Managers will work through role-specific scenarios that mirror real-life risks faced at Levino Capital. Each scenario encourages active decision-making and provides immediate feedback.
Scenario 1: Fake CEO Email
You receive an urgent request from the CEO to approve a wire transfer of AUD 800,000 to a new vendor account. The email looks professional and is marked as “High-Priority”.
- Correct Action: Pause and verify the request through official channels (phone directory, dual-approval system). Escalate to IT Security Manager if suspicious.
Scenario 2: Voice Call from IT Support
An unknown caller claims to be IT support and asks you to provide your MFA code to “reset your login.”
- Correct Action: Never share codes or passwords. Report the attempt to IT Security immediately.
Scenario 3: Staff Reporting Suspicious Email
A staff member forwards you a suspicious email but isn’t sure if it’s a phishing attempt.
- Correct Action: Acknowledge the report, escalate it through the Incident Response Plan, and provide feedback to the staff member to encourage ongoing reporting.