A data breach inspired Role Playing Game  

“How I hacked your folder”. 

By Approach


The  game 

Imagine… Your company doing its business as usual, everything is running fine. Until that fateful day. Something that was at first glance a simple user’s misuse turns out to  be a severe cyber incident. Be one of the actor of this real-life inspired dramatic scenario and learn how to sort it out!     

What you will learn
Based on real life  experience of our security experts, you will live from the inside a cyber incident and you will learn :

1. How to manage a cyber-security incident;
2. How to diagnose and escalate to a GDPR data breach incident;
3. How every role is expected to react, from the CEO, to the common employee;
4. What are the best practices when it comes to security incidents and GDPR notifications.  

Target Audience
No specific technical expertise is needed. Security sensitiveness and interest are the sole pre-requisites for playing. 

Practical information
We will play the game four times during the Convention in a dedicated space. 

The game will take an hour to play: 10 minutes briefing , 40 minutes of gaming , 10 minutes of conclusions  

We ask the participants to join the game room 10 minutes in advance so we can assemble the groups. 
At maximum 24 players per game will be accepted (6 groups/roles of 4 players).

To register, simply indicate that you are interested by the game during your registration to the convention. 


Your hosts 


Pierre Alexis  

Pierre is an experienced consultant in Information Security. Having a solid technical background and a keen interest on the field of security, many projects and responsibilities linked to this thematic were entrusted to him these last four years. His main achievement is the implementation of a complete ISO 27001 ISMS for a fintech company that led to a successful certification.

He also fulfilled several security assessments, supervised several penetration testing, managed the implementation of a new authentication platform to support digital platforms. Simultaneously to these project activities, part of his time was also dedicated to ensure immediate response to cyber security incidents. Besides these professional activities Pierre is also teaching computer sciences at Solvay Brussels School of Economics and Management and is a reserve offices in the Cyber Defence department of the Belgian Army.

François Zöfel 

François is in the IT industry for nearly 20 years, assuming roles from system management to European level IT management roles. His main achievements have been the complete integration of a Belgian business IT infrastructure and processes into a large Sarbannes Oxley compliant global systems and the complete modernisation of the European IT infrastructure of an independent music group to enable its digital transformation toward the new streaming and online lincensing models. With a broad technical knowledge he evolved into infosec, taking the lead implementation role of rist management and infosec compliance program for Belux in a market leader HR and temporary work company.

François is Certified Information Security Manager from Isaca, Certified Information Systems Security Professional from (ISC)2 and certified in European Data Protection from Solvay Brussels School of Economics and Management and is now designing and implementing GDPR management systems in the fintech sector.