Gamification of Cyber Security Training - EnsureSecure

There is an ever-growing fear of cyber-attacks in the modern workplace and these attacks are increasingly being linked to the human element. Securing this weak point is essential and this can be done through investment into workplace training. The current basic training methods have many issues that discourage the retention of the information learnt during the training. An example of one such issue is the level of engagement that the basic cyber security training provides the non-experienced participants. Low engagement means inefficient knowledge transfer and retention. This paper presents the results of a study aimed at improving cyber security knowledge retention of participants through the use of a conceptual physical card game that could be developed into an e-learning resource. This paper will document the preliminary research, design process and evaluation of the game.