The Unreported Incident

Someone clicked a suspicious link last week. They know it was dodgy. They haven’t told anyone. Someone else noticed their account behaving strangely but didn’t want to cause a fuss. Another person deleted a phishing email rather than report it because “IT are always busy.”

This is how breaches happen. Not through sophisticated attacks, but through people staying quiet about things they should report.

William Wright (Closed Door Security) and David Goodacre (Amivis) discuss why people don’t report phishing clicks, suspicious behaviour, weird system events, or potential security issues. David covers military environments where reporting problems immediately contained situations and silence escalated them. William shows cybersecurity examples where covering up mistakes led to breaches that should never have happened.

Practical session on building cultures where people actually report things, responding in ways that encourage future reporting, and maintaining accountability without punishment.