No Breach. No Action. No Change

Sky didn’t open the attachment.
Didn’t click anything.
Didn’t report it.

Nothing bad happened.
Nothing good happened either.

The referral was real... this time.
Jo wasn’t annoyed.
Sky processed the CV and moved on.

But beneath the surface, nothing improved.

Sky still didn’t know the right escalation path.
Still wasn’t confident in spotting threats.
Still hesitated when something looked unusual.

And the next time it happens…
Maybe the sender’s name won't mention Jo.
Maybe the email will look even better.
Maybe hesitation won’t be enough to save them.

Doing can feel safe... But it isn’t resilience..

It's just delay... and ultimately just survival by luck, not strength.

Real-world reflection:

In cybersecurity, "no incident" today doesn’t mean "no risk" tomorrow.

Under the NCSC's Cyber Essentials, every organisation should:

Train users to spot suspicious activity
Make escalation pathways obvious and easy
Encourage proactive reporting—not passive silence

Sky survived this time.
But survival isn’t resilience.

What’s next?

Shadow File #002 – Glitch in the Routine… coming soon...

Stay in the Loop

New Shadow Files are coming soon; where your decisions shape the story.
Sign up to be the first to know when a new case goes live.