https://sites.google.com/view/decisions-disruptions/Decisions & Disruptions is a tabletop/role-playing game about security in industrial control systems. D-D players are challenged with managing the security of a small utility company: they are given a budget that they can spend among a range of different defensive options.
Decisions have to be made, taking into account a number of potential threats, known vulnerabilities of the infrastructure, past and ongoing cyber attacks, and of course budget limitations.
The game is best played with 5-8 players plus a Game Master who directs the players, enforces rules and provides the game’s narrative.
Build your own kit and feel free to get in touch if you would like any help running sessions or training game masters.
there's also an academic paper that goes with it