Eavesdropping & Device Theft

Eavesdropping & Device Theft

Your voice carries further than your screen.

What Is Eavesdropping & Device Theft?

In a public place the next table can hear your calls and see your screen, and a laptop left for a moment can walk. In this exercise you put a client list away, take a client call off speaker once a stranger starts listening, and then find your laptop and bag gone. You report the laptop lost, wipe it, sign it out everywhere and tell IT, and learn what disk encryption does and does not cover.

What You'll Learn in Eavesdropping & Device Theft

Eavesdropping & Device Theft — Training Steps

  1. Work on the table

    It is mid-morning at Wrenloft Coffee. Alice has a call with Tessmoor Cider soon, and she has Ostmere's client list open to check where their renewal stands before it. Her laptop sits on the table with its screen to the room, and the man at the next table is close enough to read it.

  2. Put it away

    She has what she needed from the list, and the rest of it is not for a cafe. Alice leaves it and goes back to her desk page, which shows project names and nothing more.

  3. Maren calls

    Her phone rings on the table: Maren from Tessmoor Cider. Alice has one hand on the trackpad and the phone lying flat beside it, so she answers on speaker, the way she would at home.

  4. The next table

    Maren is still on the line. At the next table the man has stopped what he was doing, and he is leaning in toward Alice's table.

  5. What he heard

    He says something under his breath, not quite quietly enough. He did not need to see her screen. The client, the contract value and the account digits all came out of her phone speaker, at a volume meant to fill a room.

  6. Off speaker

    Everything Maren said reached the next table: the client, the figure and the payment account. Alice takes the call off speaker, stops naming anything, and asks to finish it somewhere private.

  7. What reached the next table

  8. Two minutes at the counter

    Alice needs a private room for the callback, and Wrenloft has a small one behind the counter. She goes to ask, and to order while she is there. Her laptop stays open and unlocked on the table, her bag on the floor by her chair. The counter is only a few steps away.

  9. An empty table

    Alice comes back with her coffee to an empty table. The laptop is gone, and so is her bag. Nobody saw who took them. The man from the next table has gone too, and what he heard on the call went with him. The laptop was open, unlocked and signed in when she walked away. Her phone is the one device she still has, and Ostmere's device page is where a lost laptop gets reported.

  10. Still signed in

    The page shows what Ostmere knows about the laptop, and none of it is reassuring.

Security Framework Coverage

CIS Controls

  • CIS 14.5 Train Workforce Members on Causes of Unintentional Data Exposure
  • CIS 14.6 Train Workforce Members on Recognizing and Reporting Security Incidents

NIST CSF

  • PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind