{"language":"en_GB","topic":{"id":"p181081i15","strTitle":"Topic 3: Report it!","screens":[{"id":"p181081i15s01","strTitle":"If it's suspicious, report it!","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_10.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s01a01","layoutId":null,"arrStepData":[{"strTitle":"1","objImageSrc":{"strSrc":"95039\/95041\/p181081i15s01_01.png","strAltText":"Image of Microsoft Teams message from an Unknown User that reads "Good morning! Sorry we've not had a chance to meet properly yet. I need to have this submitted by EOD, and I've been told you're able to review today? You'd really be helping me out!". The message contains a link to an attachment labelled document.exe"},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s01sub01","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"2","objImageSrc":{"strSrc":"95039\/95041\/p181081i15s01_02.png","strAltText":"Image of smartphone screen with Unknown Caller notification"},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s01sub02","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"3","objImageSrc":{"strSrc":"95039\/95041\/p181081i15s01_03.png","strAltText":"Image of a multi-factor authentication approval notification"},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s01sub03","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"4","objImageSrc":{"strSrc":"95039\/95041\/p181081i15s01_04.png","strAltText":"Image of a WhatsApp message from known contact that reads "I'm at a conference and need an Amazon voucher to purchase a book urgently - could you email me a £100 voucher ASAP! Thanks!""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s01sub04","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"5","objImageSrc":{"strSrc":"95039\/95041\/p181081i15s01_05.png","strAltText":"Image of an email message reading 'Account verification, For security purposes, please visit https:\/\/tinyurl.com\/56amb6wr to verify your Microsoft Office account.'"},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s01sub05","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"6","objImageSrc":{"strSrc":"95039\/95041\/p181081i15s01_06.png","strAltText":"Image of a QR code "},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s01sub07","booAssetOwnedSubscreen":true},"strObjectType":"action"}]}],"active":1},{"id":"p181081i15s01a02","layoutId":null,"strContent":"If it's suspicious, report it!","strTextAlign":"centre-align","customTitle":false,"active":1},{"id":"p181081i15s01a03","layoutId":null,"strContent":"Let's see some examples of suspicious communications that should be reported to IT.","strTextAlign":"centre-align","active":1},{"id":"p181081i15s01a04","layoutId":null,"strContent":"Select the next slide button (the small arrow) to learn more.","strTextAlign":"centre-align","customTitle":false,"active":1},{"id":"p181081i15s01a05","layoutId":"p181081i15s01lay01","strContent":"Select the next button to continue.","strTextAlign":"centre-align","customTitle":false,"active":1},{"id":"p181081i15s01a06","layoutId":"p181081i15s01lay01","strContent":"Select the next slide button (the small arrow) to learn more.","strTextAlign":"centre-align","customTitle":false,"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p181081i15s01sub01","strTitle":"Message on Teams","assets":[{"id":"p181081i15s01sub01a01","layoutId":null,"strContent":"You receive a message on Teams from an external person you don't know, asking you to review an attached file.\n\n[b]Report it![\/b]","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s01sub02","strTitle":"Phone calls","assets":[{"id":"p181081i15s01sub02a01","layoutId":null,"strContent":"You receive a phone call from someone claiming to be from another institution, asking about a research project you're involved in. You think the call might have been from a journalist, as something doesn't feel right.\n\n[b]Report it![\/b]","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s01sub03","strTitle":"MFA requests","assets":[{"id":"p181081i15s01sub03a01","layoutId":null,"strContent":"You keep receiving MFA approval requests when you are not trying to log in. They're frustrating, and you wonder if you should just accept them to make them go away. No! These 'MFA fatigue' messages may enable a hacker to bypass MFA. These messages most probably indicate that someone has discovered\/hacked your password.\n\n[b]Report it![\/b]","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s01sub04","strTitle":"WhatsApp","assets":[{"id":"p181081i15s01sub04a02","layoutId":null,"strContent":"You receive a WhatsApp message from your Head of Department asking you to urgently email them a £100 Amazon voucher. They say they need it to pay for a book at a conference they are attending.