Cybersecurity Roleplaying Workshop: Design & Implement Engaging Incident Response Exercises
Transform traditional tabletop exercises into immersive learning experiences that cybersecurity teams actively want to participate in.
The Challenge with Current Training
Traditional incident response exercises face persistent engagement problems. Teams often treat them as compliance checkboxes rather than valuable learning opportunities. Participants protect their turf, fight unrealistic scenarios, and check out mentally during lengthy, scripted walkthroughs. The result? Limited skill development and poor preparation for actual incidents.
A Game-Based Solution
This intensive 4-hour workshop introduces Malware & Monsters, a roleplaying framework that applies proven game mechanics to cybersecurity training. By incorporating character-driven narratives, dice-based decision resolution, and dynamic storytelling, you’ll create exercises that technical teams genuinely engage with while building critical incident response capabilities.
What You’ll Learn
Framework Fundamentals
- Core game mechanics that maintain realism while adding engaging unpredictability
- Character development systems that reflect actual organizational roles and technical specializations
- Incident Master facilitation techniques for managing dynamic scenarios and participant interactions
- Three-round structure design that mirrors real incident progression from detection through resolution
-
Practical Scenario Development
- MITRE ATT&CK integration for technically accurate attack modeling
- Inject creation that introduces realistic complications and decision pressure
- Character conflict design that surfaces organizational tensions and communication challenges
- Balance techniques for maintaining educational value while ensuring participant engagement
-
Implementation Strategy
- Organizational adaptation methods for different team sizes and technical skill levels
- Resource planning including preparation time, materials, and facilitation requirements
- Stakeholder buy-in strategies for security leaders implementing new training approaches
-
Workshop Structure
This hands-on workshop combines brief instructional segments with extensive practical application.
Live demonstration: volunteers experience the framework firsthand
Guided development: you build a complete exercise for your organization
Collaborative refinement: cross-team feedback and iteration
Implementation planning: concrete next steps and resources
What You Bring, What You Leave With
What you bring
Laptop with internet access and basic Git familiarity
GitHub account for the open-source scenario repository
Understanding of your incident response structure and typical threats
Authority or influence to change how your team trains
Basic markdown. No roleplaying experience needed
What you leave with
Complete scenario framework, ready to run
Character sheets and facilitation guides for your structure
Template library for developing further scenarios
Implementation roadmap with timeline, resources and stakeholders
Community access for ongoing scenario sharing and support
Why This Approach Works
Research consistently demonstrates the effectiveness of game-based learning for adult education, particularly in technical fields. Roleplaying exercises specifically:
- Increase active participation by creating memorable, emotionally engaging experiences
- Reveal communication gaps that traditional tabletops miss due to their scripted nature
- Build empathy between different organizational roles through perspective-taking
- Improve retention of procedures and decision-making frameworks
Surface realistic conflicts around priorities, resources, and authority
Investment Details
This workshop provides immediately applicable skills for transforming your incident response training program. You will gain practical tools, proven frameworks, and ongoing community support for continuous improvement.
| Duration | 4 hours |
|---|---|
| Format | Interactive workshop with extensive hands-on development. I prefer running it in person, but virtual can be arranged. |
| Group size | 8 to 20 participants, so small-group collaboration works |
| Price | From 3.500 € |
| Deliverables | Complete scenario package plus implementation planning materials |
Contact me to discuss scheduling and customization options for your organization’s specific threat landscape and training objectives.
