TRUSTBENCH
TRAINING ENVIRONMENT CASE 01 / 03

PHISHING / BEC TRIAGE

The last-minute change

YOUR ROLE Finance security analyst
SECURITY COPILOTRecommendation
PINNED RESPONSE
ASK A CONTROLLED FOLLOW-UP

Well calibrated.

DEFENSIBLE ACTION

Trust is a conclusion,
not a starting point.

  1. VValidate the task and threat claim
  2. EElicit assumptions and missing evidence
  3. RReason independently before relying
  4. IInspect provenance and authority
  5. FForecast harms if the advice is wrong
  6. YYield a justified, proportional action