Training Title:

Versions:

Version 1: 9 Information Security Violation Categories
Version 2: 13 Information Security Violation Categories

Minimum System Requirements:

End User:

JavaScript enabled Internet Explorer 6.0, FireFox 3.0, and Safari 3.1.
Adobe Flash Player 9.0 plug-in.
Pentium 4 or equivalent processor
512 MB RAM

LMS and Firewall:

SCORM 1.2 or SCORM 2004 compliant LMS server
In the company firewall, the domain "maviinteractive.com" should be allowed through for standard HTML access (Port 80) [See section "Communication with Web Server" below].

Size:

LMS package

* Package size is approximate.

Game

The initialization file that starts up the loading sequence is approximately 330 KB.
Approximately 35 MB of components are preloaded into the browser cache by this main controller file to ensure smooth transition between locations during game play. The user may choose to forego the preloading for an immediate start. In this case, the game engine is started and the content is loaded on the fly. This option may impact on the player's movements around the virtual office space.

Game Components:

Files: 1 HTML (Main Container) + 2 JS (JavaScript) + 1 TXT (Text) + 616 SWF (Flash 9) + 58 XML (Data) + 119 JPG (Pictures) + 1 CSS file

LMS Compatibility Testing - LMSCheck©

In order to create your license file and to make sure Agent Surefire runs properly on your particular LMS, a small LMS Compatibility Tester tool is used before installing Agent Surefire.
This tool is available in SCORM 1.2 or SCORM 2004 compliant packages and it is installed on the LMS like a normal course. (Only 150 KB in size)

Follow these links to download and start testing now: LMSCheck© for Scorm 1.2 | LMSCheck© for Scorm 2004

LMS Compatibility Tester runs tests on SCORM commands that Agent Surefire courseware utilizes: Connection to the LMS API, getting the user name, setting scores, timing, progress, completion status, success status, learner comments, suspend data etc.
The process consists of 4 stages. In each stage, pre-set values in various data fields are communicated to/from the LMS. Then LMS Compatibility Tester is restarted at the end of each step to check the data and confirm various functions.
ACTION STEPS:

1. Install the LMS Compatibility Tester courseware on your LMS and assign it to a user account you can access.
2. Start the courseware and follow the instructions in each stage and restart when prompted until you reach stage 4. In stage 4, click the "END" button to see the final report.
3. If at the end of Stage 3, LMS Compatibility Tester fails to advance to stage 4, this indicates the LMS has a "Training Completion" lock-down function. In this case, please click the "END" button at Stage 3 to see the final report.
   Most LMS servers lock down the trainee's status & success rate when the "Training Completed" flag is set. Beyond this point, the training may still be available yet the score and status cannot be altered by further action. Since Agent Surefire training is a game-based immersive learning tool, the trainees are encouraged to continue playing, providing much-needed repetition and increased retention. Therefore the users usually return to their training to increase their Game Score even after meeting the success criteria. To allow this, your Agent Surefire package will be set to bypass this lock-down. If you prefer not to bypass it, please inform MAVI Interactive when sending the LMS Compatibility Test results.

4. Copy the text displayed in the LMS Compatibility Tester's final report [in stage 3 or 4, depending on the lock-down feature mentioned above]
5. Paste the copied report in to a text file or e-mail and send it back to MAVI Interactive. Be sure to copy all of the text.
6. If the training is to be installed on multiple servers, please install and run the LMS Compatibility Tester tool on each server and send the reports separately to MAVI Interactive. A consolidated license file that will allow the training to work on all listed servers will be created.
7. Please also include the following data in your e-mail:
   1. Specify the Success Criteria in minimum percentage rate. This is the minimum percentage of violation categories correctly identified.
      Success Rate: Between %60 - %100 (Default 70%)
   2. Specify if you would like to set a time limit for each game session. When set, the game session will automatically stop at the end of the specified time period. Note that this is not an LMS based limit, so it will not prevent the player from starting a new session again after closing the current one.
      Time Limitation: Number of minutes
   3. Technical administrator contact information (name, e-mail, telephone) when sending the report.

Upon receipt of the test results, an Agent Surefire SCORM package specially prepared for your LMS will be sent to you.

LMS Installation of Agent Surefire

1. "Import" the ZIP package into the LMS.
   Most of the settings are pre-loaded in the package manifest. Some minor adjustments may be needed:
   Training window pop-up browser settings

• Fixed window size
• Dimensions: 810x710 (Inner frame size)
• Menu, tools and status bars are hidden
• Scroll bars invisible

2. Assign the training to the Administrator and run the training for the first time.
3. If you receive an error message such as the one below, please copy and send it to Mavi Interactive.
   
