Devices & updates
Patching, locking, and what you plug in.
An unpatched laptop is exploited by software that never had to convince anyone of anything. Updates are the cheapest control an organization has.
Would you get these right?
Real items, not examples written for a brochure — these are the same 11 questions the games draw on for this topic. Answer one and see what a player sees.
Restarting your laptop when the update asks
Many patches only take effect after a restart. A machine that is never restarted is often unpatched despite showing everything as installed.
RememberThe patch lands on restart. Do it the same day.
A USB stick of unknown origin
Hand it to IT without plugging it in
Hand it to IT without plugging it in
Some devices announce themselves as a keyboard and type commands the instant they have power. Nothing you avoid clicking will save you.
RememberThe risk is the port, not the files.
Postponing the update prompt for another week
Most successful attacks use flaws that were fixed months earlier. The gap between a patch shipping and you installing it is the window an attacker needs.
RememberUpdates are the cheapest security you will ever get. Take them.
7 games carry this topic
The same material, in whichever game your people will actually open. That is the whole design: the lesson is content, so it is not tied to one set of rules.
Threat & Defence Match
Match every risk to the habit that beats it.
Link each risk to the habit that defeats it, so the defence comes to mind with the threat.
Cyber Hygiene Run
Dodge the risky habit. Pick up the safe one.
Build the reflex to take the secure option and step around the risky one, at speed.
Spot the Threat
Judge it in the two seconds you actually get.
Tell a hostile message from a genuine one in the two seconds you actually get.
Threat Range
Report the threats. Let real mail through.
Judge before you act: report the real threats and leave legitimate messages alone.
Phishing Triage
Report it, bin it, or trust it.
Decide what to do with a suspicious message in the seconds you really have, and know why.
Security Scenarios
What would you actually do?
Choose the right response to the security situations that actually come up at work.
Cyber Tambola
Dab the control that stops the call.
Know which control stops which attack, and know when a threat is not yours to act on.