OFFICIAL [P]itch RULES
The Players:
Anyone working in a professional environment is potentially [P]itchable.
A person officially becomes a player once they’ve been verbally or email-notified of a [P]itch.
Anyone who has already witnessed a [P]itch presentation is automatically considered a lifetime player.
The Trigger (a.k.a. “The Infraction”)
A [P]itch is valid if it results from any of the following:
Unlocked session
Badge forgotten / lost / left unattended
Password visible (Post-it, notebook, etc.)
Unprotected open email inbox
Unintended sharing of sensitive access
Unattended accessible computer
Misconfigured auto-reply / sensitive info leakage
Use of default-known password
Poor handling of confidential documents
Shared printer used for printing sensitive documents left behind
Triggering a [P]itch:
A [P]itch must be initiated by a colleague, via an email sent from the victim’s workstation (or active session).
This email must be addressed to at least two people, including the victim and the [P]itcher.
The subject or body of the email must clearly mention that it is a [P]itch.
“Badge” / “Document” Variant:
If a badge or document is left behind (printer, desk, etc.), a colleague may trigger the [P]itch from their own computer, provided they attach a dated photo or clear proof of possession.
The Presentation (a.k.a. “The Sanction”):
The [P]itched person must deliver a professional or humorous presentation, related to:
Their job
Cybersecurity
The mistake that caused the [P]itch
Or a completely unexpected but funny topic
IMPORTANT: The topic is chosen solely by the [P]itcher. The P[P]itched has no say in it.
The presentation should last around 5 minutes (±1 min).
The style is open, creative, and respectful.
Humor is highly encouraged, but kindness is mandatory.
Group [P]itchs:
If multiple people are [P]itched at once:
A group presentation must be made.
Duration = Number of [P]itched players × 5 minutes
Speaking time may be shared or led by one person
A shared or overlapping theme is encouraged
Special Roles:
IT Department
If IT is the [P]itcher, they may add an extra constraint: e.g. “No slides allowed,” “Mime the error,” “Use only absurd analogies,” etc.
The [P]itchouPOLICE:
A designated person or team ensures:
The rules are followed
There is no harassment, abuse, or inappropriate behavior
The spirit of the game remains positive and respectful
Any attempt at discrimination, hurtful mocking, or social exclusion will result in a reversed [P]itch the [P]itcher becomes the [P]itched.
Forbidden Actions:
Never [P]itch someone while they’re still in the room
No remote access to trigger a [P]itch (unless the password is still the default)
Do not use a colleague’s phone to [P]itch
No email rules or filters to block [P]itch emails
Locking someone else’s screen to “protect” them = reversed [P]itch
Snitching = double [P]itch for the snitch
Fake [P]itchs = automatic real [P]itch for the faker
Completing the [P]itch:
The [P]itched has 10 business days to give their presentation.
In case of absence (vacation, illness), a delay of up to 10 business days is allowed.
Missed deadline = duration of presentation is doubled.
Zero Tolerance for Overconfidence Saying “That’ll never happen to me” or “I’m too careful for that” = double [p]itch.
Generosity & Self-[P]itchs:
A person may self-[P]itch themselves for special occasions (birthday, celebration, team event, etc.).
Offering a voluntary presentation to help a [P]itched colleague is allowed but does not cancel the original [P]itch.
Frequency & Cooldown:
Minimum delay between two [P]itchs for the same person = 1 week (starting after their presentation).
Disputes:
In case of disagreement, a local committee or the [P]itchouPOLICE will decide with kindness.
The purpose is always to: learn, laugh, boost awareness, and never harm.
[P]itch: A Game Made in France… that could go global.