Back to scenarios
Code on a dark screen, illustrating the Chain Reaction: Data Fallout Microsimulation
Coming soonCyber & DataTeam

Chain Reaction: Data Fallout

At a glance

Chain Reaction: Data Fallout is an upcoming simulation from iluminr in the Cyber & Data category for Technology & Security, Risk and Compliance. It will test how your team protects online & mobile banking, with indicative mapping to NYDFS Part 500, SEC Cyber Disclosure Rule and GLBA Safeguards Rule.

A breach at one provider cascades into data exposure across your service chain. Your team must trace what was lost, meet notification deadlines and keep customers and regulators informed as the picture changes.

What it will test

  • Trace the scope of a data breach across third and fourth parties.
  • Meet regulatory and customer notification obligations under time pressure.
  • Decide when to suspend or replace an affected provider.

Questions about Chain Reaction: Data Fallout

What will Chain Reaction: Data Fallout test?

Chain Reaction: Data Fallout will test whether your team can trace the scope of a data breach across third and fourth parties, meet regulatory and customer notification obligations under time pressure and decide when to suspend or replace an affected provider.

Who is Chain Reaction: Data Fallout for?

It is designed for Technology & Security, Risk, Compliance, Legal, Communications and Executive & Board.

Which regulations and standards does Chain Reaction: Data Fallout support?

Chain Reaction: Data Fallout supports testing expectations in NYDFS Part 500, SEC Cyber Disclosure Rule, GLBA Safeguards Rule, EU DORA, NIS2, APRA CPS 234, MAS TRM Guidelines, NIST CSF 2.0, EBA ICT & Security Risk Guidelines, ECB CROE, TIBER-EU, CBEST, APRA Intel-Led Cyber Testing, HKMA CFI, HKMA iCAST, RBI Cyber Security Framework, Singapore Cybersecurity Act, OSFI B-13, OSFI I-CRT, SAMA Cyber Security Framework, UAE Central Bank IS Regulation, UAE Information Assurance Standards, Israel INCD Cyber Methodology, ISO 27001, ISO 27035, NIST SP 800-61r3, NIST SP 800-53, CISA Cyber Storm, ENISA Cyber Europe, ISO 22398 and NIST SP 800-84. Mapping is indicative, so confirm scope against your own obligations.

When will Chain Reaction: Data Fallout be available?

Chain Reaction: Data Fallout is in development. Register your interest and we will contact you when it is ready, or about running a customized version sooner.

Can it be run individually or as a team?

It will run as a team exercise in a shared event room, and can be extended into a full-scale simulation.

Available now

Phone call in the dark, illustrating the Bracing for Impact: Communications Test MicrosimulationCyber & DataBracing for Impact: Communications TestTest your organization's ability to send timely Emergency Notifications in response to a sophisticated, self-learning malware threat that targets critical infrastructure.Code on a dark screen, illustrating the Data Breach: Major Leak MicrosimulationCyber & DataData Breach: Major LeakA massive data breach has struck some of the world’s largest organizations, including your own, leading to the potential compromise of sensitive personal information. The breach has exposed the names, phone numbers, and addresses of millions of customers, raising immediate concerns about privacy, identity theft, and the security of your data handling practices.Code on a dark screen, illustrating the Extortion: Ransomware Invasion MicrosimulationCyber & DataExtortion: Ransomware InvasionAddress a widespread ransomware attack demanding cryptocurrency payments, focusing on stakeholder communication and restoring operational control.