SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-awareness-activities

Which is an awareness activity that NIST SP 800-50 Rev. 1 says suits all users?

Messages on logon screens, along with posters, newsletters and screen savers.

Start playing free

  1. A cyber range exercise for the SOC
  2. Messages on logon screens ✔
  3. A digital forensics certification course

Why: Awareness activities are short reminders for everyone, like logon messages, posters and newsletters. Deeper exercises and courses are aimed at specific roles. NIST says awareness should run all year, not just once.

Huh, didn't know that: NIST's 2024 revision of SP 800-50 calls the whole effort a Cybersecurity and Privacy Learning Program (CPLP).

The dad joke
What chemical is released in your brain when you see something funny on the internet? Dopameme.
Like this card?
Play the game

References

Answer: Messages on logon screens. Awareness activities are short reminders for everyone, like logon messages, posters and newsletters. Deeper exercises and courses are aimed at specific roles. NIST says awareness should run all year, not just once.

  1. NIST SP 800-50 Rev. 1, Building a Cybersecurity and Privacy Learning Program nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-50r1.pdf
    Messages on logon screens, organizational screen savers, and email signature blocks
    Checked 2026-10-10.
  2. NIST SP 800-50 Rev. 1, Building a Cybersecurity and Privacy Learning Program nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-50r1.pdf
    awareness learning activities should be conducted on an ongoing basis throughout the year
    Checked 2026-10-10.
  3. NIST SP 800-50 Rev. 1, Building a Cybersecurity and Privacy Learning Program nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-50r1.pdf
    the remainder of this document will use the term "CPLP"
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyTricking a person into revealing information or taking a harmful action is called what?Security & PrivacyUnder NIST SP 800-63B-4, what is the minimum length for a password used as the only authentication factor?Security & PrivacyWhat does NIST SP 800-63B-4 say about password rules like requiring a mix of symbols, digits and capitals?

That's stuff everyone should know.