Background
As one of Sweden’s trusted travel agencies, they continuously invest in their cybersecurity culture, not because they have to, but because they want to stay ahead. Their ambition: raise cybersecurity awareness across the entire organization, from developers writing code to executives making decisions, covering everything from secure development practices to social engineering and phishing. With a broad and diverse audience in mind, SJ wanted a format that was engaging and accessible without compromising on technical depth.
Solution
Together with SJ, Irori designed and delivered a day-long event focused on Cybersecurity culture and awareness: Cyberchallenge 2026.
The event opened with a talk session before moving into a Capture the Flag hackathon where participants competed in teams. The format was chosen deliberately: rather than sitting through lectures about Cybersecurity, participants got to experience it hands-on, solving real challenges under time pressure and working together across teams and roles.
Irori handled the full delivery, from designing the challenges to facilitating the event on the day.

Results
The combination of competition and teamwork broke down barriers and sparked conversations about Cybersecurity that a traditional training format rarely produces. The goal was never to turn everyone into a Cybersecurity expert. It was to make sure more people understand what is actually at stake, and SJ delivered on that.
“Having developers, operations, and management solving cybersecurity challenges together was incredibly valuable. The Cyberchallenge format really puts cybersecurity on the map across the whole organization in a way that actually sticks.”
– Philip Ellison, Engineering Manager Cyber Security , SJ
More than 70 SJ employees took part, from developers to managers. That kind of participation signals something important: Cybersecurity is no longer a topic for the technical teams alone. It belongs to the whole organization.