Alternative Game Play

Why have alternative game boards and rules?

Riskio was created to be adapted to meet organisation requirements as organisations have different cyber threats and employees within the organisations have different learning requirements. The following are two examples of using gamification to change the game mechanics and how the game boards can be changed to meet organisational requirements.

Alternative Game Board V2 - Version 1

In this example the objective of the organisation is to teach a wide range of vulnerabilities and defences. The players to win must comprise each of the ten locations on the board, as opposed to version 3 where the play needed to purchase six STRIDE tokens after a successful attack.

Four players denoted by Yellow, Red. Green and Blue pawns and associated clear coloured tokens (Size 22 mm)

Associated clear coloured token on board by number shows successful attack by the player (Transparent 20 mm tokens)

Green Tokens awarded for successful defence (Green 25 mm tokens)

Each player has a dice and moves clockwise around the board (Size 12 mm)

The player to first compromise all ten 10 locations the game ends and the player wins (10 locations on example board).

Players can count total number of tokens they played on the board and defence tokens.

Alternative Game Board V2 - Version 2

Game Mechanics Changes: Add tokens players must buy defence cards; the Game board has a new outer ring of colour-coded squares in the six STRIDE categories; The STRIDE selection by player is random by throwing dice; To win, players must successfully defend to buy STRIDE token and collect one from all six STRIDE suits.

Rule Changes:

  1. The player starts with 15 units.

  2. At the beginning of each round, a player can: a) buy a defence card for 10 units (the card is turned over face up); b) buy a STRIDE token for 15 units (only if they just defended against a successful attack (could restrict to STRIDE attack category)).

  3. Player throws a dice: a) If on STRIDE suit the games master selects top card from suit; b) If on “Select any…” player can elect which suit; c) If on “Miss a Turn” player does not have a turn.

  4. The games master reads out the attack, and if the player answers the attack question correctly, they win 10 units.

  5. The games master then throws the dice to decide if the attack was successful, depending on the defence cards the player has purchased.

  6. All the players check the defence cards they have. If successful, then they win 10 units, if they were not, then they lose 5 units.

  7. If the player passes the start, they collect 5 units.

  8. The first player to collect all six STRIDE tokens wins

Riskio alternative game version 3 - riskio out of the box

This game is an adaption of Riskio version 2. It is called “Riskio Out of The Box”, because the game is designed to be played by an unskilled Games Master.

Game Mechanics Changes: Attack cards have the question and answer on them; The Game Board is made up of tiles which are 5.6 cm by 5.6 cm; Tiles can be selected to suit the game requirements, for example if Spoofing was an issue for an organisation more of these tiles could be used.

Tokens to buy defence cards and STRIDE Tokens

Alternative Game Play: each of the six STRIDE categories are colour coded, and first player to complete a successful attack with each category collects a triangle first to collect all six wins the game.

  • Spoofing - Blue

  • Tampering - Green

  • Repudiation - Mauve

  • Information Disclosure - Orange

  • Denial of Service - Pink

  • Elevation of Privilege - Yellow