Skip to content
Layer 8 SecurityThe Human Factor
Our games

Critical timing. One office. 40 minutes.

The Insider

Breach alarms have just gone off at TruData. Everyone was downstairs at a party when somebody got in. Your team, the only staff cleared of suspicion, has 40 minutes to work out how, file the incident report and stop the hack.

Let’s talk
The TruData office in The Insider: desks, computers and a badge left out

Watch

See it in action

A look inside TruData: the office, the evidence and the race to the incident report.

  • Teams of 4–16
  • 60-minute sessions
  • Virtual and physical versions available

How it plays

Every clue is something a real person left behind

Players explore one office, open computers, phones and documents, and work out how an insider got in. Use the clues to piece together what happened and why, then build and submit your report before time runs out.

  • Search the office

    Open drawers, check desks, read what people left lying around and pick up items to build your report.

  • Get into the computers

    Log in as the staff and follow the trail through their email, files, calendars and phones.

  • Work as a team

    Share your findings, compare notes and build your case together.

  • Write the incident report

    Bring together everything your team has found to complete the report and find the insider.

A printer, a shredder and security posters in the TruData office
A staff member’s inbox in the game, with an email offering an AI tool to install

What it covers

The slips attackers count on

Each one turns up as evidence in the game, and the debrief turns it into what to do at work.

  • Phishing and invoice fraud

    A look-alike sender address, a “new” bank account and a deadline with a bonus attached.

  • Skipping the checks

    A payment made on a colleague’s say-so, “just this once”, without a call to the supplier.

  • Unapproved software

    A handy AI tool installed without IT’s approval, from someone met only once.

  • Weak passwords

    One built from details on social media, another given away by a sticky-note pad.

  • Tailgating and clean desk

    A door held open for a stranger with coffee, an unlocked tablet and a badge left on a desk.

  • Oversharing

    A friendly chat that tells a stranger exactly when the office will be empty.

More from Layer 8

Want to run The Insider?

Tell us your team size and what you are trying to prove, and we will walk you through how it would work for you.

Let’s talk