Want to create interactive content? It’s easy in Genially!

Get started free

Secret Agent

Ashlyn Kintner

Created on August 13, 2025

Start designing with a free template

Discover more than 1500 professional designs like these:

Math Mission

Secret Code

Earth Day Escape Room

Reboot Protocol

Corporate Escape Room: Operation Christmas

Witchcraft Escape Room

Video Game Breakout

Transcript

Secret Agent

start.

map/missions

ESCAPE ROOM Secret Agent

Mission 01

THIS IS YOUR STORY: You are a novice agent aspiring to become a professional secret agent for the Gainwell Compliance department. To achieve this, you must infiltrate the compliance underworld and solve the missions that appear on the map. If you gather all the clues, you will obtain the 3 digit combination that opens the briefcase with your reward. Good luck!

Make sure to have your notebook handy to jot down the clues you will be collecting. You WILL need it!

You will need a notebook. Each code is scrambled. When you have rearranged the letters in the box to form the correct word, you will need to write down the letters in the top left-hand corners to obtain your code to move to the next riddle. For example: The code for the word "RIDDLES" above is 2800254

Open the letter

UNSCRAMBLE

I got it!

To proceed, enter the 4 digit code from Riddle #1 below:

UNSCRAMBLE

I got it!

To proceed, enter the 3 digit code from Riddle #2 below:

UNSCRAMBLE

I got it!

To proceed, enter the 6 digit code from Riddle #3 below:

UNSCRAMBLE

I got it!

To proceed, enter the 6 digit code from Riddle #4 below:

map/missions

Mission 02

Mission 01

you have completed mission 1. don't forget the number you just discovered! It is 1 of 3 you will need to unlock the suitcase at the end!

Knock on the door, listen to the conversations, and put your sleuthing skills to the test...

SLEUTHING

Chip, a Gainwell employee, contacts the Privacy Team to report that he may have sent an unencrypted email containing a Medicaid member's claims document to his counterpart at the State. Chip is concerned that he violated Gainwell policy....

Spy carefully

Employee: Good morning, my name is Chip, and I work on the team that handles claims forms on behalf of our State account.

Privacy: Good morning, Chip. I can assist you with your issue. Can you give me a summary of the issue and the steps you have taken so far?

Continue

Employee: This morning, I sent an email containing a claim form with PHI without first selecting "Encrypt" before hitting send. At first, I didn't think it was a big deal to report this, since the email went to the wrong person. But then, my supervisor told me to report it to Privacy. Once I realized I accidentally hit the send button before encrypting my email, I tried to recall it. But I was unsuccessful. The email went over at 8:52am. What do I do now?

First question

What should Chip do next?

C Contact the recipients at the State and apologize for the error.

A Attempting to recall the message is all that is needed after sending an unecrypted email.

B Send the email (encrypted) to the Privacy Officer for review and next time, slow down and remember to follow Gainwell's encryption process when sending PHI.

RECAP

Click Here to review Gainwell encryption options...

There is another situation in the next room that requires your attention!

For department staff meetings, Gainwell has a contract with Mike's Muffin Shop to provide coffee, tea, and baked goods. This has been a Gainwell tradition for 5 years. This summer, Mike said he's hanging up his hat and plans to retire and close his business. After a long search, Gainwell decided they would start a new contract with Polly's Pastries, in which Elmer, a long-time part-time Polly's staff member, is also employed with Gainwell on a full-time basis...

Elmer: Thank you for calling Polly's Pastries. How can I help you today?

Spy carefully

Gainwell: Our former breakfast provider has just retired. We have a staff meeting next week and have a big order to fill. I know this is short notice. Would Polly's Pastries be able to fill our order?

Continue

Elmer: I can help with that.

Gainwell: Awesome. Can you deliver the order, or do I need to send one of our employees to pickup the order?

Elmer: You can choose to pick up the order or have it delivered. If you pick it up, there is no delivery charge. But if you have it delivered, there is a five percent delivery fee.

Gainwell: We would need to have the order deliverd, since our department's busy as a key player in a new project with the State, so we need to get our order delivered.

Spy carefully

Elmer: No problem. Can you give me the department and the delivery address. We'll get it delivered to you when you need it.

Gainwell: Gainwell New Stuff Department. 456 Happy Trails Blvd, Omaha, NE.

Continue

Elmer: You don't say! I thought I recognized your voice. This is Elmer, one of the department team members.

Gainwell: Elmer? I didn't know you worked at Polly's. How long have you been there?

Elmer: I've worked here for almost six months, working part-time in the morning before my real job at Gainwell. Since I'll be at that department meeting, I'll just go ahead and bring the order myself and waive our standard delivery charge, since I'll be there anyway.

