E
ExamineSpot what looks off
The disguised sender, the manufactured urgency, the request that doesn't fit.
Case File01
October 1 to 9
The Rush Job
Phishing, scam texts and phone fraud
Attackers rarely break in. They get invited in. This case file teaches people to spot the pressure, the disguised sender and the too-good-to-be-true offer, whether it arrives by email, text or phone.
Golden rule
“Urgency is a clue, not a reason to act.”
Spot the Hook
One page to post or share: the red flags to watch for, the E·V·A reflex in action, and what to do if it's already happened.
Employees will learn- Spot the disguised sender and the misleading link
- Recognize pressure tactics by email, text or phone
- What to do if you've already clicked
“The Friday Wire”
Teams dissect a fake wire request from the “CEO,” separate polished trust signals from real red flags, then walk through the payment verification procedure.
Included- Facilitator guide and scenario
- Printable evidence cards
- Team notebook and answer key
POSTER
In a hurry? That's your cue to slow down.
Letter-size printable poster. Swap it out each week.
Download PDF →EMAIL
Case File 01 resources
Case File02
October 13 to 16 · after Thanksgiving
The Familiar Voice
AI and deepfakes
Generative AI can clone a voice, fake a video call and write flawless messages at scale. This case file builds the habit that beats most of them: pause, verify through a trusted channel, and never feed sensitive data to an unapproved AI tool.
Golden rule
“If the request is unusual, a familiar voice isn't enough.”
Unmask a Deepfake
One page to post or share: the red flags to watch for, the E·V·A reflex in action, and what to do if it's already happened.
Employees will learn- Why a voice or a face is no longer proof
- The call-back technique
- What can and can't go into an AI tool
“Safe Prompt or Data Leak?”
Participants sort eight realistic AI prompts (safe, rewrite or off-limits) and pick apart a cloned voicemail from the CFO, then agree on a way to verify requests as a team.
Included- Facilitator guide and scenario
- Printable evidence cards
- Team notebook and answer key
POSTER
Same voice. Same face. Different person.
Letter-size printable poster. Swap it out each week.
Download PDF →EMAIL
Case File 02 resources
Case File03
October 19 to 23
Keys Under the Mat
Passwords, MFA and sensitive data
Credentials are the keys to everything we protect, and our personal details are often lying around in plain sight. This case file covers passphrases, password managers, multi-factor authentication and the handling of personal information under Canadian privacy law.
Golden rule
“Passwords aren't for sharing. Or reusing.”
Lock Down Your Accounts and Data
One page to post or share: the red flags to watch for, the E·V·A reflex in action, and what to do if it's already happened.
Employees will learn- Build a strong, memorable passphrase
- Why password reuse is so risky
- MFA, password managers and privacy law
“Connect the Dots”
Teams get an attacker's recon file on a fictional employee and find every usable clue, from the sticky note to the data breach, before closing each door.
Included- Facilitator guide and scenario
- Printable evidence cards
- Team notebook and answer key
POSTER
One password. One account. No exceptions.
Letter-size printable poster. Swap it out each week.
Download PDF →EMAIL
Case File 03 resources
Case File04
October 26 to 30
The Cost of Silence
Incident reporting
Fast reporting turns an incident into a non-event. This case file tackles what holds people back: fear of blame, doubt, and the classic “someone else probably reported it.” By Friday, everyone knows exactly when, how and where to raise the alarm.
Golden rule
“Reporting isn't confessing. It's protecting.”
Report in 60 Seconds
One page to post or share: the red flags to watch for, the E·V·A reflex in action, and what to do if it's already happened.
Employees will learn- When to report: a hunch is enough
- How to report in 60 seconds
- Why reporting your own mistake protects everyone
“Two Timelines”
Two timelines, one click: reported at 9:05 or at 4:40. Teams measure the gap, handle curveballs and name what stops people from reporting.
Included- Facilitator guide and scenario
- Printable evidence cards
- Team notebook and answer key
POSTER
Reporting isn't confessing. It's protecting.
Letter-size printable poster. Swap it out each week.
Download PDF →EMAIL
Case File 04 resources