Incident Commander

1. Read each incident update.
2. Choose the best next action from plausible options.
3. Watch how your decision changes the incident.
4. Some choices create an extra consequence screen or change which recovery choice is best later.

There is no countdown timer. Use Projector Mode for whole-class voting.

Target: Grades 6–12; about 15–18 minutes.

Projector Mode: enlarges the incident and decision text for class voting. Ask students to defend their choice before revealing the consequence.

The distractors are designed to be plausible but suboptimal: acting too broadly, recovering too early, waiting for impossible certainty, or communicating too widely.

The scenario is fictional and operational. It names no ransomware family, shows no ransom note, and teaches no deployment or attack technique.

The end screen is screenshot-friendly and lists both decision accuracy and the actual branch consequences experienced.