HigherFrame Labs
Where people practise before it counts.
Three programmes. One for adults who carry responsibility, one for young people who are already online, and one built for learners on the spectrum.
The programmes
Cyber Command Lab
Practice for the hour you hope never arrives. Tabletop drills, restore tests, and evidence discipline.
Cyber Command Juniors Lab
The same skills, taught to people who are already living online, without fear tactics.
Compass
Built for learners on the spectrum. Calm pages, predictable order, short sentences, no surprises.
TRIPWIRE
The practice arena. Three cards below, untimed, then the full arena with video and voice drills.
Programme one
Cyber Command Lab.
For adults who would be the one holding the phone: founders, office managers, church and school staff, small public operators, and the person in every family everybody calls.
What you practise
- The first fifteen minutes, out loud, against a clock
- Writing a decision log while the situation is still moving
- A restore test, because a backup nobody has restored is a rumour
- The app-integrity walk: eliminate the ordinary before you claim the extraordinary
- Saying “we do not know yet” to a worried person and keeping their trust
- Handing over to a professional responder without destroying evidence first
How a session runs
- Ten minutes. The scenario is read aloud. No slides.
- Twenty minutes. The group works the card. Someone keeps the log.
- Ten minutes. An inject changes the facts, because incidents do.
- Twenty minutes. Honest debrief. What did we not know, and what would have told us?
- Written outcome. Three fixes with owners and dates, or the session did not happen.
The drill set
Invoice diversion
A supplier’s bank details change by email on a Friday afternoon. Who is allowed to approve it, and how do they verify?
The administrator who left
Someone still has access three months after leaving. Find out what they can reach, and in what order you close it.
The app changed
A staff member says the login page looks wrong. Work the integrity chain and reach a classification, including “unknown”.
Encryption at 3am
Files are changing across a share. Contain, protect the backups, and decide what you will tell people at 8am.
Provider outage
Identity is down and nobody can sign in. Switch to the manual process and reconcile afterwards.
The grandparent call
A voice that sounds like family asks for money urgently. Practise the pause, the callback, and the safe word.
What the Lab is not
It is not offensive training. Nothing taught here involves accessing, testing or interfering with systems you do not own and are not authorised to touch. Defence, evidence and recovery only.
Programme two
Cyber Command Juniors Lab.
For ages nine to seventeen. They already live online. The goal is not to frighten them off it, it is to make them the calmest person in the group chat.
The four skills
- The pause. Anything urgent, secret or shameful is a reason to slow down, not speed up.
- The screenshot. Capture before you block, so an adult can actually help.
- The tell. Say it out loud to one trusted adult. Telling is the hard part and it is the whole game.
- The check. Verify a person or a link by a second route you chose yourself.
Ground rules for adults
- No scare stories and no shaming. Shame is what the other side is using.
- “You are not in trouble for telling me” is said first, every single time.
- No surveillance theatre. Explain what is monitored and why.
- Never make a child handle an adult problem alone.
The badges
Lookout
Spot three fake messages in a set of ten and explain the tell in each one.
Keeper
Set up a passkey or an authenticator app and store the recovery codes somewhere sensible.
Recorder
Capture evidence properly: profile, message, username, platform, and the time.
Caller
Know who you would tell for each of five situations, without looking it up.
Steady
Run the pause on a real urgent message and describe what you did instead.
Guide
Teach the pause to a younger sibling or a grandparent, and report how it went.
If a child safety event is happening right now
Open card 7. If anyone is in immediate danger, call 911 first. In the United States you can report to the FBI at ic3.gov and to the NCMEC CyberTipline.
Programme three
Compass.
Compass teaches the same material to learners on the spectrum. Same respect, same content, different pacing and a much quieter page.
Compass pages reduce motion by default, keep the layout in the same place on every screen, use short plain sentences, and tell you what is coming next before it arrives. Nothing appears without warning and nothing moves on its own.
TRIPWIRE
Try three cards right now.
TRIPWIRE is the practice arena that runs alongside this book. Three real messages land below. For each one, decide whether to trust it, verify it, or report it. Nothing here is timed and nothing is recorded.
That is the shape of every drill.
The full arena has one hundred and forty-eight cards across five age tracks, six-second video and voice drills, boss-level incident runs, a collectable glossary deck, a threat feed refreshed every week, and a Family Night mode for playing together. Compass mode is available on every track, for people on the spectrum, with no timer and a layout that never moves.
Every message shown is a simulation. Links are inert and point at reserved example domains that cannot be registered by anyone. This is practice, not legal or security advice, and no drill can promise prevention.