Gamifying Cyber Governance

Executive Summary 

Game implementations that simulate real-world cybersecurity scenarios can improve student engagement and understanding of governance and policy. This paper demonstrates the benefits and creation of a 3D virtual escape room tailored for cybersecurity governance education by using scenarios. The escape room approach provides unique student engagement, comprehension, and motivation. The design also tries to include and combat real-world problems, such as AI generative applications. Educators and institutions can onboard and adopt immersive gamified learning experiences that can improve and promote cybersecurity comprehension.

Background 

Games are an untapped, although design-intensive commitment, to be used as interactive educational tools. The potential is to improve and offer unique engagement and learning outcomes by moving beyond traditional lecture formats. Recent educational research emphasizes the value of immersive experiences in helping students build practical skills and retain complex concepts.

Virtual escape rooms have been highlighted to provide real-world learning objectives in scenario problem-solving. Studies across disciplines demonstrated how escape rooms motivate an understanding of the importance of cybersecurity governance and policy education. There would be implications of risk assessment, policy implementation, and business continuity issues. This is a new proposal that needs more empirical research and testing, but this new innovation can help break the monotony of traditional learning practices in cybersecurity.

Impact 

Cybersecurity governance and policy are complex and can change in different domains and industries. Learners can struggle to synthesize risk management frameworks with practical decision-making. Traditional instructional methods often fail to sustain student interest or equip learners with applied skills other than understanding textbook concepts, and not how it’s actually implemented in businesses today. Conventional teaching approaches already leave students ill-prepared for real-world governance roles. This contributes to gaps in workforce readiness and organizational resilience.

Introducing immersive interactive learning formats like virtual escape rooms directly addresses these issues slightly. Giving real-world stimulus would only help students understand what is actually done during set scenarios of cybersecurity governance. This provides students with a safe environment to experiment, analyze, and make decisions.

Mitigation 

Education in cybersecurity governance and policy by using gaming, such as a 3D immersive virtual escape room, simulates real corporate environments and risk scenarios. The escape room offers problem-solving scenarios that require students to identify risks, match security frameworks, and draft policy responses. This promotes deeper cognitive engagement, encouraging active learning and critical thinking differently. Student surveys showed increases in engagement, satisfaction, and perceived understanding compared to traditional methods.

Relevance 

Educators, cybersecurity trainers, and academic institutions should care because the transition to interactive and immersive teaching can strengthen student preparation for real professional challenges, as AI can write traditional papers and answer tests. Cybersecurity governance professional is a field where practical competence is critical. Training effectively through gaming can help bridge the gap with the industry demand. The benefits of gaming for cybersecurity learning include higher motivation, deeper comprehension, and readiness for real-world governance tasks. Academic integrity can also be more consistent with more hands-on user interaction in the era of generative AI, where traditional assessments are increasingly vulnerable.

References 

[1] Hasan, K. F., Hughes, W., & Rahman, A. (2026, February). Gamifying Cyber Governance: A Virtual Escape Room to Transform Cybersecurity Policy Education. arXiv preprint. https://arxiv.org/abs/2601.10852

[2] Boyle, E. A., et al. (2016). An update to the systematic literature review of empirical evidence ofseriousgames.Computers&Education.  https://www.sciencedirect.com/science/article/abs/pii/S0360131515300750

[3] Scherb, C., et al. (2023). A serious game for simulating cyberattacks to teach cybersecurity. arXiv preprint. https://arxiv.org/abs/2305.03062

[4] Michel-Villarreal, R., Vilalta-Perdomo, E., Salinas-Navarro, D. E., Thierry-Aguilera, R., & Gerardou, F. S. (2023). Challenges and Opportunities of Generative AI for Higher Education as Explained by ChatGPT. Education Sciences, 13(9), 856. https://doi.org/10.3390/educsci13090856