\n\n[b]Report it![\/b]","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s01sub05","strTitle":"Email link","assets":[{"id":"p181081i15s01sub05a02","layoutId":null,"strContent":"You receive a suspicious email. This may include a link or aim to engage you in a conversation that could lead to you giving away sensitive information or inadvertently downloading malware.\n\n[b]Report it![\/b]","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s01sub07","strTitle":"QR code","assets":[{"id":"p181081i15s01sub07a02","layoutId":null,"strContent":"You've been sent an email by someone you don't know. It asks you to scan a QR code for the chance to win a prize.\n\n[b]Report[\/b][b] it![\/b]","strTextAlign":"left-align","customTitle":false,"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p181081i15s02","strTitle":"Welcome","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s02a01","layoutId":null,"strContent":"Report it!","strTextAlign":"left-align","active":1},{"id":"p181081i15s02a02","layoutId":null,"strContent":"In the words of the National Cyber Security Centre (NCSC), 'if you see something, say something'.\n \nIt's important to report any kind of suspicious activity, or at least seek advice and guidance when you have doubts or suspicions. By being proactive, you help minimise any damage that may also affect others.\n \nIn this topic, we will look at a potential issue that may need reporting as you give your colleague, Sanjay, your advice. Then, we'll explore some key things you need to know.\n \nThis topic will take approximately seven minutes to complete.","strTextAlign":"left-align","active":1},{"id":"p181081i15s02a03","layoutId":null,"strContent":"Select Start to continue.","strTextAlign":"left-align","active":1},{"id":"p181081i15s02a04","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i15s02a04.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s02a05","layoutId":"p181081i15s02lay01","objNormalSrc":{"strSrc":"95039\/95040\/ucisa_logo_retina.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s02a07","layoutId":"p181081i15s02lay01","strLabel":"Start","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p181081i15s03","strTitle":"Report?","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_04.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s03a01","layoutId":null,"arrOptions":[{"strOptionText":"IT are very busy with real threats, and this seems to be a minor issue.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s03sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"He's changed his password, so the issue is resolved.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s03sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"He's very busy and doesn't want to run the risk of IT locking his account while the issue is investigated.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s03sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"There is no valid reason for not reporting it ASAP.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s03sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"arrFirstIncorrectActions":[{"strActionType":"createSubScreenFromText","strActionGroup":"preprocess","subscreenUuid":"51de0613-a913-4318-816b-7b9438a992af","objParameters":{"strTextToCreateSubScreenID":"","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"active":1},{"id":"p181081i15s03a02","layoutId":null,"strContent":"Select your answer, then Confirm.","strTextAlign":"left-align","active":1},{"id":"p181081i15s03a03","layoutId":null,"strContent":"Sanjay has received several emails from people he doesn't know, some of which appear to be replies to messages he doesn't remember sending. He chooses not to report the issue to IT.","strTextAlign":"left-align","active":1},{"id":"p181081i15s03a04","layoutId":null,"strContent":"Report?","strTextAlign":"left-align","active":1},{"id":"p181081i15s03a05","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i15s03a05.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s03a06","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s03a09","layoutId":"p181081i15s03lay01","strContent":"Is there a valid reason for not reporting it?","strTextAlign":"left-align","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p181081i15s03sub01","strTitle":"Correct","assets":[{"id":"p181081i15s03sub01a01","layoutId":null,"strContent":"[b]That's right![\/b]\n\nThese messages could indicate a serious security issue if Sanjay's account has been compromised. The team need to investigate and make sure no further damage has been done.\n \nLet's explore why the other options were wrong:\n[list]\n[*]Whenever you see something suspicious, it should be reported to IT and investigated, [b]no matter how minor it seems[\/b]. This is part of IT's role, and they have time to undertake the investigation.\n[*]While Sanjay is right  to [b]change his password[\/b] someone could still have potentially gained access to Sanjay's account. IT should check the security of his account and his computer.