Turn a policy topic into a decision.
Technology-risk policies describe responsibilities, but a learning brief also needs to identify the decisions employees face. An unexpected email provides a concrete starting point: what should the learner notice, and what should they do next?

