I've kept a post-it under my keyboard for years with "How do you keep a security auditor busy?" written in a pigpen cipher.