Gainwell: Thanks for the offer, here is our order.

Second question

What should happen next to stay in compliance and avoid a COI?

C Gainwell should tell Elmer "No thank you," follow the normal delivery process, and pay the delivery fees.

A Elmer should deliver the food order to the Gainwell New Stuff Department himself.

B Elmer should still have the order delivered by the delivery company but waive the delivery fee in the system.

RECAP

Click Here to review Gainwell Conflict of Interest and Secondary Employment...

There is another situation in the next room that requires your attention!

A fraudster calls the Gainwell Technologies call center and impersonates a hospital executive. They give a sense of urgency and claim they need help changing the email address on their account before a big meeting. Their goal is to trick a payment processor into getting access into the portal and giving the bad guy access to the providers portal so they can control the account, access Remittance Advices, and redirect payments to themselves...

Spy carefully

Call Center Staff: Thank you for calling Gainwell Technologies. How can I help you today?

Hospital CFO: The admin on our Medicaid portal just left her job without notice and I need to change the email address on our account.

Continue

Call Center Staff: I can help with that, but I need you to verify some information on the account. What is your organization NPI?

Hospital CFO: Oh that's great. She has left me high and dry, and I have a big meeting today. I really need access to get information for that meeting.

Call Center Staff: I understand. What is your organization's NPI and who am I speaking to?

Hospital CFO: NPI 1112223334. This is Sneeky, I am the CFO.

Call Center Staff: What is the provider's name and service address?

Spy carefully

Hospital CFO: Happy Health System. 123 Maint Street, Irving, TX, 75014.

Call Center Staff: I can send a password reset email to the email address I have on file.

Continue

Hospital CFO: Will this take long? The meeting is happening soon.

Call Center Staff: It will take a few minutes. What is the email address for the portal account?

Hospital CFO: It is billing@HHSystems.com.

Call Center Staff: Thank you for verifying that. I am only allowed to send password resets to the email that I have on file for the portal account...

(the call center staff does not say the email address that they are looking for on the account. It is billingbetty@HHSystem.com)

Hospital CFO: I must get access to the portal to gather information for my meeting. Can you send the password reset to billing@HHSystems.com for me?

Second question

What should the call center staff member do next?

A The staff member was very helpful but should have sent the password reset to the new email address to help the hospital CFO so he could have the information before his next meeting.

C It makes sense that the CFO wouldn't have access to the former employees' account, so updating the email address and sending the password reset to the new email address would be a good idea.

B The call center staff should follow the account process for updating email addresses on provider portals and password resets.

RECAP

Click Here to review Gainwell Fraud tips and processes...

There is another situation in the next room that requires your attention!

It is the holiday season and Matt, who works for Gainwell, just received a call from Jim, who works for one of the suppliers that Matt works with. The supplier offers Matt an all-expense paid trip to see the Christmas Tree in Rockefeller Center...

Spy carefully

Matt: Hello, this is Matt.

Jim: Hey Matt, I have some exciting news for you. Because you have been such a great customer for us this year and we are hoping to earn your business with your new projects coming onboard next year, we want to give you a 4-day trip to New York City for you and your spouse to see the Christmas tree in Rockefeller Center. If you provide your information, we will get the flight and hotel booked.

Continue

Matt: This is awesome news. My wife has always wanted to go to New York.

Jim: We will cover your flight and hotel, and your will be responsible for any food, entertainment and other incidentals. We can send you the first or second week of December. I need to know by Monday, so we can secure a good price on the flights.

Matt: I will speak to my wife and follow up with you on Monday.

First question

What should Matt do next?

C Matt needs to get approval from his manager and the Ethics and Compliance Department, before he can accept the trip to NYC.

A Matt knows he has plenty of PTO left, so he just needs to confirm that his wife can take time off from her job.

B Matt just needs to ask his manager and if his manager is okay, confirm that his wife can get away from her job.

RECAP

Click Here to review Gainwell Gifts and Entertainment policies...

You have done some great sleuthing and unlocked the next number for the suitcase!

Congratulations! You now have your second secret number to open the briefcase, write it down and keep investigating...

Continue

Correct

New number obtained

I have discovered you being non-compliant, try again...

I have discovered you being non-compliant, try again...

I have discovered you being non-compliant, try again...

I have discovered you being non-compliant, try again...

map/missions

Mission 01

Mission 02

Mission 03

you have completed mission 2. don't forget the number you just discovered! It is 1 of 3 you will need to unlock the suitcase at the end!

What is the correct order?

