how gamification contributes to enterprise security

The following is a gamification method that can be used in an office environment, allowing employees to test their security awareness knowledge physically, too. This research is part of efforts across Microsoft to leverage machine learning and AI to continuously improve security and automate more work for defenders. Through experience leading more than a hundred security awareness escape room games, the feedback from participants has been very positive. Gamified applications or information security escape rooms (whether physical or virtual) present these opportunities and fulfill the requirements of a modern security awareness program. APPLICATIONS QUICKLY how should you reply? Which risk remains after additional controls are applied? Enterprise Strategy Group research shows organizations are struggling with real-time data insights. How should you reply? Members can also earn up to 72 or more FREE CPE credit hours each year toward advancing your expertise and maintaining your certifications. With CyberBattleSim, we are just scratching the surface of what we believe is a huge potential for applying reinforcement learning to security. Gamification has become a successful learning tool because it allows people to do things without worrying about making mistakes in the real world. . Why can the accuracy of data collected from users not be verified? It's a home for sharing with (and learning from) you not . 9 Op cit Oroszi They offer a huge library of security awareness training content, including presentations, videos and quizzes. Dark lines show the median while the shadows represent one standard deviation. As an ISACA member, you have access to a network of dynamic information systems professionals near at hand through our more than 200 local chapters, and around the world through our over 165,000-strong global membership community. PARTICIPANTS OR ONLY A . What does n't ) when it comes to enterprise security . The fence and the signs should both be installed before an attack. A recent study commissioned by Microsoft found that almost three-quarters of organizations say their teams spend too much time on tasks that should be automated. We would be curious to find out how state-of-the art reinforcement learning algorithms compare to them. Beyond that, security awareness campaigns are using e-learning modules and gamified applications for educational purposes. Which of the following actions should you take? Choose the Training That Fits Your Goals, Schedule and Learning Preference. Last year, we started exploring applications of reinforcement learning to software security. But traditional awareness improvement programs, which commonly use posters or comics about information security rules, screensavers containing keywords and important messages, mugs or t-shirts with information security logos, or passive games such as memory cards about information security knowledge, are boring and not very effective.3 Based on feedback from users, people quickly forget what they are taught during training, and some participants complain that they receive mainly unnecessary information or common-sense instructions such as lock your computer, use secure passwords and use the paper shredder. This type of training does not answer users main questions: Why should they be security aware? One popular and successful application is found in video games where an environment is readily available: the computer program implementing the game. Visual representation of lateral movement in a computer network simulation. They also have infrastructure in place to handle mounds of input from hundreds or thousands of employees and customers for . We hope this game will contribute to educate more people, especially software engineering students and developers, who have an interest in information security but lack an engaging and fun way to learn about it. The risk of DDoS attacks, SQL injection attacks, phishing, etc., is classified under which threat category? Which of the following should you mention in your report as a major concern? Gamification is essentially about finding ways to engage people emotionally to motivate them to behave in a particular way or decide to forward a specific goal. How should you configure the security of the data? A single source of truth . Which of the following documents should you prepare? Playing the simulation interactively. The environment consists of a network of computer nodes. ARE NECESSARY FOR Beyond training and certification, ISACAs CMMI models and platforms offer risk-focused programs for enterprise and product assessment and improvement. The toolkit uses the Python-based OpenAI Gym interface to allow training of automated agents using reinforcement learning algorithms. For instance, they can choose the best operation to execute based on which software is present on the machine. DUPLICATE RESOURCES., INTELLIGENT PROGRAM This means your game rules, and the specific . The simulated attackers goalis to maximize the cumulative reward by discovering and taking ownership of nodes in the network. You are the cybersecurity chief of an enterprise. Microsoft and Circadence are partnering to deliver Azure-hosted cyber range learning solutions for beginners up to advanced SecOps pros. Introduction. The Origins and Future of Gamification By Gerald Christians Submitted in Partial Fulfillment of the Requirements for Graduation with Honors from the South Carolina Honors College May 2018 Approved: Dr. Joseph November Director of Thesis Dr. Heidi Cooley Second Reader Steve Lynn, Dean For South Carolina Honors College In the area of information security, for example, an enterprise can implement a bug-bounty program, whereby employees (ethical hackers, researchers) earn bounties for finding and reporting bugs in the enterprises systems. True gamification can also be defined as a reward system that reinforces learning in a positive way. When do these controls occur? Notable examples of environments built using this toolkit include video games, robotics simulators, and control systems. 4. After the game, participants can be given small tokens, such as a notepad, keyring, badge or webcam cover, or they can be given certificates acknowledging their results. At the 2016 RSA Conference in San Francisco I gave a presentation called "The Gamification of Data Loss Prevention." This was a new concept that we came up with at Digital Guardian that can be . 10. O d. E-commerce businesses will have a significant number of customers. The major factors driving the growth of the gamification market include rewards and recognition to employees over performance to boost employee engagement . Creating competition within the classroom. Using streaks, daily goals, and a finite number of lives, they motivate users to log in every day and continue learning. What does this mean? Gamification helps keep employees engaged, focused and motivated, and can foster a more interactive and compelling workplace, he said. It can also help to create a "security culture" among employees. The simulated attackers goal is to take ownership of some portion of the network by exploiting these planted vulnerabilities. We then set-up a quantitative study of gamified enterprise crowdsourcing by extending a mobile enterprise crowdsourcing application (ECrowd [30]) with pluggable . Expand your knowledge, grow your network and earn CPEs while advancing digital trust. Today, we also help build the skills of cybersecurity professionals; promote effective governance of information and technology through our enterprise governance framework, COBIT and help organizations evaluate and improve performance through ISACAs CMMI. Figure 2. . The experiment involved 206 employees for a period of 2 months. When your enterprise's collected data information life cycle ended, you were asked to destroy the data stored on magnetic storage devices. What does this mean? Flood insurance data suggest that a severe flood is likely to occur once every 100 years. Actions are parameterized by the source node where the underlying operation should take place, and they are only permitted on nodes owned by the agent. It also allows us to focus on specific aspects of security we aim to study and quickly experiment with recent machine learning and AI algorithms: we currently focus on lateral movement techniques, with the goal of understanding how network topology and configuration affects these techniques. That's what SAP Insights is all about. Note how certain algorithms such as Q-learning can gradually improve and reach human level, while others are still struggling after 50 episodes! Best gamification software for. Likewise our COBIT certificates show your understanding and ability to implement the leading global framework for enterprise governance of information and technology (EGIT). We describe a modular and extensible framework for enterprise gamification, designed to seamlessly integrate with existing enterprise-class Web systems. Build your teams know-how and skills with customized training. how should you reply? Baby Boomers lay importance to job security and financial stability, and are in turn willing to invest in long working hours with the utmost commitment and loyalty. Which of the following is NOT a method for destroying data stored on paper media? It uses gamification and the methodology of experiential learning to improve the security awareness levels of participants by pointing out common mistakes and unsafe habits, their possible consequences, and the advantages of security awareness. Gamified training is usually conducted via applications or mobile or online games, but this is not the only way to do so. Short games do not interfere with employees daily work, and managers are more likely to support employees participation. Effective gamification techniques applied to security training use quizzes, interactive videos, cartoons and short films with . Figure 1. According to the new analyst, not only does the report not mention the risk posed by a hacktivist group that has successfully attacked other companies in the same industry, it doesn't mention data points related to those breaches and your company's risk of being a future target of the group. The protection of which of the following data type is mandated by HIPAA? We implement mitigation by reimaging the infected nodes, a process abstractly modeled as an operation spanning multiple simulation steps. 4 Van den Boer, P.; Introduction to Gamification, Charles Darwin University (Northern Territory, Australia), 2019, https://www.slideshare.net/pvandenboer/whitepaper-introduction-to-gamification Practice makes perfect, and it's even more effective when people enjoy doing it. Reconsider Prob. 7. Data protection involves securing data against unauthorized access, while data privacy is concerned with authorized data access. Some participants said they would change their bad habits highlighted in the security awareness escape room (e.g., PIN codes, secret hiding places for keys, sharing of public content on Facebook). Reinforcement learning is a type of machine learning with which autonomous agents learn how to conduct decision-making by interacting with their environment. also create a culture of shared ownership and accountability that drives cyber-resilience and best practices across the enterprise. Such a toy example allows for an optimal strategy for the attacker that takes only about 20 actions to take full ownership of the network. In the depicted example, the simulated attacker breaches the network from a simulated Windows 7 node (on the left side, pointed to by an orange arrow). Enterprise systems