Every October, security teams are expected to make awareness relevant, get employees involved and show what came from it. The deadline is fixed, while most teams are already busy with day-to-day security work.

The SoSafe ECSM 2026 Kit gives you a complete 4-week campaign without asking your team to build it from scratch.

Each week, employees inspect a realistic workplace request and decide what they would do. They uncover the red flag, receive immediate feedback and collect a Red Flag Card. The experience is quick to complete, but it asks employees to make the kinds of decisions that matter when a real request lands.

The campaign covers phishing, voice scams, Shadow AI and deepfakes. Each topic comes with a Scene Inspector challenge, ready-to-send employee communications and a 5-minute podcast. Everything is organised by week in 1 campaign hub.

You will not need to write the campaign, build the activities or piece the month together yourself. Open the hub, follow the plan and launch.

WHAT’S INSIDE:

4 weeks of hands-on practice

• Week 1: Phishing
  The Risky Ask asks employees to inspect a polished email or Teams message and spot what makes the request unsafe.
• Week 2: Voice scams
  The Urgent Request puts employees into a realistic call scenario and asks what needs to be verified before anyone acts.
• Week 3: Shadow AI
  The Sensitive Prompt presents an everyday AI workflow and asks employees what information is safe to share.
• Week 4: Deepfakes
  The Fake Proof asks employees to assess a video or voice message from a leader and decide whether the request can be trusted.

The kit includes ready-to-send Slack and Teams posts, a campaign planner, and an executive kickoff email.

You also receive posters, Red Flag Cards, a certificate template, weekly 5-minute podcasts, and a recap template.

For security leaders

You get a campaign with enough substance to put your name behind and a clear view of participation at the end.

It also gives you a credible way to continue the conversation after October, when a successful campaign can become the starting point for year-round Human Risk Management.

For the team running it

The content is written, the activities are built and the weekly plan is already mapped out.

Your team shares the prepared message and sends employees to the weekly challenge. The campaign keeps moving without becoming someone’s full-time job for the month.

October already has a deadline. Your campaign is ready.

Get access to the SoSafe ECSM 2026 Kit and launch the full campaign from one place.