{"id":2737,"date":"2023-09-23T08:31:38","date_gmt":"2023-09-23T06:31:38","guid":{"rendered":"https:\/\/xn--nrttipaikalle-imb.fi\/en_gb\/?p=2737"},"modified":"2026-01-20T13:52:12","modified_gmt":"2026-01-20T11:52:12","slug":"boosting-it-security-with-games","status":"publish","type":"post","link":"https:\/\/norttipaikalle.fi\/fi\/boosting-it-security-with-games\/","title":{"rendered":"Boosting IT security with games."},"content":{"rendered":"

IT Security<\/h2>\n\n\n\n

Boosting IT security is a challenge and can keep us up a night. I saw this post on LinkedIn today, and I\u2019d love to share my approach with you.<\/p>\n\n\n\n

\n
\n

For sure the CEO is ultimately responsible since they are the “steering the ship”. But what\u2019s the front door for malware? What makes up the majority of the attack surface? The user. We all are part of the attack surface. We all share some of the responsibility.<\/p>\n\n\n\n

This one time, we were able to significantly boost the effectiveness of our IT security and antivirus software with \u201corganic augmentation.\u201d.<\/p>\n<\/div>\n\n\n\n

\n
\"Fry,<\/figure>\n<\/div>\n<\/div>\n\n\n\n

What did we do? \ud83d\ude0e<\/p>\n\n\n\n

We turned it into a game. We made it fun.<\/p>\n\n\n\n

It started by chance when a colleague forwarded me an email which they suspected of being a phishing mail. Not the safest of approaches, but it was the start of something wonderful!<\/p>\n\n\n\n

If I remember correctly, I did reply personally, but then I crafted a message which I sent company wide.<\/p>\n\n\n\n

I used screenshots, some gentle humour and sarcasm, to highlight the telltale signs of a phishing email. I signed off with memes of RDJ or Like Skywalker saluting. And most importantly, I praised – read that again – I praised the employee for spotting the suspicious email.<\/p>\n\n\n\n

Very quickly I was getting almost daily submissions as attachments or screenshots. Each email was dissected fully and shared to the company. I exposed grammatical errors, out-of-date logos. By hovering over a link, I would take a screenshot of the exposed hyperlink – they never matched the text! \ud83d\ude01 B<\/p>\n\n\n\n

Because we used an in-house file sharing platform, we could immediately discount anything referring to \u201cyour new pay-deal is in Sharepoint\u201d.<\/p>\n\n\n\n

We basically crowdsourced part of IT security.<\/p>\n\n\n\n

And it worked. Nearly 100 employees globally and over 5 years only compromised user.<\/p>\n\n\n\n

<\/div>\n\n\n\n

The takeaway<\/h2>\n\n\n\n