\n[*]It's unlikely that the IT team would [b]disable Sanjay's account[\/b], unless there were a risk of much greater disruption from failing to do so.\n[\/list]\n","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s03sub01a03","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_correct_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s03sub01a04","layoutId":"p181081i15s03sub01lay01","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s03sub02","strTitle":"Incorrect 1","assets":[{"id":"p181081i15s03sub02a01","layoutId":null,"strContent":"[b]That's not quite right...[\/b]\n\nThese messages could indicate a serious security issue if Sanjay's account has been compromised. Whenever you see something suspicious, it should be reported to IT and investigated, [b]no matter how minor it seems[\/b]. This is part of IT's role, and they have time to undertake the investigation.","strTextAlign":"left-align","active":1},{"id":"p181081i15s03sub02a03","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s03sub02a04","layoutId":"p181081i15s03sub02lay01","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s03sub03","strTitle":"Incorrect 2","assets":[{"id":"p181081i15s03sub03a01","layoutId":"p181081i15s03sub03lay00","objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s03sub03a02","layoutId":"p181081i15s03sub03lay00","strContent":"[b]That's not quite right... [\/b]\n \nWhile Sanjay is right  to [b]change his passwords[\/b], someone could still have potentially gained access to Sanjay's account. IT should check the security of his account and his computer.","strTextAlign":"left-align","active":1},{"id":"p181081i15s03sub03a04","layoutId":"p181081i15s03sub03lay00","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s03sub04","strTitle":"Incorrect 3","assets":[{"id":"p181081i15s03sub04a01","layoutId":"p181081i15s03sub04lay00","objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s03sub04a02","layoutId":"p181081i15s03sub04lay00","strContent":"It's unlikely that the  IT team would [b]disable Sanjay's account[\/b], unless there were a risk of much greater disruption from failing to do so. ","strTextAlign":"left-align","active":1},{"id":"p181081i15s03sub04a04","layoutId":"p181081i15s03sub04lay00","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p181081i15s05","strTitle":"Key takeaways","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s05a01","layoutId":null,"strContent":"Key takeaways","strTextAlign":"left-align","active":1},{"id":"p181081i15s05a02","layoutId":null,"strContent":"Let's examine the key takeaways from this topic.\n[list]\n[*]Someone has to be first to report something, and sometimes messages can bypass the security controls put in place by IT. It is much better for IT to receive multiple reports than none at all!\n[*]Don't hesitate to ask for guidance or support when something feels suspicious, unexpected or unusual. Contact IT straight away if you are at all worried.\n[*]You may be able to report phishing within your email software; doing this helps to educate the email filter and, in turn, reduces the impact on others.\n[*]If you think your account has been accessed by someone else, reset your password and MFA (if used) and [b]report it![\/b]\n[\/list]\n","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s05a03","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s05a04","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95041\/p181081i15s05a04.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p181081i15s06","strTitle":"Knowledge check","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_05.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s06a01","layoutId":null,"strContent":"Which of the following statements about reporting are correct?","strTextAlign":"centre-align","active":1},{"id":"p181081i15s06a02","layoutId":null,"arrOptions":[{"strOptionText":"If you think your account has been accessed by someone else, reset your password and report it."},{"strOptionText":"Only report major issues to IT; reporting everything will distract them from important matters."},{"strOptionText":"If an issue is affecting you, it may be affecting other people as well."},{"strOptionText":"Bringing issues to the attention of your manager and colleagues helps to minimise any risks and\/or damage."}],"arrCorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s06sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFinalIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s06sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFirstIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p181081i15s06sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"active":1},{"id":"p181081i15s06a03","layoutId":null,"strContent":"Select all the correct answers, then Confirm.","strTextAlign":"centre-align","active":1},{"id":"p181081i15s06a04","layoutId":null,"strContent":"Knowledge check","strTextAlign":"centre-align","active":1},{"id":"p181081i15s06a05","layoutId":null,"strContent":"Select the next button to continue.","strTextAlign":"centre-align","customTitle":false,"active":1},{"id":"p181081i15s06a06","layoutId":"p181081i15s06lay02","objNormalSrc":{"strSrc":"95039\/95041\/knowledge_check.png","strAltText":""},"strImageAlignment":"center","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p181081i15s06sub01","strTitle":"Correct","assets":[{"id":"p181081i15s06sub01a01","layoutId":null,"strContent":"[b]That's right!\n [\/b]\nThe correct statements are...\n[list]\n[*]If you think your account has been accessed by someone else, reset your password and report it.\n[*]If an issue is affecting you, it may be affecting other people as well.\n[*]Bringing issues to the attention of your manager and colleagues helps to minimise any risks and\/or damage.\n[\/list]\nWhenever you see something suspicious, it should be reported to IT and investigated, [b]no matter how minor it seems[\/b]. This is part of IT's role, and they have the expertise and systems to undertake the investigation.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s06sub01a03","layoutId":null,"objNormalSrc":{"strSrc":"95039\/95040\/feed_correct_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s06sub01a04","layoutId":"p181081i15s06sub01lay01","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s06sub03","strTitle":"Well done!","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s06sub03a01","layoutId":"p181081i15s06sub03lay00","strContent":"​Well done!","strTextAlign":"left-align","active":1},{"id":"p181081i15s06sub03a02","layoutId":"p181081i15s06sub03lay00","strContent":"Congratulations, you have now completed this topic. Please feel free to revisit any part of this topic before you go.","strTextAlign":"left-align","active":1},{"id":"p181081i15s06sub03a04","layoutId":"p181081i15s06sub03lay00","objNormalSrc":{"strSrc":"95039\/95041\/topic_complete_sub.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s06sub03a05","layoutId":"p181081i15s06sub03lay00","strLabel":"Continue","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1},{"id":"p181081i15s06sub03a06","layoutId":"p181081i15s06sub03lay00","minutesLabel":"","secondsLabel":"","alignment":"centre-alignC","active":1},{"id":"p181081i15s06sub03a07","layoutId":"p181081i15s06sub03lay00","minutesLabel":"","secondsLabel":"","alignment":"centre-alignC","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p181081i15s06sub04","strTitle":"Incorrect","assets":[{"id":"p181081i15s06sub04a01","layoutId":"p181081i15s06sub04lay00","objNormalSrc":{"strSrc":"95039\/95040\/feed_incorrect_icon.png","strAltText":""},"strImageAlignment":"left","active":1},{"id":"p181081i15s06sub04a02","layoutId":"p181081i15s06sub04lay00","strContent":"[b]That's not quite right...\n [\/b]\nThe correct statements are...\n[list]\n[*]If you think your account has been accessed by someone else, reset your password and report it.\n[*]If an issue is affecting you, it may be affecting other people as well.\n[*]Bringing issues to the attention of your manager and colleagues helps to minimise any risks and\/or damage.\n[\/list]\nWhenever you see something suspicious, it should be reported to IT and investigated, no matter how minor it seems. This is part of IT's role, and they have the expertise and systems to undertake the investigation.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s06sub04a03","layoutId":"p181081i15s06sub04lay00","strLabel":"Try again","strAlignment":"left-align","objIconImageFilename":{"strSrc":""},"active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p181081i15s07","strTitle":"What good does reporting do?","objNormalBackgroundSrc":{"strSrc":"95039\/95040\/generic_bg_03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p181081i15s07a01","layoutId":"p181081i15s07lay01","strContent":"What good does reporting do?","strTextAlign":"left-align","active":1},{"id":"p181081i15s07a02","layoutId":"p181081i15s07lay01","strContent":"It's always best to report an issue. IT can resolve issues, but only when they know they are occurring!\n \nAdditionally, IT have the big picture. You may think an issue is small and just affecting you, but if it's affecting multiple people then there may be a significant impact to the institution.\n \nBy bringing issues to the attention of your manager, colleagues, and your IT team, you are helping to minimise any damage that may otherwise affect others.","strTextAlign":"left-align","active":1},{"id":"p181081i15s07a03","layoutId":"p181081i15s07lay01","strContent":"Select the next button to answer the question again.","strTextAlign":"left-align","customTitle":false,"active":1},{"id":"p181081i15s07a04","layoutId":"p181081i15s07lay01","objNormalSrc":{"strSrc":"95039\/95041\/p181081i15s07.png","strAltText":""},"strImageAlignment":"left","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1}],"active":true}}