Breach War Room: defend the data, then face the rules
A defence game. Attackers send wave after wave of threats at your organization. Spend your budget on defences built from ISO/IEC 27002 controls, and when a breach gets through, follow the privacy rules and patch the gap.
Demo game with invented events, simplified for teaching. It is a study aid, not legal advice. Breach rules shown are the PIPEDA and GDPR provisions as we summarise them: confirm against the official text. Progress is saved in your browser only.
What this shows
Prevention first
Every defence is an ISO control with a cost, so you learn what each one stops.
Layers matter
A surprise attack in every wave rewards depth, not one big purchase.
Then the rules
When a breach lands you decide on notifying the regulator, telling the people and patching, under PIPEDA or the GDPR.
Consequences
Wrong calls cost trust and bring regulator strikes, as in real life.
An attacker that learns
A small model in your browser learns which attacks beat your defences and aims at your weak spots, game after game.
← Back to Privacy Studio · Play Privacy Sprint →
Cyber and privacy readiness, taught as a game
We can build scenarios from your own incidents and policies, with your faculty setting the threats and the model responses.
Talk to us