The scale of threats from Cyber are ever-increasing across many industries, particularly with the rising digitisation of infrastructure and critical services. Therefore, it is vital that all staff have a better understanding of the causes and potential implications of cyber-attacks. The Dstl Cyber Game has been developed to raise awareness of key cyber-security challenges in an engaging and interactive way to address this growing issue.

Cyber card game background

Background

As the threat from cyber-attacks rises across all sectors, and the threat to both Operational Technology (OT) and Information Technology (IT) grows year on year, it is increasingly important to ensure that employees (one of the key lines of defence against these attacks), are aware of the potential threats, and understand the impact these attacks can have on an organisation if they are successful.

Many traditional training courses rely on PowerPoint presentations or briefings to highlight some of the key issues, which can be less engaging than working together in a game.

The solution

The Defence Science and Technology Laboratory (Dstl) have created an informative and engaging Cyber Game, based on a Commercial Port Infrastructure scenario, to enable teams of employees to play the role of an adversary and put together cyber-attacks against the port facility.

Guided by a facilitator, the game mechanics are intended to be simple and accessible for all, with the primary goal being to better understand the ‘cyber kill chain’ (the phases of a cyber-attack), and the stages that an adversary would have to go through in-order to have a malicious effect on critical infrastructure.

By working through the process, teams will gain a better understanding of how an adversary may gain intelligence about an organisation, get a foothold on a network, the effects they might deploy, and the impact it could have.

Key benefits

  • The game is fun and interactive: a great icebreaker and ideal for team building sessions.
  • It is multidisciplinary and ideal for bringing teams from different areas within a business together.
  • Low barrier to entry. With an experienced facilitator, there is no cyber experience or expertise needed from the players.
  • Increase awareness and knowledge of cyber security. Staff will understand cyber security issues, experience approaches and techniques employed by cyber attackers, and understand the critical need for effective protection measures and responses.
image (9)

Potential applications

Cyber card game application training new joiners

Training new joiners

Ideal as part of a wider suite of induction briefs and mandatory training. The Cyber Game can be used as an engaging way to highlight some key cyber security principles and challenges for new joiners which can then be built upon through wider training materials and courses in their individual roles.

Event use

This game can be used as part of wider events such as Military Exercises and Tabletop Exercises such as Business Continuity Planning, and is already in use at Dstl for these purposes. The game can be used as an icebreaker for groups of people who have not worked together before.

Cyber card game event use
Cyber card game wider use

Wider training

The game can be used as part of a wider suite of training tools for both internal general staff and security specialists.

Speak to us about licensing

If you would like to discuss this technology or collaboration opportunities with our team, please get in touch below.

"*" indicates required fields

This field is for validation purposes and should be left unchanged.