All use cases

The colleague who shared the credentials

Compliance and security awareness

Everyone passes the annual security quiz. The failure is never the quiz. It is the moment a team lead asks you to share a login, and you have to say no to them, out loud.

You

You are the IT security lead. A team lead has been sharing a VPN login with their team to get around multi factor authentication.

The AI plays

Sara

Team lead, under delivery pressure

Is not careless. Is behind on a deadline, believes the policy is the obstacle, and will say so.

“The extra login step was costing us twenty minutes a day. I made a call.”

Sara opens.

An example scenario. Yours are written from your own playbooks, policies and calls.

A scenario being set up for a policy conversation, showing your role and the character the AI will play.

Pick the situation your policy keeps losing to, then rehearse it.

How the session goes

Sara is not careless, which is what makes this hard. Quote the policy and the pushback sharpens, because the policy is exactly what Sara worked around. Only an answer to the deadline pressure gets a commitment, and how far the shortcut has spread comes out mid conversation.

  1. 01

    Justifies the shortcut with a real business reason

  2. 02

    Pushes back when the policy is quoted at them

  3. 03

    Reveals how far the shortcut has already spread

  4. 04

    Commits to a fix, or negotiates one

What the report gives the manager

The report quotes where the security lead held the line or gave ground, scores Clarity, Reasoning, Technique application and Adaptability, and tells the security team whether the policy survives contact with a deadline.

ClarityReasoningTechnique applicationAdaptability
Words
Whether the point landed, or only got said
Voice
Whether they sounded steady, or sounded rattled
Face
Whether they stayed present, or checked out early
Body
Whether they held the room, or shrank from it

Built from your own material

  • Your information security policy

  • Your acceptable use and remote working rules

  • The incidents your security team keeps seeing

The five dials every scenario carries

  • Resistance

  • Emotional depth

  • Complexity

  • Resolution pace

  • Insight generation

Who runs it

  • Information security teams

  • IT and infrastructure

  • Compliance and risk

  • Whole company rollouts

Paired with drills, not slides

Knowing the rule and being willing to enforce it are different problems. Alongside the conversation, your policy becomes quick drills your team can run in a couple of minutes, including a phishing test that arrives as a real email in a real inbox.

Your policy gets enforced at the moment it is being broken, by somebody who has practised saying so.

Built with Pricer, whose modules cover phishing, password policy and remote working.

Bring us your version of this conversation

We write the character on the other side of it, then walk you through a real scored session.

Book a demo

Teams that start here often add

Internal comms, and the end of the intranetManagers and difficult conversations