Social Engineering Scenario Cards
Write fictional scenarios for discussion, defensively framed.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Create twelve scenario cards for a security awareness workshop at [ORGANISATION_TYPE]. Roles in the room: [ROLES]. Business processes that could be targeted (payments, password resets, visitor access, remote support): [PROCESSES].
Each card should have a title, a short fictional situation of 60 to 90 words that happens to one role, a question ("What would you do?"), the safe response in two sentences, and the warning sign that should have raised suspicion. Cover phone calls, urgent executive requests, fake support, tailgating at a door, USB devices left around, and social media oversharing. Use invented names and companies. Do not write scripts that would help someone carry out a deception; keep the focus on recognition and response. Add a facilitator note on how to run the cards in 20 minutes and a verification procedure that the organisation can adopt, such as calling back on a known number.
Defensive guidance only, with no step-by-step attack methods. Mark anything that depends on my environment as [VERIFY] before I act on it.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.