A municipal CISO wants weekly evil-twin tests in the public lobby without change control or user communication. What process pushback is appropriate?
Select an answer to reveal the explanation.
Short Explanation
Weekly lobby evil twins without a change ticket is chaos cosplay. Treat recurring offensive drills like any other risky exercise—schedule, approve, tell people. Skipping process because it is “just guest Wi-Fi” still bites.
Full Explanation
Recurring offensive wireless exercises such as evil-twin tests in occupied civic spaces require the same scheduling, change approval, and stakeholder communication as other security drills. Frequency without governance increases accidental impact and legal risk. Relocating onto unauthorized neighbor networks or exempting guest SSIDs from approval is unsafe process failure.