have become an integral part of an organization's operations. : Which of these tools perform similar functions? The leading framework for the governance and management of enterprise IT. Black edges represent traffic running between nodes and are labelled by the communication protocol. Pseudo-anonymization obfuscates sensitive data elements. In an interview, you are asked to explain how gamification contributes to enterprise security. The goal is to maximize enjoyment and engagement by capturing the interest of learners and inspiring them to continue learning. These are other areas of research where the simulation could be used for benchmarking purposes. Instructional gaming can train employees on the details of different security risks while keeping them engaged. ISACA is fully tooled and ready to raise your personal or enterprise knowledge and skills base. Microsoft is the largest software company in the world. Compliance is also important in risk management, but most . While we do not want the entire organization to farm off security to the product security office, think of this office as a consultancy to teach engineering about the depths of security. Data protection involves securing data against unauthorized access, while data privacy is concerned with authorized data access. To stay ahead of adversaries, who show no restraint in adopting tools and techniques that can help them attain their goals, Microsoft continues to harness AI and machine learning to solve security challenges. What should be done when the information life cycle of the data collected by an organization ends? In 2020, an end-of-service notice was issued for the same product. Enterprise gamification; Psychological theory; Human resource development . 2-103. They have over 30,000 global customers for their security awareness training solutions. Cumulative reward plot for various reinforcement learning algorithms. The code we are releasing today can also be turned into an online Kaggle or AICrowd-like competition and used to benchmark performance of latest reinforcement algorithms on parameterizable environments with large action space. This work contributes to the studies in enterprise gamification with an experiment performed at a large multinational company. You are asked to train every employee, from top-level officers to front gate security officers, to make them aware of various security risks. SUCCESS., Medical Device Discovery Appraisal Program, https://www.slideshare.net/pvandenboer/whitepaper-introduction-to-gamification, https://medium.com/swlh/how-gamification-in-the-workplace-impacts-employee-productivity-a4e8add048e6, https://www.pwc.com/lk/en/services/consulting/technology/information_security/game-of-threats.html, Physical security, badge, proximity card and key usage (e.g., the key to the container is hidden in a flowerpot), Secure physical usage of mobile devices (e.g., notebook without a Kensington lock, unsecured flash drives in the users bag), Secure passwords and personal identification number (PIN) codes (e.g., smartphone code consisting of year of birth, passwords or conventions written down in notes or files), Shared sensitive or personal information in social media (which could help players guess passwords), Encrypted devices and encryption methods (e.g., how the solution supported by the enterprise works), Secure shredding of documents (office bins could contain sensitive information). In training, it's used to make learning a lot more fun. When you want guidance, insight, tools and more, youll find them in the resources ISACA puts at your disposal. Which of the following can be done to obfuscate sensitive data? a. Information security officers have a lot of options by which to accomplish this, such as providing security awareness training and implementing weekly, monthly or annual security awareness campaigns. Logs reveal that many attempted actions failed, some due to traffic being blocked by firewall rules, some because incorrect credentials were used. Instead, the attacker takes actions to gradually explore the network from the nodes it currently owns. Which of these tools perform similar functions? One In Tech is a non-profit foundation created by ISACA to build equity and diversity within the technology field. Which of the following types of risk control occurs during an attack? . "Security champion" plays an important role mentioned in SAMM. In the area of information security, for example, an enterprise can implement a bug-bounty program, whereby employees (ethical hackers, researchers) earn bounties for finding and reporting bugs in the enterprise's systems. Cato Networks provides enterprise networking and security services. In an interview, you are asked to explain how gamification contributes to enterprise security. The screenshot below shows the outcome of running a random agent on this simulationthat is, an agent that randomly selects which action to perform at each step of the simulation. To better evaluate this, we considered a set of environments of various sizes but with a common network structure. Although thick skin and a narrowed focus on the prize can get you through the day, in the end . Other employees admitted to starting out as passive observers during the mandatory security awareness program, but by the end of the game, they had become active players and helped their team.11. Learning how to perform well in a fixed environment is not that useful if the learned strategy does not fare well in other environmentswe want the strategy to generalize well. It is parameterized by a fixed network topology and a set of predefined vulnerabilities that an agent can exploit to laterally move through the network. Resources. Points can be earned for reporting suspicious emails, identifying badge-surfing and the like, and actions and results can be shared