Trudy and Alice are coworkers at a large company. Trudy and Alice (and 10 other people) are in an open office space (no doors, no walls, just desks). Trudy and Alice are both computer savvy are fierce competitors for an upcoming promotion. Trudy believes that the ends justify the means and is quite ruthless in pursuit of her goals. One day at noon Alice goes to lunch with friends and forgets to log out of her computer which remains on and connected to the company systems. Trudy stays in the office.

From Alices perspective, what is a threat in this situation? What is the vulnerability? What countermeasure might be available?

Use the method, opportunity, motive framework to discuss the likelihood of the identified threat becoming an attack if 1) Other people remain in the office during the lunch hour and 2) if only Trudy remains in the office during the lunch hour. Whats different here?