Riskio

Turning cyber risk into learning.

Riskio is a simple, hands‑on way to explore how cyber risk behaves in real environments. It isn’t a product or service — just an educational project built in spare time to help people understand risk more clearly.

The game uses cards, boards, and scenarios to show how threats emerge, how decisions shape outcomes, and how organisations adapt under pressure. It turns abstract concepts into something you can see, move, and discuss.

Riskio is designed for educators, students, and professionals who want a practical way to talk about cyber‑security without technical complexity. No background knowledge is required. The focus is on clarity, interaction, and meaningful learning.

If a simple game helps someone make a better decision in their real work, it has achieved its purpose.

What is Riskio?

Riskio is a simple, hands‑on game that shows how cyber risk behaves. It uses cards, boards, and scenarios to make threats, decisions, and consequences visible. The goal isn’t realism or simulation — it’s clarity.

Riskio helps people explore how risk moves, escalates, and changes over time, without needing technical knowledge.

Identify Threats

Analyse Risks

Defend Your Network

Why It Works?

Cyber risk is easier to understand when you can see it. Riskio turns abstract concepts into something you can handle, discuss, and reflect on. It encourages collaboration, critical thinking, and practical conversation.

The game focuses on simple mechanics that reveal how decisions shape outcomes. This makes learning more engaging and memorable than traditional awareness training.

How It’s Used?

A facilitator introduces a scenario, reveals threats, and guides players through decisions. Each turn shows how risk evolves and how choices influence outcomes. Sessions end with reflection on what happened and why.

Riskio can be used for short demonstrations, full workshops, or repeated play to explore different strategies.

Who has used Riskio?

Used by educators, trainers, and security professionals to deliver engaging and evidence-based cyber security learning experiences.

Universities

Schools

Corporate Training

Government Agencies

Cyber Bootcamps

Proven Research Impact?

Developed through academic research and widely cited within the cyber security education community, Riskio demonstrates the value of game-based learning for security awareness and risk assessment.

400+

Academic Citations

Verified Google Scholar

15+

Countries Riskio game sent to

  • Australia

  • Belgium

  • Canada

  • Chile

  • Denmark

  • Kuwait

  • Germany

  • India

  • Italy

  • New Zealand

  • Netherlands

  • Norway

  • Switzerland

  • United Kingdom

  • USA

How to Play Riskio

1. Choose Threat Category

The Attacker (A) selects the top card from any one of the STRIDE Attack Card suits.

2. Plan the Attack

Attacker (A) reads out how they would use this attack on the game board.

3. Select the Defence

The Games Master (G) asks each Defender (D) in turn to show their defence card and explain the motivate why they have chosen it.

4. The Assessment

Players with guidance from Games Master discuss the attack and defences.

Created by Dr Stephen Hart, PhD | CISSP | CISM | CSSP

Lead Security Architect | Cyber Security Researcher