Game Summary
This page provides a concise overview of Riskio, summarising the purpose of the game and how its core components support cyber‑security learning.
How to use This Section
Use the pages in this section to understand how Riskio works, how sessions are facilitated, and how the game components support learning.
Game Design
Riskio is a serious game designed to help learners understand cyber‑security risks through structured decision‑making, discussion, and collaborative play. The game uses threat cards, defence cards, information cards, and game boards to simulate how organisations identify, prioritise, and respond to cyber risks.
This section explains the core elements of the game, the role of the Games Master, and how the cards and boards work together during a session. Whether used in universities, training programmes, or professional workshops, Riskio provides an accessible way to explore cyber‑security concepts without requiring technical expertise.
Riskio is not a commercial product. The purpose of this site is to explain how the game works and to support educators who wish to use it in teaching or research.
How a Riskio Session Works
A typical session involves:
Teams of players individually work to analyse threats and select appropriate defences.
A Games Master who guides the session, explains cards, and facilitates discussion.
Threat, Defence, and Information Cards that introduce realistic cyber‑security scenarios.
Game Boards that structure decision‑making and help teams prioritise risks.
Reflection and discussion, where players explore why certain decisions on defences worked or failed or most cost effective.
The aim is not to “win” but to understand how cyber risks emerge, how controls interact, and how human decisions influence outcomes.
Who Uses Riskio?
Riskio is used in universities, training programmes, and professional workshops to support cyber‑security education.
What Players Learn
Riskio helps learners:
recognise common cyber threats
understand how defences reduce risk
explore how misconfigurations and human behaviour create vulnerabilities
practise prioritising risks under limited resources
improve communication and collaborative reasoning
reflect on real‑world cyber‑security challenges
The sub‑pages below provide detailed explanations of the game components.
Session Duration
A typical Riskio session lasts 45–90 minutes depending on group size and depth of discussion.
Why Riskio Works
Riskio works because it combines structured decision‑making with collaborative discussion, allowing learners to explore cyber‑security concepts through realistic scenarios rather than abstract theory.