Points are not only for courses but for the work itself
Most gamification approaches reward training. That is the smaller half. More interesting is the daily security work: whoever reports an incident, closes an audit, assesses a risk, completes a checklist, updates a policy, closes a compliance gap, fulfils a data subject request or finishes an impact assessment earns points for it. Eighteen triggers in total, attached via observers directly to the functional modules rather than to separate bookkeeping. That makes visible who actually carries the ISMS.
Eighteen triggers range from course and lesson completion through 2FA activation and device security checks to audits, risk assessment, policy maintenance, closed compliance gaps, data subject requests and impact assessments.
Ten levels, four tiers from bronze to platinum and 33 badges, from "first audit" through "sleuth" to streaks beyond 700 days. Promotions and rank changes trigger notifications.
Leaderboards by points, level or achievements, optionally for a week, a month or overall. Cohorts ensure nobody competes against heavy users from another league.
Five bundled challenges with automatic enrolment, plus a streak calendar with an optional freeze for holidays. The learning record unlocks from level three.
Visibility of who actually carries the security work, instead of a statistic about training hours sat through.
Schedule a no-obligation demo – we will show you the module with your own use cases.
