Taurus · Prepared for the Illumio revenue team — Taurus watches the threat landscape, your accounts, and your pipeline, and decides which deserve attention today. This is one rep, one account, one morning.
01 · New in seat
Reps inherited11
Territory plans1 of 11
Target listsstatic · 214 accts each
Threat advisories31 new
CRM tasks118 overdue
Forecast callFriday

You inherit eleven reps. One has a territory plan. The other ten are working from static lists and instinct — and the wave moved over the weekend.

Every rep has a list. Only one has a plan.

02 · The wave — public record
Marks & Spencer — ransomware via social-engineered access; ~£300m disclosed profit impactPublic disclosure · UK retail wave
Co-op — same campaign window; ~£206m in lost revenue disclosedPublic disclosure · UK retail wave
Harrods — targeted in the same wavePublic reporting
2026 — edge-appliance exploitation across major firewall vendors; manufacturing lines halted for weeksVendor advisories · public reporting

The chain, every time: access → lateral movement → extortion. The middle step is the one that turns an incident into a headline.

The same pattern, again and again. Access, then spread.

03 · Taurus reads the wave against the book
1Corvid Financial
17Alderway GroupExposure elevated · profile match · modelled
3Meridian Manufacturing
4Halden Grocery
5Brightloom Retail

Not news detected. Exposure elevated.

Alderway Group — a FTSE-scale home-improvement retailer, 2,000+ stores across Europe. Fictional here; the profile is what matters.

04 · The reasoning — public signal only

Yesterday

PriorityMid-list
Reason to callGeneric
TimingUnknown

Today

Sector & profileMatches the breached retailers
Attack surfaceMulti-banner estate, large help-desk — the surface this campaign exploited
Buy-side motionSecurity-governance function visibly building out

Not a hunch. A profile match to companies that just paid for the gap.

05 · Taurus rejects its own outreach
Rejected
Don't be the next M&S

Hi — you'll have seen what happened to M&S and the Co-op. £500m between them. Companies like yours are next, and we'd love 20 minutes to show you how segmentation would have saved them…

This gloats over a peer's breach. It's predatory, and it's wrong.

Approved
The middle step, closed — before the window does

Hi — the campaign moving through UK retail follows one chain: access, lateral movement, extortion. The first step can't always be stopped. The second can. For an estate of your shape, containment is the difference between an incident and a headline — worth a conversation while the window's open…

Speaks to the pattern and the exposure. Positions containment as protection. Names no victim.

Protection, positioned as protection.

A security buyer trusts the vendor more for the restraint. That's the point.

06 · The room, mapped overnight
Economic buyer · likely champion
CISO / Group Head of Security

Career-defined by not being the next headline. The wave is their board conversation this quarter — entry path: the pattern briefing, not a pitch.

Coach
Infrastructure / Network Lead

Owns the estate the campaign moves through. Speaks segmentation natively — entry path: the technical containment story.

Blocker
Procurement

Arrives late with a framework agreement. Neutralised early by the CISO's urgency and a dated, public reason to move now.

The room, mapped — before the rep lifts a finger.

07 · One decision
Alderway Group · Next move

Open with the CISO, on the pattern

  1. Send the approved draft — pattern and exposure, no victims named
  2. Brief the network lead path as the technical second thread
  3. Book the exposure briefing while the campaign window is open

One decision. The right account, the right reason, the right person.

08 · Eleven reps, one screen
Alderway Group — approved draft out, CISO thread openWorked · in window
Halden Grocery — profile match, no touch in 9 daysGoing cold in the window
Meridian Manufacturing — rep chasing IT manager; economic buyer is the COO post-shutdownsWrong stakeholder
Corvid Financial — exposure steady, correctly parkedHold

The territory plan that writes itself. Every night. For all eleven.

Territory planning stops being a document ten reps never write — it becomes what Monday morning looks like. Judgment and timing, ranked by exposure, per rep.

09 · The loop

Point your reps at the accounts that just got a reason to act.

Taurus

From signal to pipeline, the morning it matters.

See your own book, ranked by exposure — book 15 minutes