Sales rep reports company laptop left in airport taxi overnight

A easy Cybersecurity scenario on Device Loss.

Practice this scenario

Start a graded attempt against this scenario. Your response is scored by the same deterministic rubric used across the catalog. Email and evidence content stay hidden until you start.

Launches this exact scenario. One of 5 templates in this Track + Difficulty pool.

catalog id · device-loss-airport-taxi

Training alignment

What this scenario practices, mapped to recognized frameworks.

Educational mapping only. Not a compliance attestation.

What this trains

Lost-device IR decision making
Encryption-backed residual-risk reasoning

MITRE ATT&CKmitre-attack

Data from Cloud Storage · CollectionT1530 · TA0009
PartialLow confidence
Trains defensive reasoning when an authenticated device leaves the holder's custody.

MITRE D3FENDmitre-d3fend

User Account ContainmentD3-UAC
MappedHigh confidence
Trains containment of the user session associated with the missing device.
Disable AccountD3-DI
MappedMedium confidence
Trains the conditional account-disable decision under residual-risk pressure.

NIST CSF 2.0nist-csf-2

Data Security · ProtectPR.DS · PR
MappedHigh confidence
Trains data-protection reasoning when a managed endpoint is no longer in custody.

NIST SP 800-61r3nist-sp-800-61r3

IR lifecycle phaseContainment, Eradication & Recovery
MappedHigh confidence
Trains conditional containment when scope is incomplete.

CISA Cybersecurity Performance Goalscisa-cpg

Strong and Agile Encryption2.H
MappedHigh confidence
Trains reliance on full-disk encryption as the residual safety control.
Secure Sensitive Data2.I
MappedMedium confidence
Trains data-impact estimation when the device may carry cached secrets.

CIS Controls v8cis-controls

Data ProtectionControl 3
MappedHigh confidence
Trains the data-protection control that limits lost-device exposure.
Account ManagementControl 5
MappedMedium confidence
Trains the account-lifecycle response to lost-device events.