> For the complete documentation index, see [llms.txt](https://docs.material.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-ato-resilience.md).

# Staggered Rollout: ATO Resilience

If you bought the Account Takeover (ATO) Resilience as a **stand-alone**, use these templates to communicate with your users before, during, and after deployment.

| Timing                                   | Template Name                                                                                          |
| ---------------------------------------- | ------------------------------------------------------------------------------------------------------ |
| 14-30 days prior to deployment           | 1. [Introducing Material Security ATO Resilience](#id-1.-introducing-material-security-ato-resilience) |
| 7 days prior to enabling Email Redaction | 2. [What to Expect When ATO is Deployed](#id-2.-what-to-expect-when-ato-is-deployed)                   |
| Deployment completion                    | 3. [Material Security ATO is Here](#id-3.-ato-is-here)                                                 |

{% hint style="success" %}
All templates include customizable content including your organization's name. Be sure to update (or sometimes remove) any inline directions. They're included in brackets and highlighted <mark style="background-color:yellow;">\<like this></mark>.
{% endhint %}

***

## 1. Introducing Material Security ATO Resilience

> **Message Purpose:** To inform your users that changes will be coming soon and why
>
> **Delivery Timing:** Material recommends at least 14 days but no more than 30 days in advance of go-live so users have not forgotten about it.

<details>

<summary><span data-gb-custom-inline data-tag="emoji" data-code="1f4e9">📩</span> Introducing Material Security ATO Resilience template</summary>

Introducing <mark style="background-color:yellow;">**\<your company name>**</mark>’s new information security provider, Material Security—and what it means for you

**Message Body:**

We’re pleased to announce, we’ve partnered with Material Security – an information security company – to protect <mark style="background-color:yellow;">**\<your company name>**</mark> from key account takeover risks.

With Material Security we can:

* Detect account compromise quickly and automate response workflows to cut off access before damage can be done
* Unearth otherwise-hidden abnormal activity by correlating identity, user behavior, data access, and other signals across your productivity suite
* Contain the blast radius of compromised accounts by limiting the ability of attackers to reset password and access sensitive data

Please be on the lookout for additional messages as we get closer to deploying Material Security.

In the meantime, if you want to do a little more research on Material, feel free to take a look at their website here: <https://material.security/solutions/contain-account-takeovers><br>

</details>

***

## 2. What to Expect When ATO Resilience is Deployed

**First, gather screenshots for your ATO Resilience is Deployed message:**

> You need two screenshots for this template:
>
> * **Screenshot A (Account Verification)**
> * **Screenshot B (Redacted Email)**

<details>

<summary><span data-gb-custom-inline data-tag="emoji" data-code="1f4f8">📸</span> How to Get Screenshot A (Account Verification)</summary>

1. Request a password reset on anything associated with your work email.
2. From your inbox, find the **reset request**.
3. Take a screenshot of the **verification**.

</details>

<details>

<summary><span data-gb-custom-inline data-tag="emoji" data-code="1f4f8">📸</span> How to Get Screenshot B (Redacted Email)</summary>

1. From **your email inbox**, open the **Sensitive** folder.
2. Take a screenshot of the secured, **Retrieve Message email**.<br>

   If no emails are in your sensitive folder:

   1. From your email inbox, **mark an email as Sensitive** using the built-in labels.
   2. Wait the length of your Default Locking Grace Period.
   3. Open the email again (**now in your Sensitive folder**) and take a screenshot.

</details>

**Second, fill out the What to Expect When ATO Resilience is Deployed template utilizing the screenshots you gathered:**

> **Message Purpose:** To inform your users about the changes to password resets and how to retrieve email redactions
>
> **Delivery Timing:** 7 days prior to enabling [Email Redaction](/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/enable-email-redaction.md)

{% hint style="info" %}
We also have interactive tutorials about resetting passwords and unlocking emails that you can include in your communication [here](/getting-started/deployment-guides/communication-templates/tutorials-for-end-users.md).
{% endhint %}

<details>

<summary><span data-gb-custom-inline data-tag="emoji" data-code="1f4e9">📩</span> What to Expect When ATO is Deployed template</summary>

**Message Subject:**

Material Account Protection is one week away - how to verify your account going forward

**Message Body:**

As we previously announced, we're preparing to enable Material Security Account Takeover resilience in the next week, to protect \<Your organization name>’s from email-based attacks.

