Game Scenarios

Game boards: The design of the game board is fundamental to allow players to experiment with a variety of attacking and defending scenarios.

Alternative Game Board Themes

Riskio game boards can be adapted to different teaching environments. One option is to base the board on a fictional organisation, such as a University Fees Office, where players explore threats and defences affecting day‑to‑day operations. This helps learners visualise how cyber risks emerge within familiar business processes.

Another option is to let players create their own network or data‑flow diagram as part of the game. This mirrors the approach used in Microsoft’s Elevation of Privilege (EoP) card game, designed by Adam Shostack to help software teams identify security risks during the design phase. In EoP, players sketch system components and then use cards to uncover weaknesses. Riskio can use a similar method, allowing players to map out assets, data flows, and dependencies before applying threat and defence cards.

Both approaches encourage deeper thinking about how systems are structured, where vulnerabilities appear, and how security controls interact with real‑world environments.