Riskio Game Play Setup

The Game Setup

The game should be played by a team of between 3 to 5 players under the direction of the Games Master. Each team requires a deck of Attack Cards. Each player in the team needs a deck of Defence Cards. The players must attend a short tutorial on Microsoft STRIDE threat taxonomy before the game starts.

Game Rules

Please click on the link for a copy of the Riskio Game Rules.

The Game Boards

The game boards represent the organisation that the game players must consider the possible threats and defences to protect the organisation data and services. The game board can be tailored to a scenario that the players are familiar within their organisation. The game supports three different game boards: Office Diagram (see figure 1), Network Diagram (see figure 2) and Data Flow Diagrams (see figure 3). The game can be played with one or more of these types of game boards.

Figure 1 - University Fees Office Game Board

Attack Deck 78 Cards

The deck is shuffled in respective suits and place face down on the table.

In six suits in 2 to 10, Jack, Queen, King, and Ace:

• Spoofing

• Tampering

• Repudiation

• Information Disclosure

• Denial of services

• Elevation of Privilege