{{ nalediFaceSm }}
Khusela
{{ streakFlame }}12
{{ n.label }}
{{ nalediFaceSm }}
Khusela
SECURITY ACADEMY
{{ n.label }}
ANALYST → SENTINEL
{{ levelToGo }} XP TO GO
{{ pageTitle }}
Fri 17 Jul · {{ xpLabel }} XP
{{ themeIcon }}
{{ xpBolt }}{{ xpLabel }}
{{ streakFlame }}12
Streak
{{ streakFlame }}
12 days
Total XP
{{ xpBolt }}
{{ xpLabel }}
{{ xpDelta }}
Dept rank
#3 of 14
▲ 2 this week
Certification
{{ certPct }}%
Programme
01
Social Engineering
Maya, Mark & Carlos · {{ lessonsLabel }}
{{ resumeShort }}
02
Authentication & Identity
Passphrases, MFA & push-bombing · 40–50 min
{{ mod2Tag }}
03
Data Protection & POPIA
Eight conditions, special data & the DIO · 50–60 min
{{ mod3Tag }}
Finance Leaderboard
July
{{ p.rank }}
{{ p.init }}
{{ p.name }}
{{ p.pts }}
Recent Badges
{{ badgePhish }}
Phish Spotter
{{ badgeResp }}
First Responder
{{ badgeSent }}
Sentinel
▶ PROGRAMME FILM
New here? Watch “Our Shared Defense” — the 2-minute launch film. Empowered. Aware. Resilient.
New here? Watch “Our Shared Defense” — the 2-minute launch film. Empowered. Aware. Resilient.
Seven modules to certification. Each one is an interactive story — real scenarios, real decisions, no slideware.
{{ m.num }}
{{ m.title }}
{{ m.meta }}
{{ m.tag }}
{{ m.desc }}
Badges earned
{{ badgeCount }} of 12
Current level
Analyst
Next level
Sentinel · {{ levelToGo }} XP
{{ b.art }}
{{ b.name }}
{{ b.how }}
{{ b.tag }}
Department standings · July
1. IT
24,830 pts
2. Finance
23,110 pts · yours
3. Operations
21,540 pts
4. Facilities
19,020 pts
{{ nalediFaceLg }}
Clyde Phillips
Finance Administrator · Johannesburg
JOINED MAR 2026 · LEVEL: ANALYST
{{ xpLabel }}
TOTAL XP
Level track
{{ l.name }}
{{ l.xp }}
Recent activity
{{ a.text }}{{ a.when }}
Literacy Certificate
{{ certPct }}%
{{ certNote }}
Requirements
{{ r.mark }}{{ r.text }}
▶
VIDEO PLACEHOLDER · 2:00
Our Shared Defense
Programme launch film · Empowered. Aware. Resilient.
Storyboard
{{ s.scene }}
{{ s.timing }}
{{ s.visual }}
{{ s.narr }}
NARRATOR SCRIPT — WARM, AUTHORITATIVE
{{ narratorScript }}
All staff complete the seven core modules. Four specialist tracks add deeper, role-specific content on top.
{{ t.name }}
{{ t.who }}
{{ t.focus }}
Quick reference — the one rule per module
{{ q.mod }}
{{ q.rule }}
When in doubt
{{ w.q }}
{{ w.a }}
Pick an adversary persona. The bot uses adaptive pressure — if you hesitate, it escalates, just like a real attacker. Read the exchange, then see how to respond.
{{ p.name }}
{{ p.attack }}
{{ chatInit }}
{{ chatName }}
{{ chatChannel }}
{{ chatAttack }}
{{ m.tag }}
{{ m.text }}
HOW TO RESPOND
{{ chatGuide }}
✕
{{ themeIcon }}
{{ rStepLabel }}
{{ xpBolt }}{{ xpLabel }}
MODULE {{ rNum }} · {{ rDur }}
{{ rTitle }}
{{ rRefs }}
LEARNING OBJECTIVES
{{ rObj }}
▶
{{ b.mediaLabel }} PLACEHOLDER
{{ b.cap }}
{{ b.h }}
{{ b.x }}
{{ b.ti }}
{{ r.c0 }}
{{ c.v }}
{{ b.ti }}
{{ b.x }}
{{ b.ti }}
{{ b.x }}
{{ rScenario.face }}
INTERACTIVE SCENARIO
{{ rScenario.name }} · {{ rScenario.role }}
{{ rScenario.quote }}
{{ rScenario.sit }}
{{ rScenario.hook }}
{{ rScenario.q }}
{{ c.letter }}
{{ c.l }}
{{ rScenario.outTag }}
{{ rScenario.outcome }}
▶
NEAR MISS · 90-SECOND LESSON
Watch what went wrong, then continue.