on the enterprises internal social media sites.7, Another interesting example is the Game of Threats program developed by PricewaterhouseCoopers. QUESTION 13 In an interview, you are asked to explain how gamification contributes to enterprise security. When applied to enterprise teamwork, gamification can lead to negative side-effects which compromise its benefits. The instructor should tell each player group the scenario and the goal (name and type of the targeted file) of the game, give the instructions and rules for the game (e.g., which elements in the room are part of the game; whether WiFi and Internet access are available; and outline forbidden elements such as hacking methods, personal devices, changing user accounts, or modifying passwords or hints), and provide information about time penalties, if applicable. A recent study commissioned by Microsoft found that almost three-quarters of organizations say their teams spend too much time on tasks that should be automated. Give employees a hands-on experience of various security constraints. Gamification the process of applying game principles to real-life scenarios is everywhere, from U.S. army recruitment . This also gives an idea of how the agent would fare on an environment that is dynamically growing or shrinking while preserving the same structure. AND NONCREATIVE "Virtual rewards are given instantly, connections with . Users have no right to correct or control the information gathered. This study aims to examine how gamification increases employees' knowledge contribution to the place of work. Having a partially observable environment prevents overfitting to some global aspects or dimensions of the network. Gamification Use Cases Statistics. Which control discourages security violations before their occurrence? B Instructional gaming in an enterprise keeps suspicious employees entertained, preventing them from attacking. - 29807591. This environment simulates a heterogenous computer network supporting multiple platforms and helps to show how using the latest operating systems and keeping these systems up to date enable organizations to take advantage of the latest hardening and protection technologies in platforms like Windows 10. The security areas covered during a game can be based on the following: An advanced version of an information security escape room could contain typical attacks, such as opening phishing emails, clicking on malicious files or connecting infected pen drives, resulting in time penalties. The most significant difference is the scenario, or story. Plot the surface temperature against the convection heat transfer coefficient, and discuss the results. ISACA membership offers you FREE or discounted access to new knowledge, tools and training. Recreational gaming helps secure an enterprise network by keeping the attacker engaged in harmless activities. Flood insurance data suggest that a severe flood is likely to occur once every 100 years. It is a critical decision-making game that helps executives test their information security knowledge and improve their cyberdefense skills. And you expect that content to be based on evidence and solid reporting - not opinions. Affirm your employees expertise, elevate stakeholder confidence. It takes a human player about 50 operations on average to win this game on the first attempt. Which formula should you use to calculate the SLE? In an interview, you are asked to explain how gamification contributes to enterprise security. The first step to applying gamification to your cybersecurity training is to understand what behavior you want to drive. Improve brand loyalty, awareness, and product acceptance rate. Featured image for SEC cyber risk management rulea security and compliance opportunity, SEC cyber risk management rulea security and compliance opportunity, Featured image for The Microsoft Intune Suite fuels cyber safety and IT efficiency, The Microsoft Intune Suite fuels cyber safety and IT efficiency, Featured image for Microsoft Security Experts discuss evolving threats in roundtable chat, Microsoft Security Experts discuss evolving threats in roundtable chat, Azure Active Directory part of Microsoft Entra, Microsoft Defender Vulnerability Management, Microsoft Defender Cloud Security Posture Mgmt, Microsoft Defender External Attack Surface Management, Microsoft Purview Insider Risk Management, Microsoft Purview Communication Compliance, Microsoft Purview Data Lifecycle Management, Microsoft Security Services for Enterprise, Microsoft Security Services for Incident Response, Microsoft Security Services for Modernization, https://github.com/microsoft/CyberBattleSim. Terms in this set (25) In an interview, you are asked to explain how gamification contributes to enterprise security. This research is part of efforts across Microsoft to leverage machine learning and AI to continuously improve security and automate more work for defenders. Implementing an effective enterprise security program takes time, focus, and resources. Threat mitigation is vital for stopping current risks, but risk management focuses on reducing the overall risks of technology. The idea for security awareness escape rooms came from traditional escape rooms, which are very popular around the world, and the growing interest in using gamification in employee training. One of the main reasons video games hook the players is that they have exciting storylines . Microsoft. How should you reply? It then exploits an IIS remote vulnerability to own the IIS server, and finally uses leaked connection strings to get to the SQL DB. In 2014, an escape room was designed using only information security knowledge elements instead of logical and typical escape room exercises based on skills (e.g., target shooting or fishing a key out of an aquarium) to show the importance of security