Riskio
Turning cyber risk into learning.
Riskio is a simple, hands‑on way to explore how cyber risk behaves in real environments. It isn’t a product or service — just an educational project built in spare time to help people understand risk more clearly.
The game uses cards, boards, and scenarios to show how threats emerge, how decisions shape outcomes, and how organisations adapt under pressure. It turns abstract concepts into something you can see, move, and discuss.
Riskio is designed for educators, students, and professionals who want a practical way to talk about cyber‑security without technical complexity. No background knowledge is required. The focus is on clarity, interaction, and meaningful learning.
If a simple game helps someone make a better decision in their real work, it has achieved its purpose.
What is Riskio?
Riskio is a simple, hands‑on game that shows how cyber risk behaves. It uses cards, boards, and scenarios to make threats, decisions, and consequences visible. The goal isn’t realism or simulation — it’s clarity.
Riskio helps people explore how risk moves, escalates, and changes over time, without needing technical knowledge.
Identify Threats
Analyse Risks
Defend Your Network
Why It Works?
Cyber risk is easier to understand when you can see it. Riskio turns abstract concepts into something you can handle, discuss, and reflect on. It encourages collaboration, critical thinking, and practical conversation.
The game focuses on simple mechanics that reveal how decisions shape outcomes. This makes learning more engaging and memorable than traditional awareness training.
How It’s Used?
A facilitator introduces a scenario, reveals threats, and guides players through decisions. Each turn shows how risk evolves and how choices influence outcomes. Sessions end with reflection on what happened and why.
Riskio can be used for short demonstrations, full workshops, or repeated play to explore different strategies.
Who has used Riskio?
Used by educators, trainers, and security professionals to deliver engaging and evidence-based cyber security learning experiences.
Universities
Schools
Corporate Training
Government Agencies
Cyber Bootcamps
Proven Research Impact?
Developed through academic research and widely cited within the cyber security education community, Riskio demonstrates the value of game-based learning for security awareness and risk assessment.
400+
Academic Citations
Verified Google Scholar
15+
Countries Riskio game sent to
Australia
Belgium
Canada
Chile
Denmark
Kuwait
Germany
India
Italy
New Zealand
Netherlands
Norway
Switzerland
United Kingdom
USA
How to Play Riskio
1. Choose Threat Category
The Attacker (A) selects the top card from any one of the STRIDE Attack Card suits.
2. Plan the Attack
Attacker (A) reads out how they would use this attack on the game board.
3. Select the Defence
The Games Master (G) asks each Defender (D) in turn to show their defence card and explain the motivate why they have chosen it.
4. The Assessment
Players with guidance from Games Master discuss the attack and defences.