Yellow training: a collaborative tCOFELET tabletop serious game for cybersecurity awareness and training
摘要
Serious games offer a promising avenue for effective cybersecurity awareness training due to their proven efficacy as educational tools in many fields. Although recent years have seen progress in developing standards and methodologies for designing serious games, there is a lack of studies on collaborative cybersecurity serious games. Under this prism, this study introduces Yellow Training, an innovative collaborative tabletop game designed to increase cybersecurity awareness for people who use computers individually and as part of their work. The study explores how Yellow Training establishes a Community of Practice through the team-centric Conceptual Framework for eLearning and Training (tCOFELET) which underpins the methodology of this research. Yellow Training implements key game mechanisms such as card-driven actions with associated costs and action points (or vitality points), multi-use cards, events introducing various challenges, and policy cards determining how actions can be performed reflecting realistic cybersecurity practices. Several attack patterns are modeled as tCOFELET Scenario Execution Flows based on cybersecurity standards. Through this approach, learners associate theoretical knowledge with practical skills. The game boards depict the company’s assets and resources, demonstrating how the learners’ actions influence the final results. A comparative evaluation presents the potential of Yellow Training to create collaborative gameplay and its compliance with modern learning theories. A pilot study conducted with postgraduate students demonstrated that the tCOFELET’s key mechanisms (e.g., a common repertoire of actions, action limits) promote participants’ realization of common goals, communication, collaboration, and resource sharing that are important factors in forming a pedagogically productive Community of Practice.