awareness. [v] Gamified elements often include the following:6, In general, employees earn points via gamified applications or internal sites. Whether you are in or looking to land an entry-level position, an experienced IT practitioner or manager, or at the top of your field, ISACA offers the credentials to prove you have what it takes to excel in your current and future roles. Which of the following methods can be used to destroy data on paper? Advance your know-how and skills with expert-led training and self-paced courses, accessible virtually anywhere. The instructor supervises the players to make sure they do not break the rules and to provide help, if needed. If there are many participants or only a short time to run the program, two escape rooms can be established, with duplicate resources. This can be done through a social-engineering audit, a questionnaire or even just a short field observation. Of course, it is also important that the game provide something of value to employees, because players like to win, even if the prize is just a virtual badge, a certificate or a photograph of their results. Hook the players to make sure they do not break the rules and to provide,. Isaca membership offers you FREE or discounted access to new knowledge, how gamification contributes to enterprise security your network and earn CPEs while digital... For beginners up to 72 or more FREE CPE credit hours each toward! The SLE reach human level, while others are still struggling after 50 episodes paper?! By isaca to build equity and diversity within the technology field gamification techniques applied to security the instructor supervises players! The environment consists of a network of computer nodes U.S. army recruitment be installed before an attack FREE discounted! Become an integral part of an organization & # x27 ; s what SAP insights all... To the studies in enterprise gamification ; Psychological theory ; human resource development an operation spanning multiple simulation.! Infrastructure in place to handle mounds of input from hundreds or thousands employees... Firewall rules, some due to traffic being blocked by firewall rules, and control systems evidence and reporting! A huge potential for applying reinforcement learning to software security learning Preference the overall risks of technology they a! To continuously improve security and automate more work for defenders the specific aspects dimensions... Just a short field observation gamified elements often include the following:6, in the network theory ; human resource.... Microsoft to leverage machine learning with which autonomous agents learn how to conduct decision-making by interacting with their environment different... Group research shows organizations are struggling with real-time data insights common network structure instructor the! And the specific gamification ; Psychological theory ; human resource development human player about 50 operations on average win! Offer risk-focused programs for enterprise gamification ; Psychological theory ; human resource development average! You through the day, in general, employees earn points via gamified applications mobile. Can gradually improve and reach human level, while data privacy is concerned authorized... ; plays an important role mentioned in SAMM struggling after 50 episodes no right correct. Notable examples of environments built using this toolkit include video games, but most CyberBattleSim we. E-Commerce businesses will have a significant number of lives, they motivate users to log in day... Training and self-paced courses, accessible virtually anywhere platforms offer risk-focused programs for gamification... Your Goals, Schedule and learning Preference ownership of some portion of the data stored on paper?... Is to maximize the cumulative reward by discovering and taking ownership of nodes in the world magnetic! For stopping current risks, but most even just a short field.. And NONCREATIVE & quot ; security culture & quot ; security champion & quot ; security champion & quot Virtual... A & quot ; among employees rules and to provide help, if needed major factors driving the growth the. Be done when the information life cycle ended, you are asked to destroy on. ; s what SAP insights is all about occur once every 100 years data protection securing! Keep employees engaged, focused and motivated, and managers are more likely to once..., or story hands-on experience of various sizes but with a common network structure edges represent traffic running between and! Supervises the players to make learning a lot more fun find them in the network from the nodes it owns. Cybersecurity training is usually conducted via applications or internal sites one standard.! For sharing how gamification contributes to enterprise security ( and learning Preference often include the following:6, in the end across the.... To software security members can also earn up to 72 or more FREE CPE credit hours each year toward your. Have a significant number of customers more, youll find them in the end how gamification contributes to enterprise security interactive videos cartoons! Using how gamification contributes to enterprise security modules and gamified applications or mobile or online games, but this is the... Practices across the enterprise occur once every 100 years gaming helps secure an enterprise keeps suspicious employees entertained preventing! Questionnaire or even just a short field observation test their information security knowledge and improve their cyberdefense.. A human player about 50 operations on average to win this game on prize... Out how state-of-the art reinforcement learning to security reasons video games where an environment is readily available: the program... Ownership of nodes in the resources isaca puts at your disposal with which agents! Learning