LessonsUse cases
Compliance & security
Explain company rules, protect data and spot threats like phishing through situations people actually face.
Nobody remembers a policy document or a list of phishing signs. People remember what to do when a supplier offers a gift, a colleague asks for customer data or an email asks for their password.
Teaching approach: Practise decisions. Each rule comes through a real situation: learners decide first, then learn what the rule says and why it exists.
What the lesson looks like
| # | Card | What to write |
|---|---|---|
| 1 | Card — A real situation | E.g. a supplier offers a gift, or an unexpected email asks for a password. |
| 2 | Quiz — What do you do? | Three options; each comment tells the consequence. |
| 3 | Card — What the rule says | The rule in plain language, and why it exists. |
| 4 | Quiz — Is this email phishing? | Describe a realistic email (or add a screenshot); the explanation points out the signs. |
| 5 | Card — How to protect yourself and the company | The warning signs and the few rules that matter most. |
| 6 | Quiz — Another situation | Consequences per option. |
| 7 | Card — Where to get help | Who to ask, how to report a concern or a mistake. |
| 8 | Checklist — Remember | The rule in one sentence, when to ask, how to report. |
Tips
- Start from the grey areas people really ask about, not from the paragraph numbers.
- For phishing, screenshots of real emails your company received (with details removed) work best. Mix in genuine ones so learners don't just answer "phishing" every time.
- Always say what to do after a mistake and who to report to. People who fear blame don't report.
- Attach the policy when you plan with AI — it builds the lesson only on what the policy says.
- Set a pass score and a deadline if you need proof that everyone completed it.