Cybersecurity Escape Training
The biggest weakness is people.
Phishing mails, social engineering, weak passwords: it is usually a small lapse that ends up costing a company dearly. Half a day in which your team sees an attack from the other side sticks better than any policy on the intranet.
Cybersecurity clients
What it covers
Four attack routes where real incidents start
In demanding puzzles, participants see at first hand how attackers exploit weaknesses, and how to protect themselves better.
Access
Password security
How to protect your accounts against unauthorised access.
People
Social Engineering
How criminals manipulate people instead of attacking systems.
Data
Data security
Where the biggest risks sit in everyday work.
Deception
Phishing and fraud
How convincing fake mails and websites can be, and how to spot them anyway.
Try it yourself
Would you click this mail?
The mail below is invented. The method is not: attacks on staff almost always start with a message like this one.
- From
- IT Helpdesk
- To
- you@yourcompany.ch
- Subject
our security system has detected an unusual sign-in attempt on your account. Please confirm your password immediately so that your access stays active.
Link:
Kind regards
Your IT department
0 of 4 found
Four details give this mail away. Tap them in the mail window.
- 01The sender addressThe domain does not belong to your company. Genuine internal mail comes from the company domain, not from one that merely sounds like it.
- 02The time pressureA 24 hour deadline exists to stop you asking. Real IT departments do not lock accounts by countdown.
- 03The impersonal greetingYour own IT knows your name. “Dear user” means the sender does not.
- 04The request for your passwordNo legitimate organisation asks you to confirm a password through a link in an email. That is the whole purpose of the mail.
Got you.
Nothing happened here. This page is a demonstration: nothing was loaded, nothing installed and nothing saved.
In a real attack this click opens a sign-in page that looks like your own. Whatever is typed there belongs to the attacker, immediately.
The link just below the button was in fact one of the four clues. Four details would have given this mail away before anyone clicked.
Format
Exclusive to your company, on site or centrally
This game is not publicly available. It is prepared and built to order for your company, at a location of your choice or centrally in Bern.
It suits smaller and larger teams alike and makes for shared, practical learning that people remember.
- Duration
- half a day, about 4 hours
- Participants
- max. 50 per half day
- Location
- at your premises or centrally in Bern
- Setup
- mobile game, not tied to one location
- Catering
- drinks and catering on request
- Completion
- certificate confirming attendance at the training
Foundation
What the training is built on
Standard
ISO/IEC 27001
The training is based on the principles of ISO/IEC 27001, the internationally recognised standard for information security management systems (ISMS), and teaches best practices for identifying, preventing and defending against cyber threats.
Developed with
Stefan Lehmann
Cybersecurity expert at the Swiss Armed Forces Cyber Command and CEO of Brainfoodgames.
We developed the Cybersecurity Escape Training together with him.
Next step
Awareness without the boredom
Would you like to strengthen your people’s cybersecurity skills in an enjoyable way? Write to us through the form, by mail or by phone. We are glad to advise you.