Facilitator Notes & Model Answers — Lesson 08
For instructors and self-study · Model policy and rationale
Model sensitive-meeting device policy
| Element | Reference position |
|---|---|
| Devices in room | For the most sensitive items: no personal phones; devices powered down and stored outside or in screened storage — "absent," not merely "off" |
| Environment | Assume hotel network and any smart-display/in-room devices are hostile; no reliance on them; no recording |
| External adviser | Same rules as directors; scoped, no exceptions for convenience |
| Enforcement | A named person; applied to everyone equally (including the chair) so no one feels singled out |
| Exception | One reachable duty-phone held by staff outside the room for genuine emergencies, not personal phones inside |
Why the poll answer is C (reduce attack surface)
- A — avoid links: useless against zero-click, which needs no user action.
- B — longer passcode: helps against physical access, not remote implants.
- C — surface reduction: fewer apps, prompt patches, and lockdown/isolation modes remove what the exploit targets. The only measure that meets a no-click threat.
- D — download scanning: addresses a different, click-based delivery path.
Teaching point: match the control to the threat. Behavioural controls cannot stop a threat that requires no behaviour.
Homework — what good looks like
Task 1
Strong answers cite concrete removals (an over-permissioned app, an always-on radio) and connect each to what it exposed — usually location or contacts.
Task 2
The best rules are enforceable one-liners that treat "absent" as different from "off," and apply to everyone including the most senior person present.
Task 3
A good answer names what lockdown mode disables (certain message previews, link handling, wired connections) and a realistic trigger for enabling it, e.g. high-risk travel.