AI tools at work
What may be pasted into a chatbot, and what an AI-written message can now look like.
AI removed the bad grammar that people were trained to look for, and added a new way to leak data: pasting it somewhere helpful.
Would you get these right?
Real items, not examples written for a brochure — these are the same 7 questions the games draw on for this topic. Answer one and see what a player sees.
Pasting a customer list into a public AI chatbot
You have disclosed personal data to a third party with no agreement covering it. Whether it trains a model is almost beside the point — the disclosure has already happened.
RememberUse the approved tool, and paste nothing you would not email outside.
Client data pasted into a free AI tool
The approved assistant, or remove the identifying parts
The approved assistant, or remove the identifying parts
The disclosure happens the moment you paste it. Whether it trains a model is a separate and later question.
RememberPasting is disclosing.
A voice note from your CEO asking for a payment
Verify on a channel you chose
Verify on a channel you chose
A convincing voice clone now takes seconds of public audio. Recognising the voice is no longer evidence of who is speaking, so the callback is the only check left.
RememberA familiar voice is no longer proof of identity.
6 games carry this topic
The same material, in whichever game your people will actually open. That is the whole design: the lesson is content, so it is not tied to one set of rules.
Threat & Defence Match
Match every risk to the habit that beats it.
Link each risk to the habit that defeats it, so the defence comes to mind with the threat.
Cyber Hygiene Run
Dodge the risky habit. Pick up the safe one.
Build the reflex to take the secure option and step around the risky one, at speed.
Spot the Threat
Judge it in the two seconds you actually get.
Tell a hostile message from a genuine one in the two seconds you actually get.
Threat Range
Report the threats. Let real mail through.
Judge before you act: report the real threats and leave legitimate messages alone.
Security Scenarios
What would you actually do?
Choose the right response to the security situations that actually come up at work.
Cyber Tambola
Dab the control that stops the call.
Know which control stops which attack, and know when a threat is not yours to act on.