Santa Got Hacked: Navigating a Christmas Cyber Crisis
Join us at the last WISP event of the year - a Christmas special - as we walk through a fictional, but highly realistic, cyber incident involving Santa's workshop, connected toys, gift delivery systems, reindeer employee data, and the "Naughty & Nice" database.
Together, we'll explore:
The Incident: How the breach happened, what systems were affected, and what information was compromised.
GDPR Breach Notification Obligations: When does Santa need to notify a supervisory authority? When must affected individuals be informed?
NIS2 Incident Reporting: Could Santa qualify as an essential or important entity, and what reporting timelines would apply?
KRITIS / Critical Infrastructure Considerations: What changes if Santa's workshop is considered critical to Christmas supply chains?
Cyber Resilience Act (CRA): What if the attack exploited vulnerabilities in connected smart toys? What responsibilities would manufacturers, importers and distributors face?
Practical Crisis Management: Initial response measures, stakeholder communications, coordination between legal, privacy, IT, and security teams.
Lessons Learned: Practical tips for navigating overlapping cybersecurity, privacy, and product-security requirements in the real world.
Join us as we work together to save Christmas and navigate Santa's cyber incident from breach to recovery!