Cyber Security Awareness Month October 2026 - Campus Scavenger Hunt

Explore our security tools, test your cyber instincts, and enter to win campus prizes all through October!

To celebrate, IT Services has launched a campus scavenger hunt for VIU staff and faculty. Explore our new VIU Information Security Website, real scam examples in the VIU Phish Bowl, and our latest security guides.

Find the answers hidden across our pages, submit your entry before the deadline, and enter for a chance to win one of three $25 Tim Hortons gift cards!

How to Participate

1. Find the Answers: Use the links and clues below to find the exact words and phrases on our website and Knowledge Base articles.
2. Copy the Template: Copy the plain text Submission Email Template at the bottom of this article.
3. Submit Your Entry: Paste the template into a new email. Fill in your answers and send it from your official VIU employee email (@viu.ca) to infosec@viu.ca.
4. Deadline: All entries must be received by Monday, October 26, 2026, at 4:30 PM PDT. 3 winners will be chosen in a random draw from all verified correct entries and announced in the November 4 VIU Digest.

Scavenger Hunt Questions & Clues

Question 1: Passphrase Power (Identity)

Traditional passwords with random symbols can be hard to remember but easy for computers to crack. In the "Use a passphrase, not a password" section on the VIU Information Security Website, fill in the two missing words:

"Passphrases are [ Word 1 ] for humans to remember and [ Word 2 ] for computers to crack."

Clue: Explore the Identity pillar on the VIU Information Security Website.

---

Question 2: Real-World Threats (The Phish Bowl)

Check out the VIU Phish Bowl, our live list of verified phishing attacks reported across campus. When scammers pretend to be VIU deans or managers needing an urgent favour, what specific type of prepaid card or voucher do they most often ask you to buy?

Clue: Browse the active examples catalogued in the VIU Phish Bowl KB Article.

---

Question 3: Spotting Email Red Flags & One-Click Reporting

In the guide How to Spot and Report a Phishing or Suspicious Email, what is the 1- or 2-word button name (such as in Outlook on the web or desktop) on the toolbar used to send suspicious emails directly to the IT Security team?

Clue: Review the "How to Report" section in the Spot & Report Phishing Guide.

---

Question 4: Social Engineering & Verification

Scammers use urgency and authority to bypass security rules. In our guide on Recognizing and Resisting Social Engineering, what specific 3-word term describes checking an unexpected request by calling the sender at their official directory phone number?

Clue: Check the verification section of the Recognizing and Resisting Social Engineering Guide.

---

Question 5: Modern Authentication (2-Step Verification)

Microsoft is phasing out older verification methods like SMS text and phone calls. What is the official name of the primary mobile app recommended by VIU for 2-Step Verification?

Clue: Explore the 2SV and authentication guides on the VIU Information Security Website.

---

Question 6: Supportive Security Culture

Mistakes happen to everyone—whether clicking a bad link or entering passwords on the wrong page. In the "We are here to help!" banner near the bottom of the VIU Information Security Website, fill in the two missing words:

"We are not here to [ Word 1 ]; we are here to [ Word 2 ]."

Clue: Scroll to the "We are here to help!" section near the bottom of the VIU Information Security Website.

---

Question 7: Account Security & Acceptable Use

Sharing is caring—except when it comes to university technology. Under VIU’s Acceptable Use Standard, what is the rule regarding sharing your VIU account credentials (username/password)?

Clue: Review the account and credential security rules in the VIU Acceptable Use Standard KB Article.

---

Submission Email Template

Copy and paste the template below into a new email, fill in your details and answers, and send it to infosec@viu.ca:

To: infosec@viu.ca
Subject: Cyber Month Scavenger Hunt 2026 - [Your Full Name]

Full Name: [First and Last Name]
Role: [Faculty / Staff]
Department or Area: [Your Department / Faculty / Unit]

--------------------------------------------------
SCAVENGER HUNT ANSWERS:

Question 1 (Passphrase Power):
- Word 1: 
- Word 2: 

Question 2 (The Phish Bowl):
- Prepaid card / voucher type: 

Question 3 (Spotting Email Red Flags):
- Outlook ribbon button name: 

Question 4 (Social Engineering):
- 3-word verification term: 

Question 5 (Modern Authentication):
- Recommended mobile app: 

Question 6 (Supportive Security Culture):
- Word 1: 
- Word 2: 

Question 7 (Acceptable Use & Credential Sharing):
- Rule on sharing credentials: 
--------------------------------------------------

Contest Rules & Eligibility

• Eligibility: Open to all active Vancouver Island University staff and faculty members.
• Entry Limit: One entry per employee.
• Official Account: Submissions must come from an official VIU employee email account (@viu.ca) to be eligible for prizes.
• Prizes & Winners: 3 winners will be selected in a random draw from all verified correct submissions to receive a $25 Tim Hortons gift card.
• Verification & Announcement: Correct answers will be verified by the Information Security team. Winners will be notified by email and announced in the November 4 VIU Digest.