Workshop day

What the day looks like

A full-day social engineering resilience workshop follows a steady rhythm: map your channels, rehearse under pressure, then agree escalation paths everyone can repeat.

Workshop participants engaged in a paired drill during a social engineering resilience session

  1. 09:00 — Open and context

    The sponsor frames why the day exists. Facilitators confirm ground rules: curiosity over blame, no recording of personal mistakes, scenarios stay in the room.

  2. 09:30 — Channel mapping

    Groups list the channels that actually move money and access: email, WhatsApp, landline, visitor desk, courier notes. Surprises surface here — often an informal chat group nobody put on the risk register.

  3. 10:30 — Recognition drills

    Short scenarios land in pairs. Participants mark urgency cues, authority cues, and missing verification steps before discussing as a table.

  4. 12:30 — Break

    Lunch stays light. We avoid packing slides into the break; people need air before the afternoon refusal practice.

  5. 13:15 — Refusal and escalation

    Teams rehearse spoken refusals and write a one-page escalation map: who to call, what to document, which requests never get approved alone.

  6. 15:15 — Sponsor close

    Leaders restate the expectations they will support after the facilitators leave. Cue cards are distributed. A written debrief follows within five business days.

Related formats

If a full day is too long, start with a half-day briefing. Leaders who need decision practice can book a tabletop session.

Full-day workshop details Reserve a conversation