Find a sign
Visit an official station during the location’s permitted hours. Never enter a restricted area.
A campus cybersecurity challenge
10 Stops. 10 Cyber Skills. Protect the Next 200.
October 1–31, 2026
Explore campus, solve cybersecurity challenges and reveal a ten-part photo puzzle.
Complete the ten stations in any order. Each station counts once. Your progress is saved to the authenticated CWRU account you use.
Visit an official station during the location’s permitted hours. Never enter a restricted area.
Check that the sign looks intact, scan its QR code and answer one cybersecurity question.
Secure all ten distinct stations between October 1 and October 31. Pilot activity does not count.
Need another way to participate? Email askinfosec@case.edu for an accessible or equivalent method. Do not send medical information.
Participants who complete all ten stations during the campaign enter a random drawing. Completing Cyber Quest does not guarantee a prize. Each participant may receive no more than one prize.
If fewer than 102 participants qualify, unawarded prizes are retained.
Campaign period: October 1, 2026, at 12 a.m. through October 31, 2026, at 11:59:59 p.m. Eastern time.
Anyone who successfully authenticates with a valid CWRU-managed case.edu Google Workspace account may participate and enter the drawing, provided they comply with these Official Rules. Participants must use their own account. Identity is determined from the server-side authenticated Workspace account, not an email address typed by a participant.
A participant must complete all ten distinct canonical Cyber Quest stations during the official campaign period. All ten qualifying completion timestamps must fall within that period. Pilot, test or historical completions do not contribute. A station counts once; repeat visits and duplicate submissions do not create extra credit or entries.
Up to 102 prizes may be awarded by a random drawing among qualifying finishers: one PlayStation 5, one Nintendo Switch and 100 power banks rated at 10,000 mAh. Each participant may receive a maximum of one prize. Completion does not guarantee a prize. If fewer than 102 participants qualify, unawarded inventory is retained.
Participants must not share station links or credentials, interfere with signs, bypass access controls or obtain credit through another person’s account. A timing anomaly may prompt human review; timing alone is not automatic disqualification. The Office of Information Security may review application records and contact a participant for clarification.
Participants must observe building hours, posted restrictions and staff instructions. For an access barrier, missing or damaged sign, or service interruption, email askinfosec@case.edu. An approved equivalent method must preserve the station’s learning objective and one-time completion control.
Cyber Quest 200 is administered by the CWRU Office of Information Security. Email questions to askinfosec@case.edu.
Yes. Return with the same CWRU-managed case.edu account to see your saved progress.
The station remains incomplete. Review the explanation and try again.
The station stays secured and your progress does not increase. A repeat opening does not create another completion.
No. Station links and credentials must not be shared. Every participant must use their own authenticated account.
Do not scan a covered, altered or damaged code. Email the station ID and location to askinfosec@case.edu.
No. Qualifying finishers enter the random drawing for up to 102 prizes, with no more than one prize per participant.
Email askinfosec@case.edu with the station ID, the barrier and a safe way to reply. Medical details are not required.
The Office of Information Security can coordinate an accessible route, staff-assisted scan, accessible digital clue or supervised equivalent activity.
An approved equivalent method uses the same learning objective, one-time credit and audit record as an ordinary station.
For university-wide information, visit CWRU Digital Accessibility.
Cyber Quest records only the information needed to operate the campaign, preserve progress, protect integrity and administer the drawing.
Authenticated CWRU account, derived participant ID, question attempts, station events, completion timestamps, progress, drawing records and administrative audit records.
Saving progress, preventing duplicate credit, providing support and equivalent participation, reviewing integrity and conducting the authorized prize drawing.
Authorized campaign administrators and personnel with an operational need. Campaign data is not used for unrelated marketing.
For questions about an activity record or correction, email askinfosec@case.edu. Review the university’s Website Privacy Statement and Legal Privacy Notice.