Showing 1–4 of 4 articles
Tabletop exercises that force a real decision
An exercise becomes useful when participants must make a real choice with limited information. Design the scenario around that choice, then capture what authority, evidence, and dependencies it exposes.
Read the visual guide
How to run a short security exercise with eight people
A short exercise can reveal whether people know who decides, who contacts whom, and how recovery would begin. Use a realistic scenario and finish with a small, owned action list.
Read the visual guide
How staff should report a suspicious email
People report more effectively when the route is easy to find and the response is clear. Ask for the message and what happened after it, without encouraging further interaction.
Read the visual guide
Stolen session cookies: why a password reset may not end access
A session cookie can let a browser continue using an account after sign-in. If a session is stolen, changing the password may not revoke every active session or connected application.
Read the visual guide