BehaviourOps games are designed for legitimate internal organisational use - human risk awareness, employee engagement, leadership development, and security culture programmes.
YOU MAY
- Use our games in internal workshops, events, onboarding sessions, and awareness programmes.
- Share session codes with employees and team members within your organisation.
- Use facilitator guides and debrief materials with your teams.
YOU MUST NOT
- Attempt to reverse-engineer, copy, or reproduce any game content or scenarios.
- Share facilitator credentials or session codes outside your licensed organisation.
- Use our platform to create individual employee risk profiles without their knowledge.
- Use our platform for any unlawful purpose.
- Attempt to access data belonging to other customers.
- Attempt to probe, scan, or test the platform for vulnerabilities without prior written consent from us.
RESPONSIBLE DISCLOSURE
If you discover a security vulnerability, report it to: behaviourops@crmda.co.uk
Do not exploit or publicly disclose vulnerabilities before we have had the opportunity to investigate. We commit to acknowledging all reports within 5 business days.
BREACH OF THIS POLICY
We reserve the right to suspend or revoke access if this policy is breached.
CONTACT
behaviourops@crmda.co.uk