAKED, OR STOLEN!
VISUAL: We cut in on the reactions from the team. They look horrified.
FADE TO SHOW A PASSAGE OF TIME
Someone hurriedly walks into the room clutching a memo for them to read.
VO: I.T CONFIRM IT’S COME FROM YOUR SERVERS, SO ONE OF YOUR EMPLOYEES HAS DONE THIS.
SFX: The cracks start to spread and become more noticeable.
VO: THE LEAK COULD DAMAGE YOUR REPUTATION, PUBLIC CONFIDENCE, EVEN RUIN YOUR ORGANISATION
VISUAL: As team members sit head in hands, oversized shattered words flash on screen: REPUTATION, CONFIDENCE
FADE TO ANOTHER PASSAGE OF TIME
SFX: Suddenly, their laptops all simultaneously ping loudly.
VO: IT’S NOW ALL OVER A NEWS OUTLET.
VISUAL: The cracks on screen immediately deepen and splinter into more cracks.
VO: THE BOARD IS ASKING QUESTIONS. EVERY SECOND COUNTS. WHAT’S THE RIGHT RESPONSE?
We hold on our team looking out of their depth. Clearly no one has a defined action plan.
VO: SHOULD AN INSIDER EVENT HIT YOUR ORGANISATION, WILL YOU BE READY?
Someone steps into frame. They clap their hands to immediately break the tension and begin to address the group.
COACH: (to the group) WELL DONE! REHEARSING BUILDS UP YOUR ‘MUSCLE MEMORY’ AND GETS YOU INSIDER RISK READY.
It is the session coach and this is an Insider Crisis Simulation workshop. Our team are sitting back looking relaxed and ready to learn more.
VO: YOU’VE BEEN WATCHING AN INSIDER CRISIS SIMULATION.
VO: PROVIDED BY THE NATIONAL PROTECTIVE SECURITY AUTHORITY, THESE WORKSHOPS HELP PREPARE AND PROTECT ORGANISATIONS LIKE YOURS FROM THE THREAT OF INSIDER EVENTS.
As our VO continues, we animate some of the key benefits on the screen.
VISUAL & VO:
- The effective immersive simulations
- are designed to stress-test your response
- in a secure learning environment.
- It builds confidence
- and will increase your team’s resilience
VO: YOU CAN SELECT THE SCENARIO THAT BEST SUITS YOUR ORGANISATION. CHOOSE FROM 3 TYPES OF INSIDER EVENT.
VISUAL: Big words displaying the different scenarios flash on screen:
Unauthorised Disclosure
Sabotage
Physical Threat
VO: THESE EVENTS ARE SERIOUS WITH CASES RISING SIGNIFICANTLY, AT HUGE COST TO ORGANISATIONS.
VO: IF YOU HAVE PEOPLE WORKING FOR YOU, YOU HAVE INSIDER RISK.
VO: SO, THE MORE PREPARED YOU ARE, THE LESS IMPACT WILL BE CAUSED.
VISUAL: NPSA animated logo / BE INSIDER RISK READY lockup
VO: TO BE INSIDER RISK READY, VISIT NPSA.GOV.UK/INSIDER-RISK
VISUAL: npsa.gov.uk/insider-risk
“93% would recommend exercise to friends or colleagues”
“87% agreed that immersive learning was effective in helping think about how an insider-related crisis may be different from any other crisis”
IR Simulation Evaluation Data 2023-24
"AWE continues to work with NPSA to ensure that we adopt great security to protect our people, sites and assets. This requires that we continue to innovate and be early champions of best practice and engaging with NPSA to look at fresh approaches to mitigating and manage insider risk is a key plank in our security strategy. The IR simulation enabled senior stakeholders who engage with security less frequently to grapple with the complex demands of an emerging security emergency and consider how mitigating actions would play out in our environment. This has, and will continue to enhance the way we operate."
Atomic Weapons Establishment, February 2024
Experience the high-pressured nature of an insider event firsthand to test your readiness. You will imagine that you’re in charge of a fictional company when an insider event strikes. Find all the materials you need to role play your way through this crisis simulation and apply the learnings back to your team. These free-to-use resources will help everybody get insider risk-ready. Each pack includes a crisis plotline, facilitator notes and a series of materials to prompt action, discussion and reappraisal. Designed to build collaboration, NPSA is helping everybody get more insider risk-ready.
Immersive |
✔️ |
Collaborative |
✔️ |
Fee |
X |
Real-Time Responses |
X |
Customisable |
X |
Just like the Do It Yourself option, you are tasked with managing an insider event as it breaks in a fictional organisation. Learn from industry peers at this ticketed event where you’re tasked with managing an insider event as if it were real. Expert facilitators will lead you through a range of situational developments and you will need to respond in real time to internal and external stimulus. Can you get ahead of the crisis? Do your messages reassure and engage critical audiences? Reflect on what your organisation would do differently?
Immersive |
✔️ |
Collaborative |
✔️ |
Fee |
✔️ |
Real-Time Responses |
✔️ |
Customisable |
X |
Bring an insider event inside your organisation. This half-day workshop, is as per Industry Team but with some notable personalisation. Designed entirely for your leaders, the simulation is customised exclusively for your organisation and the vulnerabilities you wish to test. This not only helps you pressure test your team but also its processes. In the course of this 4-hour workshop, feel how an insider event could impact you in real time. How do you fare? How would you prevent, manage and recover differently next time?
Immersive |
✔️ |
Collaborative |
✔️ |
Fee |
✔️ |
Real-Time Responses |
✔️ |
Customisable |
✔️ |
|
1 Do It Yourself |
2 Join an Industry Team |
3 Customisable |
Immersive |
✔️ |
✔️ |
✔️ |
Collaborative |
✔️ |
✔️ |
✔️ |
Fee |
|
✔️ |
✔️ |
Real-Time Responses |
|
✔️ |
✔️ |
Customisable |
|
|
✔️ |
“Coming from a security background, my focus would be around securing the site, apprehending the individual to ensure the public is safe etc., but the task opened my eyes to the communication aspect. Being careful about what information we release, but how to reassure the public at the same time was an interesting dynamic and one I enjoyed”.
Defence Security, January 2024