Incidents
Respond quickly while facts are incomplete and the organization is still operating.
Executive decisions. Real tradeoffs. No perfect answers.
In DevelopmentDecision PointCISO
A scenario-driven cybersecurity leadership experience for educators who want learners to practice the decisions behind security programs—not just the technology.
- Risk JudgmentPrioritize when everything matters.
- Leadership TradeoffsBalance people, money, mission, and time.
- Executive CommunicationExplain decisions to nontechnical leaders.
Decision BriefIN DEVELOPMENT
08:15 • Critical IncidentProduction systems are failing while the board requests an immediate risk briefing.
ContainmentAct now or preserve operations?
Business ImpactWhat can the organization tolerate?
CommunicationWhat does leadership need to know?
Risk AcceptanceWhich tradeoff can you defend?
Operational PressureDecision ConfidenceStakeholder Impact
Concept preview only — not the final game interface.
What learners must balance
Security leadership is a system of competing pressures.
Decision Point CISO is being designed around the tensions security leaders actually have to manage.
Risk
Choose what to accept, mitigate, transfer, defer, or escalate—and explain why.
Budget
Allocate limited funding across tools, staffing, training, resilience, and technical debt.
People
Balance staffing, burnout, capability, accountability, and organizational culture.
Board & Executives
Translate cyber risk into business decisions leaders can understand and act on.
Continuity
Protect the mission while making difficult choices about availability and recovery.
Built for teaching
Use the decision as the middle of the lesson—not the whole lesson.
The value is in the reasoning before the choice and the debrief after it. The game should give every learner the same problem so educators can compare how they approached it.
- 01BriefSet the organization, learning objective, constraints, and available information.
- 02DecideForce a choice where every option has consequences and incomplete information.
- 03RevealShow new information and consequences that test the learner's assumptions.
- 04DebriefCompare decisions, alternatives, evidence, communication, and second-order effects.
- 05AssessEvaluate reasoning, risk judgment, communication, and professional decision quality.
Planned scenario families
Leadership problems, not trivia questions.
These are planned directions for the game. They are intentionally labeled as planned until the playable scenarios exist.
Incident Leadership
Ransomware, service disruption, containment, recovery, disclosure, and business continuity.
PlannedThird-Party & Supply Chain
Vendor risk, inherited exposure, contractual pressure, operational dependence, and escalation.
PlannedBudget & Workforce
Hiring, retention, security tooling, technical debt, training, and competing investment priorities.
PlannedBoard, Legal & Reputation
Executive briefings, regulatory pressure, public communication, ethics, and defensible decisions.
PlannedTeach the skills today
Use existing Hub resources while the game is being built.
The interactive experience is not live yet, but the decision-making activities, rubrics, and briefing tools below are usable now.
Incident Decision TabletopRun a structured incident decision exercise today.Open resource →
Ethical Reasoning RubricEvaluate how learners justify difficult choices.Open rubric →
Briefing RubricAssess executive communication and presentation quality.Open rubric →
Executive Security BriefingPractice converting cyber evidence into leadership decisions.Open assignment →
Connect the learning path
Build toward executive judgment.
Use Lesson Plans to establish concepts, Assignments to apply them, Labs and Challenge to practice, and Assessments to measure reasoning before moving into executive decision scenarios.
Help shape Decision Point CISO
Tell us what leadership decisions, industries, or classroom use cases would make the experience most useful.