Skip to content

Security check-ins

Your organization may send you a short weekly security check-in. It is a handful of questions, at most five, and takes about two minutes.

Check-ins find out what you already know, so you can skip training you don’t need and get training only where it helps. There is no pass or fail. Over about four weeks they build a picture of what you know. After that, a short check-in about once a month keeps it up to date.

Questions that test what you know have an I’m not sure option, and questions about your role have a Not sure answer. Please use them instead of guessing: it gives a more useful result, and you’ll see the right answer straight away. Questions adapt to your answers, so you won’t be asked about things you have already shown you know.

Your answers decide which training you can skip. At the end of your first set of check-ins you see a short, friendly summary of your strengths and of the topics where a short refresher would help. It has no scores and no ranking against colleagues. If a refresher is useful, a short course may be assigned to you. You get one email that lists everything assigned to you, with the due dates.

Some questions are about your role or habits, for example whether you use a password manager. These are only used to pick relevant content and to show group trends.

  • Slack: a direct message from the app with a Start button. If the timing doesn’t suit you, press Snooze 1 day. If you’ve muted the RansomLeak Slack app, you won’t receive check-ins.
  • Email: if we can’t reach you in Slack, you get a weekly email. Select Start check-in, then confirm with Continue as … (your name). The link signs you in once and works for 7 days; open it again later and it shows a sign-in button instead. It is meant for you, so don’t forward it. If you’re a manager or administrator, or you sign in with MFA or SSO, the link takes you to the normal sign-in page first.

Your colleagues never see your results. Your organization sees combined results for groups, and only people with the right permission can see individual results. Check-ins are not a performance review.