About IT Lunchroom

What we do

IT Lunchroom publishes free, plain-English lessons for the everyday technology and security decisions people face at work: unexpected login prompts, urgent-sounding emails, sharing files, handling sensitive information, and knowing when to ask for help. Lessons explain the concept first, show the safer choice, and offer optional practice.

Who writes the lessons

Grayson Dodson, IT & Workplace Technology Specialist.

Grayson has spent more than seven years in hands-on IT support and operations, helping people at senior-living communities, heavy manufacturing plants, and furniture manufacturing get their work done. He holds a BS from Appalachian State University and works day to day with Microsoft 365, endpoint support, identity and access, and incident response — which mostly means being the person coworkers walk over to and ask whether an email is real.

That last part is really why this site exists. The questions here are the ones people actually walk over and ask — quietly, often a little embarrassed, usually after something has already happened. Almost none of them are about technology being complicated. They are about nobody ever having explained the judgment call, and about not wanting to look foolish for asking.

Lessons draw on widely accepted security-awareness guidance from sources such as CISA, NIST, and the FTC, and on what actually goes wrong for real people at work. We focus on clear judgment you can apply, not tool-specific or fear-based advice — and we say plainly when the honest answer is that it depends on how your workplace is set up.

How a lesson gets written

Every lesson starts from a real question rather than a topic. We write the answer the way we would explain it to a colleague standing at the desk, then check it against current vendor documentation, because the buttons and menus genuinely move.

Before anything is published it goes through an editing pass that checks three things specifically: that it names real apps, buttons and menu paths rather than hiding behind vague advice; that every product claim is verified rather than assumed; and that nothing ever coaches you to hide something from your employer. Where an action might need reporting, reporting always comes before deleting.

Each lesson shows the date it was last reviewed. If you find something that is out of date or simply wrong, tell us and we will fix it.

How we review content

Each public lesson carries a 'Last reviewed' date. We review lessons when the underlying guidance changes and aim to keep examples current. Content is general education, not professional security, legal, or compliance advice; always follow your own organization's policies.

For organizations

Teams can use IT Lunchroom as a configured training and evidence workspace. The public lessons are free and always will be.

Contact

Questions, corrections, or partnership ideas: privacy@itlunchroom.com.