Using simulation for effective computer security training

User-awareness continues to be a major hurdle to addressing computer security concerns in the business environment. The aim of this project was to develop a simple but effective training facility for computer security awareness, based on a simulation game that explores different ways in which security can be achieved. Security concepts rarely translate easily into virtual representation. However, by identifying appropriate security components, we were able to construct a business scenario that participants could relate to, rather than relying on simple textbook examples. Measuring the real impact of threats continues to be a significant constraint to a realistic simulator. Risk analysis and better metrics would appear to be a solution to the problem – having an interactive game does not guarantee the successful delivery of an educational goal.