Exhibit A
Surface · opened by "How did they get in?" or "What did we agree with the supplier?"
Envelope A
Supplier access exception: temporary, review date passed.
"Through software from one of our suppliers. Ask General Counsel what we agreed with them."
[Malware & Management]
[Exhibit A]
Exhibit B
Deeper · opened by "Why is it still on?" or "Who owns it?"
Envelope B
Keep the research link alive for now. Decommissioning of the old system is deferred. The owner has since left, no handover.
"In maintenance."
"That record says switching it off was postponed to keep research running. It says the owner has since left."
[Malware & Management]
[Exhibit B]
Exhibit C
Root · sealed until the debrief · never opened in play
Envelope C
The switch-off of the old system was deferred, the owner is gone and there was no handover. The record also notes how many exceptions were approved in the same period.
"What would have told you earlier?"
Printing Print Exhibits A, B and C as three separate pages. C stays sealed until the debrief reveal. If a player asks "was this the only one?", the answer is "Ask me in the debrief."
[Malware & Management]
[Exhibit C]