A public LinkedIn profile says a great deal: full name, photo, job title, employer. That is exactly what an attacker needs to build a credible attack aimed at one specific person. The digital footprint journey is there to reduce that exposure.
1️⃣ Two tasks, two distinct goals
Your employees may receive two different tasks in their mission, and it helps not to confuse them.
👉 Add their LinkedIn profile
This task is about getting the profile link. It appears for an employee who has completed the digital footprint course, who is part of that course's audience, and who hasn't added a profile yet.
👉 Reduce their footprint
This task is about improving the privacy of an existing profile. It appears when the profile provided is still considered exposed.
👍 Good to know: an employee with no LinkedIn account can say so explicitly. That closes the first task without creating a profile — and the second task therefore never appears.
2️⃣ What Riot considers a good footprint
When an employee provides their profile URL, Riot analyses it and then assesses their level of exposure.
The criterion is strict: both the full name and the profile picture must be sufficiently protected. If either one remains visible, the profile is considered still exposed, and the reduction task may come back.
3️⃣ Why the task can look completed too quickly
⚠️ Important: the "reduce their footprint" task is marked as complete as soon as the employee requests a new analysis of their profile — not when the result of that analysis comes back. The analysis then runs in the background.
The consequence: the employee sees their task completed straight away, but if their profile is still exposed, the task may return in a later mission. This is the expected behaviour, and it is the question that will come up most often — "I already did this task last month".
4️⃣ What happens from one month to the next
Tasks are rebuilt with each new mission, based on the actual state of the profile:
if the footprint has become good, the reduction task doesn't come back;
if it is still weak, the task may reappear the following month.
👉 See Employee Side for how missions work in general.
5️⃣ The LinkedIn field in the portal
👍 Good to know: the LinkedIn profile field is always shown on your employees' records in the employee portal, whether or not the digital footprint course is part of your programme. Removing the course from the programme does not remove the field.
Key takeaways
Two distinct tasks: add the profile, then reduce the exposure.
The criterion is strict: full name and photo must both be protected.
The reduction task completes when the analysis is requested, not when it returns: it can therefore come back.
An employee with no LinkedIn account can declare it.
