EXHIBIT B Interactive Game on Internal Security and Employee Monitoring BEGIN

You own a small company, seeking to expand. You realise that with an increase in personnel there is an increased need for internal security, not just to monitor employee productivity, but also to safeguard against employees using company data for their own ends. CONTINUE

YESNO At the moment all employees can access the information stored by your company, as it is freely available on your company intranet. This removes the need for employees to have to ask for permission to access the data, and therefore increases productivity, so do you think this is a good idea?

As your information is freely available, it is easily accessed by anybody in the building, including the janitors and cleaning staff. Does this matter? YESNO

YESNO Something clearly needs to be done to restrict access to the data. One option is to make everything protected and only give permission to employees when they ask for it, if you feel they need it. Do you think this is a feasible solution?

START AGAINEXIT GAME The company thrives for a while, but soon you realise that all of your ideas are being marketed by an opposing company! Somehow they must have discovered what you were doing. Soon you realise that one of your lower level employees had been selling your ideas to your competitors. Your company is made bankrupt...

YESNO Productivity in your company drops massively as there are extreme delays for employees when trying to access data. You could try and work through this, or another system could be used. Are you going to look for a different arrangement?

Another option is to use a hierarchical system of access levels. Higher up employees in your company will have access to more information than employees lower down on the tree. That way only trusted employees have access to the most important data. Your company decides to use this system. CONTINUE

START AGAINEXIT GAME Your company continues to run, but never really gets anywhere. It is impossible to compete with your competitors when your productivity is so low.

HIREINVESTIGATE You are looking to hire a new employee, and you interview someone recently fired from one of your competitors’ companies. Their skills seem to match your position perfectly, and they will also have inside knowledge of your competitor. Do you think you should hire them straight away or investigate further?

START AGAINEXIT GAME The company thrives for a while, but soon you discover that the employee you recently hired has been leaking all of the information he has access to online. It turns out that that was the reason he was fired from his previous position. You should investigate employees in more detail.

After further investigation you discover that the reason he was fired from his previous position was that he leaked a lot of their company information online. You decide not to hire him. CONTINUE

YESNO After a few days you receive a report from a high level employee in your company who suspects that a lower level worker is stealing some of the company information. Walking towards her office you see that she is making a phone call. Do you decide to eavesdrop on her conversation?

YESNO You can only make out a few words, so it is impossible to know what the call was about. You could decide to install a system whereby all calls made by employees would be recorded. Do you think this is a good idea?

Another way to monitor what employees are doing is to install internal CCTV. This will not only help check if they are doing what should be required, but will also improve the physical security of the workplace. Your company decides to install cameras. CONTINUE

START AGAINEXIT GAME There is a fine line between employee monitoring and invasion of privacy, but you have definitely just crossed it. When an employee discovers that you are recording all private phone calls, your company is taken to court and given a huge fine. Unable to continue after such a heavy blow, your company is made bankrupt...

YESNO After some time you notice that employee motivation has gone down as they feel that they no longer have any freedom. One of your workers suggests that you could remove the CCTV to raise morale, and hence productivity. Other methods of employee monitoring are always possible. Do you follow this advice?

START AGAINEXIT GAME Unfortunately as soon as the cameras are removed you discover that a lot of important files have gone missing from one of your offices. It soon transpires that the worker who suggested the CCTV be removed took this opportunity to steal some valuable files. You should have waited longer to see the long term effect before changing your mind.

That is probably the best decision. It is worth waiting longer to see the long term effect of CCTV before considering whether it is worth changing the system or not. CONTINUE

EXIT GAME CONGRATULATIONS! With the knowledge you have shown and the wise decisions you have made, your company will surely thrive!

END OF EXHIBIT