Incident Reporting

Click on each step to learn more, then click the arrow to organize and sort the steps for Incident Reporting.

REPORT

OBTAIN andDOCUMENT

BE ON ALERT

ASSIST inInvestigation

Congratulations! You now have your third secret number to open the briefcase, write them down and DON'T FORGET...

Continue

New number obtained

Correct

map/missions

You are almost there, you are just 3 digits away from earning your gainwell secret agent badge...

Mission 01

Mission 02

Mission 03

Final Mission

Did you SAVE your Password?

What is the 3 digit code to open the case?

Mission accomplished!

You have been promoted to Secret Agent Congratulations! Click the blinking key symbol below, which will redirect you to the form you must complete in order to have your name entered in the drawing for Gainwell swag!!!

Badge #: 2025GWAK

COMPLIANCE EMPLOYEE

gainwellSecret Agent

S.P.Y

You will need your badge number for the survey!

Are you giving up?You were very close to becoming a real secret agent

If you leave, you will have to start over again.Are you sure you want to leave?

Continue

Exit

1. In the subject line, type “[Encrypt]” along with your email title/subject 2. From a new message in Outlook: a. Click Options b. Encrypt c. Encrypt Only Our policies require sensitive or confidential information be identified or marked appropriately so that we know how best to protect and secure that information. 3. Sensitivity labels. When you’re working in Microsoft applications, such as Outlook Email, Word, and Excel, you will be asked to assign a data category to the files you’re working on in these applications. Documents containing PHI/PII should be classified as CONFIDENTIAL PHI/PII. Documents in this category will be automatically encrypted, even when they are emailed.

Report: Report your concerns to the Compliance and Ethics department: call, click, or email. Call the Gainwell country-specific hotline: o United States, PR, USVI, Canada: 833-331-1349; or o India 022 5032 3046. Click www.gainwelltechnologies.ethicspoint.com; or Email: compliance@gainwelltechnologies.com

Riddle 3/4

I live inside your choices, invisible but true. I tell you what is just, in all you say and do. I am not written down, yet I shape your every act. What am I?

Obtain and Document: Obtain copies of any documents, emails or phone calls involved so when asked, you can share them. Document what occurred. Be sure to include who, what, when, where, why and a timeline of events.

It seems that someone is trying to trick you...

Go ahead

It seems that there are rules regarding gifts...

Go ahead

It seems that there are rules regarding email encyptions...

Go ahead

Assist in the Investigation: Respond in a timely manner to any request from the Compliance and Ethics Department for more information and details on the incident.

Be on Alert: Look for potential ethical concerns, dishonesty, fraud, waste, abuse, policy violations, letters sent to the wrong address, or emails sent to the incorrect recipient. If something doesn’t seem right, take action, speak up and voice your concerns.

It seems that there are potential conflicts of interest with secondary employment...

Go ahead

Riddle 1/4

I am the compass, the rules to obey. Guiding your actions in work and play. I tell you what's right, what not to do. I'm the standard that governs you. What am I?

Riddle 4/4

I break the wall that keeps things secure. I expose what should remain obscure. I am the slip, the fault, the flaw. Correct me quickly, or face the law. What am I?

Great job!! This staff member made good choices. Gainwell should avoid the appearance of impropriety by accepting benefits that they would not normally receive. If Elmer has not already reported his part time employment, he should report his outside employment to his manager and disclose on his conflicts of interest questionnaire.

Riddle 2/4

I hide the secrets that belong to one, exposing me can't be undone. I am personal, sensitive, and locked away. Handle me right, or risk dismay. What am I?

Great job!! This staff member made good choices. 1) Employees may accept occasional unsolicited gifts from Non-Government Employees which are of nominal value but may never accept gifts of cryptocurrency, cash, or cash equivalents, such as gift cards, nor should any gifts be accepted from a supplier to a current or near imminent procurement. In the scenario, because the gift is so lavish and it could be close to additional procurement, guidance should be sought from the Compliance and Ethics team. 2) Workforce members may accept an offer of attendance, including reasonable hotel and meals, at a Gainwell business related conference or event in which they are participating in their official capacity as a speaker or panel member. 3) Employees who are uncertain about how to handle a particular situation regarding a gift that has been offered to him/her should consult a supervisor and contact the Gainwell Compliance and Ethics team for guidance. 4) Business Courtesy includes gifts, gratuities, meals, refreshments, transportation, lodging, entertainment, or other benefits to or from persons, government agencies or companies with whom Gainwell does or may do business.

Great job!! This staff member made good choices. Never give hints or give out information to a caller, like the email address on file. Always ask the caller for the information. If they can’t verify what you have on file, they don’t get the information we have.