
HUMAN FIREWALL CHALLENGE
Can you outsmart a modern cyber attack?
5 challenges · Around 4 minutes · Your name personalises the experience and identifies prize winners.
1. The Teams Message
💬
👥
Finance Director
Hi , sorry to drop this on you.
I'm heading into a meeting but need to get the payment details for the Brightwell project updated before 11. They've changed banks following their merger. I've got the new details here.
Can you update them for me?
You've had the opportunity to investigate. What do you do?
2. Investigate the Email
To:
Subject: Your password expires today
Your password expires today
Hi ,
Your Microsoft 365 password is due to expire today. To prevent interruption to Outlook and Teams, please confirm your existing password and select a new one.
Microsoft 365 Account Services
Privacy | Security | Support
Don't answer immediately. Use the investigation tools below, then decide which risks you found.
Which risks did you identify?
3. Build Your Password
Create the strongest password you can. Do not enter a password you currently use.
Enter your password twice. Your strength result stays hidden until you lock in your answer.
4. The Office Poster
You notice this poster in a shared area of the office.
SUMMER PARTY 2026
Help us choose this year's venue.
Scan to cast your vote
Voting closes today at 3pm
Summer Party Venue Vote
To make sure every employee votes once, sign in with your work account.
What do you do?
5. The Connected Request
Review the messages available to you. You can inspect the surrounding inbox before deciding what to do.
Subject: Northbridge
Hi ,
I'm travelling today and struggling with signal. You should receive something from Daniel shortly about the Northbridge acquisition.
It's confidential, so please keep it between us for now.
Thanks,
Sarah
Subject: Northbridge secure data room
Hi ,
Sarah said she'd give you some context. We're completing final due diligence today and need you to access the secure data room.
Regards,
Daniel Hughes
External Legal Counsel
Subject: External sharing reminder
Hi all,
A reminder for colleagues working with external organisations: approved third-party services may use their own domains. If you receive an unexpected request involving confidential company information, verify the request through a known contact before proceeding.
Service Desk
Subject: Northbridge project update
Following yesterday's project call, Northbridge remains in the early review stage. Please continue to treat project information as confidential.
External legal support is being coordinated by the executive team. Further details will follow when confirmed.
Subject: July staff update
Our July staff update is now available on the intranet. This month's highlights include the summer event and volunteering days.
What do you do?
Your Human Firewall Score
Cyber Leaderboard
🏆 Top three prizes
1st - Apple Watch · 2nd - Beats Pill · 3rd - Champagne
Highest scores win. Completion time is used only to break a tied score.
| # | Name | Score |
|---|
Competition rule: one entry per person. Ties are ranked by completion time.