MIS Simulation: The Data Breach

Read your role. Talk to your partner. Solve the problem.

The Situation

A company laptop was stolen. It has private data for 300 workers. We must follow the law. 一台公司笔记本电脑被盗。里面有300名工人的隐私数据。我们必须遵守法律。

How to play (怎么玩)

1. Pair up: One student is the HR Manager. One student is the IT Manager.

两人一组：一名同学扮演 HR经理，一名同学扮演 IT经理。

2. Read your role: Click on your page (HR or IT). Read the facts.

阅读你们的角色：点击你的页面（HR或IT）。阅读事实信息。

3. Practice: Go to Page 4 and read the dialogue with your partner.

练习：去第4页，和你的搭档一起朗读对话。

Goal: Decide how to tell the workers and how to fix the security.
目标：决定如何告诉工人，以及如何修复安全问题。

Role: HR Manager

Your Job: Protect employee privacy and follow the law. 你的任务：保护员工隐私并遵守法律。

Your Information (事实信息):

  • We had a data breach yesterday. A laptop was stolen from a car. 昨天发生了一起数据泄露。一台笔记本电脑在车里被偷了。
  • The laptop had names and bank accounts for 300 workers. 笔记本电脑里有300名工人的姓名和银行账户。
  • Privacy is our top priority. We must tell the workers today. 隐私是我们的首要任务。我们今天必须告诉工人们。
  • Compliance is very important. The law says we must report the breach. 合规非常重要。法律规定我们必须报告数据泄露。

Phrases to use (使用的句型):

  • "We have a data breach." 我们发生了数据泄露。
  • "Privacy is our top priority." 隐私是我们的首要任务。
  • "Compliance requires us to tell them." 合规要求我们告诉他们。
  • "The thief might have access to the data." 小偷可能有权访问这些数据。

Role: IT Manager

Your Job: Explain the security problem and how to fix it. 你的任务：解释安全问题以及如何解决它。

Your Information (事实信息):

  • The laptop had a password, but no encryption. The data is not safe. 电脑有密码，但没有加密。数据不安全。
  • The thief has access to the data now. 小偷现在可以访问这些数据了。
  • Our security is weak. We need to update our rules. 我们的安全很薄弱。我们需要更新我们的规则。
  • Next week, we will install new software to protect the computers. 下周，我们将安装新软件来保护电脑。

Phrases to use (使用的句型):

  • "The laptop had no encryption." 笔记本电脑没有加密。
  • "The thief has access to the data." 小偷能访问数据。
  • "We need to update our security." 我们需要更新我们的安全。
  • "We will install new software." 我们将安装新软件。

Let's Practice! (开始练习！)

Find your partner. Read this dialogue out loud together.

找到你的搭档。一起大声朗读这段对话。

HR Manager: "IT, we have a big problem. A laptop was stolen. We have a data breach."

“IT，我们有个大问题。一台笔记本电脑被偷了。我们发生了数据泄露。”

IT Manager: "I know. I am very sorry. The thief has access to 300 workers' data."

“我知道。我很抱歉。小偷可以访问300名工人的数据。”

HR Manager: "Was the data safe? Did we have encryption on the laptop?"

“数据安全吗？笔记本电脑上有加密吗？”

IT Manager: "No. The laptop had a password, but no encryption. The data is corrupted and open."

“没有。电脑有密码，但没有加密。数据损坏了并且是开放的。”

HR Manager: "This is terrible for privacy. What about compliance? We must follow the law."

“这对隐私来说太糟糕了。合规方面怎么办？我们必须遵守法律。”

IT Manager: "Yes. We must report the breach today. I will call the police."

“是的。我们今天必须报告数据泄露。我会报警。”

HR Manager: "Good. We will tell the workers today. How can we fix our security?"

“很好。我们今天会告诉工人。我们怎么修复我们的安全？”

IT Manager: "Next week, we will update all passwords and install new security software."

“下周，我们将更新所有密码，并安装新的安全软件。”

Security & Actions Quiz

Click the correct word to complete the sentence.

点击正确的单词来完成句子。

1. When private data gets out of the company, it is a ______.
当私人数据泄露到公司外部时，这是一起 ______。
2. Keeping employee data secret is called ______.
对员工数据保密被称为 ______。
3. Following the law and company rules is called ______.
遵守法律和公司规定被称为 ______。
4. The right to use or see the system is called ______.
使用或查看系统的权利被称为 ______。
5. Protection that makes stolen data unreadable is ______.
使被盗数据无法读取的保护措施是 ______。
6. Putting new software on a computer is called ______.
在电脑上安装新软件被称为 ______。