October in a Box:

A expert-tested, ready-to-launch campaign.

Help your workforce master the most important, human-error–driven cybersecurity habits—without your team burning weeks writing content... and without messing around with AI slop no one will read. 

October in a Box is:

• Built by frontline cybersecurity practitioners. 

• Stacked with contemporary topics and focused on the “big hitters”: passwords, MFA, AI/deepfake scams, and more. 

• Built and validated by real Human Risk Management practitioners. 

• Tested within mature awareness programs at real, successful enterprises. 

• Packed with ready-to-send articles, visuals, and messages you can plug into your existing channels. We handle the content, you handle the distribution. 

• Semi-customizable. Scroll for all our optional add-ons! 

Who It's For & What's Inside

"October in a Box" is built for security, IT, and risk leaders who are responsible for Cybersecurity Awareness Month but don’t have time to script every article, slide, and campaign touchpoint from scratch.

Get our best-performing assets for a fraction of the cost, and kickstart a Human Risk Management program that moves the needle.   

You need October in a Box if:

• You know what habits employees need to change, but not how to translate that into engaging content. 

• Your team is stretched thin, so “we’ll write it later” turns into a last-minute scramble. 

• Past awareness efforts felt generic, overly technical, or too light to make a difference.

We handle the campaign structure and the words; you focus on tailoring the rollout to your people and culture. 

What’s inside the full October in a Box package:

The full package gives you a complete, month-long awareness program centered on the top human-error–driven risks facing modern organizations and the specific behaviors that reduce them. 

• An Educational Deepfake Video: a short awareness video that educates the workforce on deepfake and synthetic-media threats. 

• Four Cybersecurity Awareness Articles: one article per week, designed for distribution to the workforce across the month of October. 

• Quick Message–Style Blurbs: three short message (255-character limit) aligned to each of the four articles, suitable for delivery via email, chat/collaboration tools (e.g., Microsoft Teams, Slack), or other internal communication platforms. Also includes a stock photo or graphic which accompanies the written content.  

• Four Infographics: one infographic aligned to each of the four articles, formatted for easy sharing and display. 

• A Family Cyber Incident Response Plan Template: a practical, ready-to-use guide that helps employees and their families prepare for and respond to a cyber incident at home. 

• Two Consultation Hours with an HRM Expert: two one-hour calls with one of our Human Risk Management experts. We recommend one before October kicks off so we can provide tips about roll out for your company, and the second after your campaign ends to help you take advantage of your momentum. 

The four articles, instant messages, and infographics are aligned across a common set of four weekly themes so that each week of the campaign delivers a consistent, reinforced message across formats. 

Looking for something more? We've got just the thing... 

Get More: Add-Ons 

Add a Live Practitioner Speaking Session 

Level up October with live, expert-led sessions. 

Virtual speaking session
Bring one of our practitioners to your workforce virtually for a live, interactive session focused Deepfakes and Deception, or Digital Safety for Families in the Age of AI. Ideal for distributed or hybrid teams, we make virtual sessions engaging and worthwhile.  

In-person speaking session 
For organizations that want a flagship Cybersecurity Awareness Month event, an in‑person session brings your campaign to life. A Reveal Risk expert joins you onsite to speak about: Deepfakes and Deception or Digital Safety for Families in the Age of AI. 

In-person presentations available on a first-come, first-serve based upon capacity of internal and external speakers.Travel and lodging for in-person sessions are scoped and billed separately based on location, timing, and event requirements. Inquire! 

Speaker Bios & Session Outlines

You know your workforce best. Pick a speaker and topic for in-person or virtual sessions you know will resonate. 

Aaron Pritz, CEO, Reveal Risk 
Aaron is a former Eli Lilly IT and security senior IT/Security/Audit/Privacy/Risk leader with over 20 years of experience in the pharmaceutical and life sciences sector. Aaron is a certified Six Sigma blackbelt with career emphasis on building and improving internal processes and controls.​  

• Session Title: AI, Deepfakes, and Evolving Threat Landscapes: Deception, Deepfakes, and the New Tradecraft of AI

• Abstract: Deepfakes and AI-generated material have taken the internet by storm. So when you can't trust what you see, and can't trust what you hear, where does that leave you? In this engaging session, participants will be confronted with the reality of contemporary attack vectors and how their personal and professional lives are being impacted. Employees will walk away with tips on spotting deepfakes, resisting manipulation and social engineering, and staying alert in an ever-changing space. 

Jim Wailes, Sr. Consultant and HRM Service Lead, Reveal Risk
Jim served in the Indiana Army National Guard and is a prior law enforcement officer with 30 years of combined experience specializing in the areas of investigations, intelligence, and digital forensics, and served as a task force officer for intelligence and cybercrime investigations with the FBI and U.S. Secret Service. Jim has pivoted his wealth of experience into cybersecurity with a focus on policy, awareness program development and administration, and GRC. 

• Session Title: Digital Safety for Families in the Age of AI 

• Abstract: AI-powered scams like cloned voices, fake emergencies, and romance scams aren't just happening at work, they are targeting households... and you can't spot them by looking or listening anymore. In this session employees will learn about good habits that stop most of them, plus a clear plan for what to do if something goes wrong. Participants will Leave with you own fillable Family Incident Response worksheet you can use in your home.

Cody Rivers, Managing Director, Reveal Risk

Cody specializes in creating and maturing cybersecurity programs that focus on risk reduction while aligning their work to client budget realities.​​ ​Cody’s experience spans 17+ years working with local professional sports teams to Fortune 1000 companies in nearly all major industries. 

• Session Title: Security Isn't a Solo Sport: A Playbook for Every Employee 

• Abstract: Cybersecurity is no longer something “IT handles.” It’s a team sport shaped by every employee’s daily choices and sense of accountability. This session reframes security as a shared effort across all roles, showing how routine actions like clicking links, sharing files, and speaking up about concerns can either quietly introduce risk or actively strengthen our defenses. Attendees will walk away with an empowered sense of how security culture in their everyday work can help keep the organization safe.

Please note in-person presentations available on a first-come, first-serve based upon capacity of internal and external speakers.Travel and lodging for in-person sessions are scoped and billed separately based on location, timing, and event requirements. Inquire! 

Add Your Company Branding 

Skip the back-and-forth with Comms. 

Your company logo, colors, and guidelines.   

Take your October in a Box campaign to the next level by providing our team with your branding package...and we'll do the rest! 

Keeping the branding company-consistent can make your campaign more approachable, familiar, and of course, comms-approved.

Branded files must be received upon signature of the engagement.