How solenefig-lab/grc-banqueconnect works
BanqueConnect is a fictional banking cyber-crisis exercise, not an implemented software system. Its principal workflow documents a third-party data-exfiltration crisis, from investigation and coordinated response through executive decisions and regulatory or customer notifications; the exercise also records arbitration and lessons learned. The two deliverables are the timeline and the J+0 COMEX presentation. Relationships below reflect responsibilities and outputs explicitly described in the README; the documents’ detailed contents were not sampled, so finer-grained links are omitted.
Main entry points: timeline-crise.md Crisis timeline · Presentation-COMEX.md COMEX presentation
Components 14
Incident scenario
- KYCPro
- Crisis timeline
timeline-crise.md
Crisis response
- SOC
- RSSI
Governance and communications
- COMEX
- COMEX presentation
Presentation-COMEX.md - DPO
- Compliance
- Legal
- Communications
- Customer support
Other components
- CNIL
- ACPR
- Customers
Connections 12
- KYCPro → Crisis timeline: incident scenario
- SOC → Crisis timeline: investigates
- RSSI → Crisis timeline: coordinates
- COMEX → Crisis timeline: decides
- Crisis timeline → COMEX presentation: informs J+0
- Compliance → Crisis timeline: checks DORA duties
- Legal → Crisis timeline: handles contract issues
- DPO → CNIL: notifies
- DPO → Customers: notifies
- Compliance → ACPR: notifies
- Communications → Customers: communicates
- Customer support → Customers: handles inquiries