📜 🗡️ 📜

Event Setup

Forge Your Quest — Assemble Your Party

═══════ ⚜️ ═══════

As the Dungeon Master, configure your tabletop event below. Name your campaign, choose the scenarios, add your participants to their departments, and generate the unique event link for your players.

Step 1 — Name Your Campaign

Step 2 — Choose Your Campaign

Select the type of incident campaign to run. Each campaign contains different adventures (scenarios) tailored to that threat category.

⚔️
Cyber Attack
4 adventures

A deliberate, malicious attempt by an external or internal threat actor to compromise the confidentiality, integrity, or availability of the bank's information…

Adversarial intent — someone is actively trying to cause harm or extract value.
🏗️
Digital / Operational Resilience
1 adventure

The bank's ability to continue delivering critical business services and recover to defined tolerances when technology systems fail, degrade, or become unavail…

Systemic or accidental failure rather than hostile action.
📂
Data Breach / Data Loss
1 adventure

Events where personal or confidential data is exposed, lost, or improperly accessed, regardless of whether a malicious actor is involved. This includes acciden…

Personal or confidential data exposure regardless of intent.
🎭
Insider Threat
1 adventure

Deliberate or negligent actions by employees, contractors, or trusted third parties. This spans fraud, sabotage, data theft, and policy violations. Often treat…

Threat originates from within the organisation's trusted circle.
🔗
Third-Party / Supply Chain
1 adventure

Incidents originating from vendors, managed service providers, SaaS platforms, or upstream software dependencies. The response is fundamentally different becau…

The incident originates outside the organisation's direct control.
🏢
Physical Security
1 adventure

Events affecting physical infrastructure such as break-ins to data centres, theft of hardware, tailgating, or destruction of equipment. Often overlooked in cyb…

Physical access or physical damage to infrastructure.
📋
Regulatory / Compliance
1 adventure

Incidents triggered by regulatory action, audit findings, or discovered non-compliance that require immediate remediation. Examples include discovery of sancti…

Regulatory or compliance obligation is the primary driver.
💰
Fraud and Financial Crime
1 adventure

Authorised push payment fraud, account takeover, fraudulent SWIFT/payment instructions, or market manipulation. For a private bank these often sit at the inter…

Financial loss or attempted financial loss through deception or manipulation.
🌪️
Business Continuity / Disaster Recovery
1 adventure

Natural disasters, power failures, building access loss, pandemic staffing crises, or major infrastructure outages that aren't caused by an adversary but still…

Non-adversarial disruption requiring continuity planning activation.
📢
Reputational / Crisis Communications
0 adventures

Sometimes categorised separately because certain events (social media incidents, executive misconduct, leaked internal communications) demand a crisis response…

Reputational damage is the primary risk, regardless of technical impact.
⚖️
Legal / Litigation Hold
0 adventures

Events requiring immediate evidence preservation due to threatened or actual legal proceedings, regulatory investigations, or law enforcement requests.

Legal obligation to preserve evidence or respond to proceedings.

Step 3 — Select Adventures

Choose and order the scenarios for your event. Each adventure will be played in sequence. Select a campaign above to see available adventures.

Available Adventures

Select a campaign above to see available adventures

Your Quest Line 0 min

Add adventures from the available list

Step 4 — Assemble Your Party

Add participants and assign them to departments. Each participant will be able to view the event in real-time from their browser using the unique event link.

Step 5 — Generate Event Link

Save your setup to generate the unique event URL. Share this link with all participants so they can follow the event in real-time from their browsers.

Save your setup to generate the event URL.