Day to day security
A series of mini-games addressing the theme of security.
Day to day security
Welcome to "Day to day security" a Security Passport unit!
You will test your knowledge through games on the 4 following subjects:
- Phishing
- Password
- Remote working
- Data leak
It's your turn to play!
May the security be with you!
Find the intruder
Among the following items, select the phishing email.
Good luck!
WELL DONE!
This is a phishing email and can be identified by:
- Sender's address, which is similar to an external address but does not exist
- The banner indicating that the email has come from an external sender, which is the right indication To be more vigilant.
- The domain of the link (visible by hovering over the link with the mouse) is suspicious.
Check and download the Security reflex forms via the link at the bottom of the screen.
SORRY!
This is not a phishing email. A phishing email can be identified by:
- Sender's address, which is similar to an external address but does not exist
- The banner indicating that the email has come from an external sender, which is the right indication To be more vigilant.
- The domain of the link (visible by hovering over the link with the mouse) is suspicious.
Check and download the Security reflex forms via the link at the bottom of the screen.
PASSWORD
Now slip into the shoes of a hacker. You have to find Adam Chapman's password. Nowadays, it's very easy for a malicious person to steal a password using personal informations on the Internet (e.g. social media).
Check his favorite social media profile to find his password.
Click on the 4 items that seems interesting clues.
0/4 items found
Next step
WELL DONE!
Now that you've got everything you need, move on to the next step: find the password by selecting one of the keywords.
Next stepPASSWORD
Of the 4 password proposals below, only one matches Adam's password.
Using the items found earlier, drag the correct password into the field provided..
0/4 Try left
Marie1990!
LoveSophie85!
Kiwanocar77?
Misty11years?
Good practices
Bad practices
WELL DONE!
So you have proof that a weak password can be easily found if you include personal informations (especially if this is mentioned on the Internet).
Check and download the Security reflex forms via the link at the bottom of the screen.
Next stepSo you have proof that a weak password can be easily found if you include personal informations (especially if this is mentioned on the Internet).
Check and download the Security reflex forms via the link at the bottom of the screen.
Next step
WELL DONE!
- If you have to work remotely on public transport, use a Privacy filter and avoid working on confidential documents. An ill-intentioned person could steal informations.
- Don’t discuss work-related matters in public transport (face-to-face or by phone), even with your colleagues. Your conversation could be overheard by malicious parties.
Check and download Security reflex forms via the link at the bottom of the screen.
SORRY!
- If you have to work remotely on public transport, use a Privacy filter and avoid working on confidential documents. An ill-intentioned person could steal informations.
- Don’t discuss work-related matters in public transport (face-to-face or by phone), even with your colleagues. Your conversation could be overheard by malicious parties.
Check and download Security reflex forms via the link at the bottom of the screen.
WELL DONE!
- Don't write your password where everyone can see it
- When you leave your office, always remember to lock your session, even if you're away for 2 minutes!
- Don't hold your meetings in the middle of an open space, especially if you're discussing confidential subjects. Instead, use meeting rooms or phone cabins
- Keep your access badge with you all the time
- Use a security cable to keep your computer safe from thieves and keep the key with you all the time
Check and download Security reflex forms via the link at the bottom of the screen
- Don't write your password where everyone can see it
- When you leave your office, always remember to lock your session, even if you're away for 2 minutes!
- Don't hold your meetings in the middle of an open space, especially if you're discussing confidential subjects. Instead, use meeting rooms or phone cabins
- Keep your access badge with you all the time
- Use a security cable to keep your computer safe from thieves and keep the key with you all the time
Check and download Security reflex forms via the link at the bottom of the screen
Data Leak
Place the statements in the right column (good or bad practices)
0/12 positioning
I use a password safe (e.g. Keepass) to store my passwords
I share my production password with a colleague when I go on holiday, in case of emergency
I can only share confidential data with my family and friends
I only discuss confidential matters in appropriate places (meeting room, cabin phone, etc.)
If I really need to, I can declassify a document so that I can send it to personnal email
I use tools validated by the Group to store my data securely
I copy my manager whenever information is sent to the outside of the company, even if it is secure
I can store my architectural and technical files in clear text on my hard drive.
I immediately report the loss or theft of mobile media to my local Information Security Correspondent
I create an unencrypted file for my usernames and passwords, so that they can't be forgotten! I put it on Github with my source code
I only publish information on internal sites using the correct level of confidentiality classification
If I really need to, I can send work documents to my personal email address or to another external user without informing my manager.
Good practices
Bad practices
WELL DONE!
You have correctly positionned the statements!
Check and download the Security reflex forms via the link at the bottom of the screen.
Next step
CONGRATULATIONS!
You have passed all the tests and now have acquired the fundamentals to secure your company's confidential data!
Check and download the Security reflex forms via the links at the bottom of the screen.
Oops
you've left the full mode