VIDEO PLACEHOLDER
{{ rScenario.outcome }}
{{ rCheck.ti }}
{{ i.mark }}
{{ i.text }}
KNOWLEDGE CHECK
{{ quizCount }} questions · {{ passMark }}% to pass
{{ q.n }}. {{ q.q }}
{{ o.mark }}
{{ o.text }}
{{ q.fbTag }}. {{ q.coach }}
{{ quizPct }}%
{{ quizScore }} of {{ quizCount }} correct.
Retry
{{ modBadge }}
Module {{ rNum }} complete!
You passed the knowledge check for {{ rTitle }}. +150 XP banked toward your certification.
Back to modules
Back
{{ rNextLabel }}
✕
{{ themeIcon }}
{{ stepLabel }}
{{ xpBolt }}{{ xpLabel }}
+{{ t.amt }} XP
Module 01 · 45 min · 12 lessons
The reality of risk & social engineering
Attackers don't hack systems first — they hack people. Over the next 45 minutes you'll follow three colleagues through one very bad Tuesday, and learn to see what they almost missed.
Learning objectives
Identify social engineering vectors · Recognise phishing, vishing & tailgating · Apply Pause–Verify–Report · Understand SMS OTP risk · Know your reporting path
Start module
{{ c.face }}
{{ c.name }}
{{ c.role }}
Your cast for this module
Context
Why attackers target people
98%
of cyberattacks rely on social engineering somewhere in the chain.
R2.2bn
lost to cybercrime in South Africa every year — much of it starting with one email.
60s
median time before someone clicks a phishing link in a company-wide campaign.
Firewalls don't answer phones. Antivirus doesn't hold doors open. You are the control — and attackers know it. Next you'll meet Maya, a Finance Administrator who receives what looks like a routine email. Can you spot the warning signs before it's too late?
Meet Maya
{{ mayaFaceLg }}
Maya
Finance Administrator
"Month-end. Forty-one unread emails and it's not even 9am."
Scenario · Tuesday 08:47
Maya's morning
It's month-end close. Maya is clearing her inbox between meetings when a supplier invoice lands — flagged URGENT, overdue, and threatening service disruption.
The supplier is real. The amount looks plausible. The pressure is on.
Your job: open the email and find all six red flags before Maya's deadline instincts take over.
The supplier is real. The amount looks plausible. The pressure is on.
Your job: open the email and find all six red flags before Maya's deadline instincts take over.
Open the email
Hotspot investigation
Click everything suspicious
{{ flagsFound }} / 6 FOUND
Red flag log
{{ fl.mark }}
{{ fl.text }}
All six found · +120 XP
Continue
✓
Near miss
Maya makes the right call
Deadline pressure said pay it. Training said pause. Maya phoned the supplier on the number saved in the vendor system — not the one in the email — and confirmed: no invoice, no banking migration. She reported it to security in under a minute.
PAUSE
Urgency is the weapon. Slowing down disarms it.
VERIFY
Use a channel you trust — never the one the message gave you.
REPORT
Your report protects everyone who got the same email.
Quick check
Knowledge check
Which of these are red flags?
Select all that apply, then check your answers.
{{ o.mark }}
{{ o.text }}
{{ o.tag }}
{{ kcFeedback }}
Check answers
Continue
{{ markFaceLg }}
Mark
IT Support
"Head Office? On a Tuesday afternoon? Sure, put them through…"
Scenario · Tuesday 14:12
A call from "IT Support"
Mark's desk phone rings. The caller knows his name, his manager's name, and this morning's system outage. He says he's from the head-office security team, resolving the incident — but he needs Mark to read back the one-time PIN that's about to arrive by SMS.
The SMS arrives. The caller waits. It all sounds so reasonable.
The SMS arrives. The caller waits. It all sounds so reasonable.
Mark must decide
Branching decision
What should Mark do?
Choose for him. There's no undo — just like real life.
OPTION A
Read the OTP to verify identity
He's from head office, he knows about the outage — and Mark wants this ticket closed.
OPTION B
Refuse — no one legitimate ever asks for this
Hang up, call the real IT security line, and report the contact.
{{ brFbTag }}
{{ brFbText }}
Continue
{{ carlosFaceLg }}
Carlos
Facilities
"Boxes, hi-vis vest, big smile. But no badge."
Scenario · Tuesday 16:30
Carlos notices something off
At the loading entrance, a courier laden with boxes catches the secure door as it closes behind Carlos. Vest, clipboard, confidence — everything except a visitor badge.
Social engineering isn't only digital. Tailgating trades on politeness: nobody wants to shut a door in someone's face.
Carlos smiles back — and redirects him to reception, then radios security to log the attempt. Friendly, firm, thirty seconds.
Social engineering isn't only digital. Tailgating trades on politeness: nobody wants to shut a door in someone's face.
Carlos smiles back — and redirects him to reception, then radios security to log the attempt. Friendly, firm, thirty seconds.
The rule: every person past a secure door badges in themselves. Holding the door isn't rude to refuse — it's the protocol.
Continue
Rank & sort
Authentication methods under pressure
Tap a method, then tap a slot — rank from most to least secure.
Methods
{{ d.label }}
Most secure → least
{{ s.rank }}
{{ s.label }}
{{ s.mark }}
{{ dndFeedback }}
Reset
Check answers
Continue
Deep dive
SMS OTP: the risk you didn't know about
That six-digit code feels like a fortress. It isn't. SMS codes can be intercepted through SIM-swap fraud — rampant in South Africa — and, as Mark nearly learned, the easiest interception of all is simply asking you to read it out.
WEAKER
SMS OTP · Email codes · Security questions — anything that travels to you can be redirected or extracted.
STRONGER
Authenticator apps · Hardware keys — codes that never leave your device can't be read out to an attacker.
One rule to keep: an OTP is a password with a 60-second lifespan. Nobody legitimate — not IT, not your bank, not head office — will ever ask you to say it aloud.
Continue
The protocol
Pause. Verify. Report.
One protocol covered Maya's email, Mark's phone call and Carlos's door. It covers everything you'll meet too.
1
Pause
Urgency, authority, fear, flattery — pressure is the tell. When you feel rushed, that's the moment to stop.
2
Verify
Independently. A saved number, the official portal, walking to a desk — never the channel the request arrived on.
3
Report
security@madibe.co.za or the Report button in Outlook. Reporting a false alarm costs nothing; silence costs plenty.
Start the assessment
Assessment · Social Engineering
{{ aQText }}
Q{{ aNum }} / 5
{{ o.mark }}
{{ o.text }}
{{ aFbTag }} {{ aCoach }}
{{ aNextLabel }}
Assessment complete
{{ scorePct }}%
{{ scoreLabel }}
{{ resultHeadline }}
{{ resultSub }}
Question review
{{ r.mark }}
{{ r.q }}
{{ r.coach }}
Retake
Claim your badge
Badge unlocked
{{ sentinelBadgeLg }}
Social Engineering Sentinel
Six red flags found, one vishing call refused, one tailgater turned away. Maya, Mark and Carlos are safer with you on the floor.
+{{ moduleXp }} XP THIS MODULE
CERTIFICATION +14%
Finish module
{{ mascotArt }}
Module 1 complete!
You've finished Social Engineering — the human attack surface. Six more modules are unlocked: Authentication, POPIA, Remote Work and more. Keep the momentum going.
{{ scorePct }}%
ASSESSMENT
+{{ moduleXp }}
XP EARNED
1 / 7
MODULES DONE
Back to dashboard
Module library