📚 Second-to-last step of Your Riot activation journey.
💡 Prerequisites:
having completed the setup of your workspace (steps 1 to 6).
having activated your modules (steps 7 to 10).
Your modules are ready. Before activating Cyber Missions, take the time to introduce Riot to your employees. A well-announced launch makes all the difference: your employees know what to expect, recognise Riot's messages, and understand why they are being asked to take part. This article helps you prepare this announcement.
❶ Why introduce Riot before the launch?
So that Riot's messages are recognised. Your employees are going to receive messages from Albert, Riot's assistant, on their messaging app or by email. Without prior notice, some might be wary of them, or even mistake them for phishing.
To give the initiative meaning. An employee who understands why the company is launching Riot takes part more than one who discovers it through a notification.
So that they know who to turn to. It is the opportunity to introduce your Cyber team (step 3) and how to contact it.
❷ What your employees need to know
Your announcement doesn't need to be long. It should answer a few simple questions.
👉 What will change for them?
At the start of each month, every employee receives their Cyber Mission: a list of tasks to complete before the due date, usually the end of the month. Depending on your modules, a mission can contain awareness courses and a quiz, a check of their file sharing, or reading a data leak alert (set up at step 5).
👉 How will they be notified?
Through a message from Albert, on the channel you chose at step 4 (email, Slack, Teams or Google Chat), and in their language. They can also find their missions on their portal: app.tryriot.com.
👉 What will motivate them?
Each completed mission increases their engagement score, the Aura, which never goes down. Completing missions month after month builds a streak, and badges reward regularity. If you have enabled the competition (step 5), they are also part of a squad that competes with the others every month. After a year of the programme, they receive a certificate.
👉 Depending on your modules, what else do they need to know?
Simulation: phishing, smishing and/or vishing exercises will take place. The goal is to learn: an employee who falls for one discovers that it was an exercise and receives a few tips (if you have enabled the short training, step 7).
Inbox: a button in their email lets them report a suspicious email in one click. That is the right reflex to adopt.
Slash: some emails will display an alert banner, with a short explanation of the risk and three actions: report the email, trust the sender, or find out more by asking Albert.
Sonar: their missions may ask them to check some of their file sharing.
💡 Our recommendation: announce that simulations will take place, but without giving their dates or content. The goal is for your employees to stay alert at all times, just as they would with a real attack.
❸ Prepare your announcement
👉 Step 1: Choose who delivers the message
An announcement signed by management or by the head of security carries more weight than an anonymous message. Ideally, choose the same person on whose behalf Albert introduces himself to employees, set at step 5: your employees will immediately make the connection.
👉 Step 2: Choose the timing
Announce Riot a few days before activating Cyber Missions. A new mission is generated on the 1st of each month: an announcement in the last week of the previous month gives everyone time to read it, without the message being forgotten by launch time.
👉 Step 3: Choose your channels
Use the channels your employees actually read: an all-staff email, a message on your company messaging app, your intranet, a team meeting or an all-hands meeting. Combining a written message and a spoken presentation is the most effective.
👉 Step 4: Tell the relays first
Managers: if you have enabled alerts to managers (step 5), they will receive messages about the members of their team who haven't finished their mission. Tell them before everyone else: they can also pass on the announcement.
Your IT support: this is who employees will turn to when they wonder whether a message from Albert is legitimate.
Your Cyber team: it will be named in the announcement as the contact.
👍 Good to know: to illustrate your announcement, send yourself a test course (step 8, part ❺): you will see exactly what your employees will receive, and can take a screenshot of it.
❹ A message template to adapt
Copy this template, replace the items in square brackets, and delete the lines for modules that aren't part of your plan.
Subject: Riot, our cybersecurity programme, starts on [date]
Hello everyone,
Most cyberattacks start with a simple email. To help us adopt the right reflexes, we are launching Riot from [date].
In practice:
Every month, you will receive your Cyber Mission [by email / on Slack / on Teams / on Google Chat]: a few tasks to complete before the end of the month.
Albert, Riot's assistant, will announce it to you. His messages are legitimate: you can open them with complete confidence.
[Simulation] [Phishing/smishing/vishing] exercises will take place regularly. If you get caught out, no need to worry: they are designed to help you learn.
[Inbox] Does an email look suspicious? Report it with the Riot button in your email.
[Slash] Some emails will display an alert banner: read it before clicking.
[Sonar] Your mission may also ask you to check some of your file sharing. These checks protect the company's data.
You will find your missions on your personal portal at app.tryriot.com.
Any questions? Our Cyber team, [team name], can be reached at [address or link].
Thank you all for taking part,
[First name Last name, job title]
👉 Short version, for your company messaging app
📣 From [date], we are launching Riot, our cybersecurity programme. Every month, Albert will send you your Cyber Mission here: a few tasks to do before the end of the month. His messages are legitimate! Any questions? Contact [Cyber team, contact].
👍 Good to know: if your teams work in several languages, translate your announcement. Albert's messages, on the other hand, automatically arrive in each employee's language.
❺ After the launch
Share progress: a word on the month's completion rate, or on the leading squad if the competition is enabled, keeps the momentum going.
Introduce Riot to new joiners: they automatically receive a welcome mission, but a mention in your onboarding process helps them recognise it.
📎 Resources to share
👉 The launch kit
A 4-page document, ready to send or present, that introduces Riot to your employees: Albert, how Cyber Missions work, what rewards their progress and the right everyday reflexes. It comes in four versions, depending on the notification channel chosen at step 4:
Web, if your employees receive their missions by email
Riot Launch Kit · Web (EN).pdfSlack, if you have enabled notifications on Slack (step 4)
Riot Launch Kit· Slack (EN).pdfTeams, if you have enabled notifications on Teams (step 4)
Riot Launch Kit · Teams (EN).pdfGoogle Chat, if you have enabled notifications on Google Chat (step 4)
Riot Launch Kit· Google Chat (EN).pdf
👍 Good to know: choose the version that matches the channel you chose for your employees. That is where they will receive messages from Albert.
👉 Riot graphic assets
Logos and visuals of Albert, to illustrate your own materials: announcement email, intranet page, presentation.
Albert assets.zip
👉 The communication kit
A more complete communication kit, with a communication schedule, best practices and more, is available here: [À VÉRIFIER : aucun kit Notion en anglais trouvé]
⚠️ Important: this kit was designed before Cyber Missions. Some content presents the former way the programme worked: to describe Cyber Missions to your employees, use the launch kit above.
Key takeaways
Introduce Riot before activating Cyber Missions, ideally in the last week of the previous month.
Explain the essentials: one mission a month, announced by Albert, whose messages are legitimate.
Have the message delivered by management or security, and tell managers and IT support first.
Announce the phishing simulations, without giving their dates.
Use the resources available to you to communicate.
📚 Have your employees been told? Time to launch.