   "Error(s) occurred... Please contact your LMS admin with the following information: Invalid license, or license file missing. A license has to be issued for the following server address. http://xxxxxxx/yyyy/zzzz"
   
   This may be caused when there is more than one server where the training is hosted. If this is the case, please install and run the LMS Compatibility Tester tool on each server and send the reports separately to MAVI Interactive. (See step 6 under LMS Compatibility Testing)

4. The number of licenses used is tracked by our licensing server running under the domain maviinteractive.com. Agent Surefire needs to connect to the licensing server over the Internet each time it is run. Make sure your proxy and firewall settings allow http port (80) connection to maviinteractive.com. See below for the "Communication Channels" section for more information.

The installed license file may be used to activate additional licenses. Please contact Mavi Interactive to find out about purchasing more licenses.

Communication Channels

With LMS

The courseware communicates with the LMS server at the following events:

• Training start: Gets user information and matching saved game data1.
• When player tags an object: Sends temporary game data1 to be saved for back-up.
• When exiting: Sends completion percentage, completion status, success status and game data1.

With Web Server

The courseware communicates with the domain "maviinteractive.com" at the following events:

• Training start:
• Sends the license ID, LMS URL and Company Name contained in the license file2 and receives a confirmation to allow the game to start. (Approx. 100 bytes)
• Sends an encrypted and anonymous identifier for the user session2
• When exiting: Sends game data1 for detailed reporting [See section "Additional Reporting" below] and to be used for Agent Surefire Score Boards, where the users can compare their performance against other employees in the company. [See section "Score Boards" below]

Additional Reporting

Agent Surefire Infosec training has an integrated reporting system on maviinteractive.com which allows training administrators to get detailed information on each player's status. Apart from standard LMS-held information such as the Training Status, % Complete, Success Status, % Success this report contains the following information that cannot be obtained from SCORM LMS reports:

The data transferred to Reporting System is protected by Mavi Interactive Privacy Policy.

Customization

Game Time Limitation Settings for Office Hours

• Time spent in training during and outside office hours
• Number of times the game is started during office hours
• Number of times the game is started outside office hours

• If office hours are defined as above, the time limit will restrict game play during office hours only.
• If office hours are not defined, the time limit will restrict game play based on browser's session time during week days. (No restrictions during weekends)

• Start & end of morning hours
• Start & end of afternoon hours

Content Customization

Group A*

This group only requires simple text changes through XML files.

• Success criteria: Minimum percentage of violation categories found to pass the training
• Time limitation per session
• Security Violation Category names (without changing the context)
• Adding/removing violations to/from existing objects
• Changing the score associated with specific violations
• Text on Post-it notes (drawers, pin-up boards etc)
• Text on binder labels
• Text on CD/DVD labels
• Text on Floppy Disk labels
• Text on ZIP Disk labels
• Telephone extensions number range (15 consecutive extension numbers, each with 4 digits)
• Voicemail system number (4 digits)
• Voicemail PIN codes (4 digits)
• Number to be dialed to access an outside line

Group B*

The customizations in this group require changes to the flash files/graphic/audio elements.

• Company name (default: Limetree, Inc.)
• Training content for Security Violation Categories
• Editing the content of existing hard-copy documents
• Adding new pages to existing hard-copy documents
• CD/DVD artwork
• Pin-up boards
• Computer monitor screens
• Voicemail messages
• Adding new objects (and violations) to drawers, cabinets, trash cans and shelves

Group C*

The customizations in this group require changes 3D work to be redone.

• Adding new objects that are visible in the general office view.
• Office space design.

* All elements are virtual items and exist inside the courseware.

Score Boards

Serious Games format provides a highly effective way of increasing training participation as well as retention: Competition.
Research shows that when employees are given a way to compare their performance against their colleagues, the desire to do better becomes prevalent. This desire urges the employees to return to the training and exceed the minimum requirements for a passing score.
Management may opt to allow their employees to register with the Score Boards on the Agent Surefire website and view their "stats" from a variety of perspectives.
The data transferred to Agent Surefire Score Boards is protected by Mavi Interactive's Privacy Policy.

Updates

Depending on the package purchased, you may qualify for free software upgrades and content updates. A notification email/letter will be sent to the administrator(s) as soon as the updates are available. The updates include any changed files to replace the originals. The new files should be copied to the LMS using FTP access without changing the directory structure. The package should not be imported again, as this may change the URL, thus causing the license to be invalidated. Update-specific information will be provided with each update package.
Updates requested as a part of a customization package are treated the same way. (See section "Customization" above)