Eavesdropping & Device Theft
Your voice carries further than your screen.
What Is Eavesdropping & Device Theft?
In a public place the next table can hear your calls and see your screen, and a laptop left for a moment can walk. In this exercise you put a client list away, take a client call off speaker once a stranger starts listening, and then find your laptop and bag gone. You report the laptop lost, wipe it, sign it out everywhere and tell IT, and learn what disk encryption does and does not cover.
What You'll Learn in Eavesdropping & Device Theft
- Recognize that a call on speaker in a public place tells anyone nearby the client, the figures and the account details.
- Apply the call habit for public places: take it off speaker, stop naming the client, and finish it somewhere private.
- Reduce what a screen shows the room by keeping sensitive work private, sitting with your back to a wall and using a privacy filter.
- Respond to a lost or stolen laptop by reporting it at once, requesting a remote wipe and signing it out of every session.
- Explain why full-disk encryption protects a laptop that is off or at its login screen, but not an open, signed-in session.
Eavesdropping & Device Theft — Training Steps
-
Work on the table
It is mid-morning at Wrenloft Coffee. Alice has a call with Tessmoor Cider soon, and she has Ostmere's client list open to check where their renewal stands before it. Her laptop sits on the table with its screen to the room, and the man at the next table is close enough to read it.
-
Put it away
She has what she needed from the list, and the rest of it is not for a cafe. Alice leaves it and goes back to her desk page, which shows project names and nothing more.
-
Maren calls
Her phone rings on the table: Maren from Tessmoor Cider. Alice has one hand on the trackpad and the phone lying flat beside it, so she answers on speaker, the way she would at home.
-
The next table
Maren is still on the line. At the next table the man has stopped what he was doing, and he is leaning in toward Alice's table.
-
What he heard
He says something under his breath, not quite quietly enough. He did not need to see her screen. The client, the contract value and the account digits all came out of her phone speaker, at a volume meant to fill a room.
-
Off speaker
Everything Maren said reached the next table: the client, the figure and the payment account. Alice takes the call off speaker, stops naming anything, and asks to finish it somewhere private.
-
What reached the next table
-
Two minutes at the counter
Alice needs a private room for the callback, and Wrenloft has a small one behind the counter. She goes to ask, and to order while she is there. Her laptop stays open and unlocked on the table, her bag on the floor by her chair. The counter is only a few steps away.
-
An empty table
Alice comes back with her coffee to an empty table. The laptop is gone, and so is her bag. Nobody saw who took them. The man from the next table has gone too, and what he heard on the call went with him. The laptop was open, unlocked and signed in when she walked away. Her phone is the one device she still has, and Ostmere's device page is where a lost laptop gets reported.
-
Still signed in
The page shows what Ostmere knows about the laptop, and none of it is reassuring.
Security Framework Coverage
CIS Controls
- CIS 14.5 Train Workforce Members on Causes of Unintentional Data Exposure
- CIS 14.6 Train Workforce Members on Recognizing and Reporting Security Incidents
NIST CSF
- PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind