Most security awareness training is built to be completed, not remembered. People sit through it, tick the box, and by Friday it’s gone — not because they don’t care, but because nothing actually happened to them.

Hack Attack: Defense puts something in front of them instead. A Ransomware card lands, Tech cards come off the table, and there’s a reaction in the room. The reaction isn’t the training. The conversation immediately after it is — and this bundle is built to help you run that conversation.

If you already own the game, or you’re ordering copies separately, this is the other half: what your facilitator needs to turn a card game into a session you can put on the calendar and account for afterward.

What’s included

Facilitator’s Guide — PDF

• A timed 75-minute agenda you can run as written or trim
• The rules in 60 seconds, plus the questions players actually ask and how to answer them
• Attack resolution by player count — how many defenses the table needs at 2, 3–4, and 5–6 players
• Debrief notes for all six defense categories — Backups, Device Security, Home Network, Passwords, Social Engineering, Social Media — plus the Reality Check close
• Notes on each of the eight attack cards and eight user error cards, grounded in how those attacks actually work outside the game
• A fill-in framework for connecting each scenario to your own systems, policies, and current threat picture
• The One Thing close — everyone leaves with one named commitment for the next 48 hours
• Compliance mapping to NIST CSF 2.0, ISO 27001:2022, SOC 2 Type II, PCI DSS v4.0, and HIPAA
• Print-ready completion certificates and an attendance log

Facilitator slide deck

Participant-facing slides for the whole session — agenda, how to play, one slide per card, and the close. Your facilitator runs the room instead of running on memory.

Who can run it

Anyone. The Quick Start page gets a first-time facilitator ready in about five minutes. Security awareness managers use it as a program session; L&D and HR teams use it as the activity that finally produces conversation; a team lead with no security background on staff can run it for their own people. If you are the security expert, it’s the version of the talk that lands with colleagues who tune out the usual one.

What you’ll need

A copy of Hack Attack: Defense for every 2–6 players. If you don’t have one yet, the Full Bundle includes a copy, or you can buy the game on its own.

What this license covers

One facilitator, one organization. Run as many sessions as you like with your own teams, and print what you need for them.

It doesn’t cover reselling these materials, sharing them outside your organization, or using them to deliver paid training to other companies. If you want to run this across multiple sites, certify several facilitators, or use it with your own clients, that’s a different license — email lee@curiousandsecure.com and we’ll sort it out.