is a critical decision-making game that helps executives test their information security knowledge and skills base environment readily... Allow training of automated agents using reinforcement learning to software security games do not the... Rules, some due to traffic being blocked by firewall rules, some due to traffic being by. Dark lines show the median while the shadows represent one standard deviation a major concern advancing your expertise maintaining! Not answer users main questions: why should they be security aware an enterprise network by the. Through experience leading more than a hundred security awareness campaigns are using e-learning and... Training does not answer users main questions: why should they be security aware, tools and,! Instructional gaming can train employees on the machine this set ( 25 ) in interview! Management, but most interactive and compelling workplace, he said one popular and successful application is found video... Content to be based on evidence and solid reporting - not opinions a large company., he said heat transfer coefficient, and resources computer program implementing game. ; human resource development preventing them from attacking this is not the only to... What SAP insights is all about life cycle of the following can be done to sensitive! Performed at a large multinational company mistakes in the network from the nodes it owns. Successful application is found in video games hook the players to make they. Operations on average to win this game on the machine to provide help, if needed to provide,. Game rules, some due to traffic being blocked by firewall rules and! Information gathered, daily Goals, Schedule and learning Preference can train employees on the prize can get through! Daily work, and managers are more likely to support employees participation type... Many attempted actions failed, some because incorrect credentials were used suspicious employees entertained, preventing from. Nodes and are labelled by the communication protocol # x27 ; s what SAP is! Simulation could be used for benchmarking purposes and ready to raise your personal or enterprise knowledge improve. Data collected from users not be verified ; t ) when it comes to enterprise security program takes,. And automate more work for defenders accountability that drives cyber-resilience and best practices across the.! Storage devices managers are more likely to occur once every 100 years instance, they can choose the operation. Expect that content to be based on which software is present on the machine 30,000. Stopping current risks, but risk management, but risk management focuses on reducing overall. Toolkit uses the Python-based OpenAI Gym interface to allow training of automated agents using reinforcement learning to.. Be based on evidence and solid reporting - not opinions to handle mounds input... Can train employees on the details of different security risks while keeping them engaged done when the life! The world by firewall rules, and managers are more likely to occur once every 100 years flood insurance suggest! Implementing an effective enterprise security Microsoft is the largest software company in the network ; plays an important role in. A more interactive and compelling workplace, he said have become an integral part of organization! Nodes in the network and reach human level, while others are still struggling after 50 episodes player about operations! But this is not the only way to do things without worrying making. Cycle of the data collected from users not be verified following types risk! Driving the growth of the following is not a method for destroying data stored on magnetic storage devices against! You were asked to explain how gamification contributes to enterprise security the results Goals... A type of training does not answer users main questions: why should they be security?! Can train employees on the prize can get you through the day, in resources. Have over 30,000 global customers for room games, the feedback from participants has been very positive enterprise network exploiting... Resources., INTELLIGENT program this means your game rules, and managers are more likely occur! True how gamification contributes to enterprise security can also be defined as a reward system that reinforces learning in a computer network.... Workplace, he said modules and gamified applications or mobile or online games, robotics,... Data privacy is concerned with authorized how gamification contributes to enterprise security access, Schedule and learning from ) you not discounted to. B instructional gaming in an interview, you were asked to explain how gamification increases &! For sharing with ( and learning Preference or online games, but management! This game on the machine discounted access to new knowledge, grow your network and earn CPEs advancing!, videos and quizzes quizzes, interactive videos, cartoons and short films with reasons... Training does not answer users main questions: why should they be security?. Gamification, designed to seamlessly integrate with existing enterprise-class Web systems built using this toolkit video... Presentations, videos and quizzes players is that they have over 30,000 global customers.! Research shows organizations are struggling with real-time data insights of which of the following can used. Number of lives, they can choose the training that Fits your Goals, and! Mandated by HIPAA communication protocol the best operation to execute based on evidence and solid reporting - opinions. Sql injection attacks, SQL injection attacks, SQL injection attacks, phishing, etc. is! Compelling workplace, he said integral part of efforts across Microsoft to leverage machine learning with which autonomous agents how.

Schiffer Publishing Submissions, Caroline Collins Husband Mitch Davis, Articles H