Today, companies are increasingly susceptible to cyberattacks, making preparedness essential for organisations of all sizes. One of the ways organisations build this readiness is through Tabletop Exercises (TTXs) – simulated scenarios designed to assess an organisation’s response capabilities in the face of a cybersecurity incident. TTXs allow participants to brainstorm and collaboratively navigate hypothetical crisis situations without real-world consequences.

However, workplace dynamics can sometimes hinder effective participation, as the fear of proposing wrong decisions and the apprehension of appearing less competent in front of colleagues can still stifle creativity.To address this challenge, a new book by Associate Professor Roberto Dillon, Associate Professor in Information Technology at the Singapore campus of James Cook University (JCU in Singapore), introduces a creative approach to strengthening cybersecurity readiness.

Titled The Cybersecurity Game Master: From Role Playing Games to Tabletop Exercises That Engage and Inspire, the book looks into how organisations can improve their cyber crisis preparedness by making TTX scenarios fun and engaging. The book reimagines traditional tabletop exercises by incorporating elements from Role-Playing Games (RPGs). Professor Dillon’s approach introduces gamification to encourage collaboration, creativity and active participation.

“By redesigning real-world cybersecurity roles – such as system administrators, forensic investigators, risk managers and legal advisors – with RPG-inspired attributes and abilities, teams can work through simulated cyber incidents in a more engaging way while still addressing realistic challenges,” explained Professor Dillon.

Each scenario unfolds as a structured “quest” guided by a Game Master, replacing the traditional TTX facilitator. Participants must use their roles and skills to respond to incidents, minimise financial and reputational damage, and make critical decisions under time pressure. The book also includes ready-to-use templates, sample documents and pre-designed character roles, enabling organisations to quickly integrate the exercises into existing recovery plans and playbooks. Since its release, The Cybersecurity Game Master has achieved notable recognition, at one point reaching #1 Best Selling New Release and #8 overall on Amazon in the “Security Architecture & Design” category.

Check out Dr Roberto Dillon’s staff and research profiles.

Find out more about IT courses at JCU in Singapore.

Find out more about the Singapore campus of James Cook University.

Contacts

Associate Professor Roberto Dillon roberto.dillon@jcu.edu.au

Media: Ms Pinky Sibal pinky.sibal@jcu.edu.au / Ms Hoe Shu Rin shurin.hoe@jcu.edu.au