To prepare for these changes, please review the following steps to understand how it will affect password resets and other account verification messages in the coming weeks.

To prepare for these changes, please review the following steps to understand how it will affect password resets and other account verification messages in the coming weeks.

**Password Resets:**

When you reset a password via email, you will first receive a verification email from Material. It looks something like this:

<mark style="background-color:yellow;">**\<Screenshot A: Account Verification>**</mark>

* Follow the instructions in the email to verify your identity using <mark style="background-color:yellow;">**\<mfa provider>**</mark>. Once your identity is verified, the original password reset email will be delivered to your inbox. This quick check with <mark style="background-color:yellow;">**\<mfa provider>**</mark> allows us to make sure the verification message lands in the right hands.
* If you did not request a password reset, click **I did not request to reset my account**.

**Sensitive Emails:**

Material scans for content like credit card numbers or personally identifiable information in your email, then categorizes them as sensitive and redacts them for security. You can then access them via a seamless retrieval flow.

Every protected email is replaced with stub, showing you message properties and a link to retrieval the full message:

<mark style="background-color:yellow;">**\<Screenshot B: Email Redaction>**</mark>

<mark style="background-color:yellow;">\*\*\*\*\*\*\*</mark>

<mark style="background-color:yellow;">**\<Variant A below: Google Drive instructions (delete if using Microsoft)>**</mark>

To access the message, **click the link in the email and then complete the authentication steps** just like you normally do when signing in. Once you authenticate, this message will be put back in your **inbox** for <mark style="background-color:yellow;">**\<your default retrieval grace period time>**</mark>. After that time has passed, you will need to authenticate again when prompted.

Once you retrieve one redacted email, you have **\<your default retrieval challenge session time>** to open other redacted emails without authenticating.

<mark style="background-color:yellow;">\*\*\*\*\*\*\*</mark>

<mark style="background-color:yellow;">**\<Variant B below: Microsoft instructions (delete if using Google Drive)>**</mark>

To access the message, **click the link in the email and then complete the authentication steps** just like you normally do when signing in. Once you authenticate, this message will be put back in your **Retrieved Items folder** for <mark style="background-color:yellow;">**\<your default retrieval grace period time>**</mark>. After that time has passed, you will need to authenticate again when prompted.

Once you retrieve one redacted email, you have **\<your default retrieval challenge session time>** to open other redacted emails without authenticating.

<mark style="background-color:yellow;">\*\*\*\*\*\*\*</mark>\
**Up Next**: We'll let you know when all these features are live.

Thank you for your help and cooperation in protecting our organization! Any questions? Let us know here: <mark style="background-color:yellow;">**\<your preferred contact>**</mark>.

</details>

***

## 3. Material Security ATO Resilience is here

> **Message Purpose:** To inform your users that you’re done deploying
>
> **Delivery Timing:** Deployment completion

<details>

<summary><span data-gb-custom-inline data-tag="emoji" data-code="1f4e9">📩</span> ATO Resilience is Here template</summary>

**Message Subject:**

Material Security deployment is complete and protecting – thanks you for your participation

**Message Body:**

We’re pleased to announce, we’ve completed our Material Security deployment! Thank you for participating over the last few weeks and keeping track of the communication we’ve been sending to you.

As a reminder, your workflow may look a little different now:

* Sensitive emails are redacted and require retrieval to be sure they’ve landed in the right hands. Click the verification link in the email you receive and authenticate via <mark style="background-color:yellow;">**\<your mfa provider>**</mark>.
* When you request password resets, click the verification link in the email you receive and authenticate via <mark style="background-color:yellow;">**\<your mfa provider>**</mark>.

Refer to <mark style="background-color:yellow;">**\<include any internal resource you have describing Material Security>**</mark> if you need a refresher.

Thank you again for your help and cooperation in protecting our organization! Questions or feedback? Let us know here: <mark style="background-color:yellow;">**\<your preferred contact>**</mark>

</details>

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-ato-resilience.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.