New edition of Cyber Realm Deck (3rd Edition)

The new deck is really two decks in one. The first deck (Principles deck) includes the ten principal cards and cards 1 – 20, which are question cards. The card backs have a brighter tint. The front has the middle band in orange and the bottom part in green.

Cards 21 to 40 (Information Array deck) have a darker tint. The front has the middle band in green and the bottom part in orange. Card 21 explains three dimensions of information, as described in the CNSS 4011 Annex A. Cards 22 to 30 are definitions of the characteristics of information, the states of information, and types of countermeasures. There is also a wild card. The wild card has no specific function in the game and is added for your benefit. You can choose to incorporate it or not as you see fit.

The question and example cards in the decks have codes in the lower right-hand corner that indicates the answer for that card. The codes are encrypted using a rotation cipher. The number next to the code is what the rotation is. For the principle cards, the code is the first three letters of the answer. For example, if it is decrypted, it would be information hiding. For the Information array deck, the letters represent the Characteristics of information, Information safeguards, and the states of information. More explained in the Information Array section.

Each card also has a QR code. The QR Code will take you to that card’s web page on the site. Some cards will have more supporting information.

Instructions for the Principles Deck

The instructions the Principles Deck are the same as the second edition of the deck.


Step One

Players take the 10 principle cards out of each deck of their own decks.

Step Two

Use question cards (cards 1-20) of the one of the player’s decks as the question stack.
Shuffle these cards and place them face down in a stack to the left of player 1.

Step Three

Turn a question card over.

Step Four

Both players read the question and then place what they think the correct principle card is face down.

Step Five

When both players have placed the card down, then both can turn over their cards at the same time.

Step Six

If both players get the question right they will put that question card face up to the right of
Turned up question card area.
If player 1 gets misses it, it goes in the player 1 missed stack.
If player 2 misses it goes to the player 2 missed stack.
If both players get it wrong it goes in the Both missed stack.

Repeat steps 3 – 6.

After going through all question cards, collect all missed cards, shuffle and put back in the question stack. Repeat steps 3 – 6.

The objective of the game is to get through all question cards in one time through all question cards.

Instructions for the Information Array Deck

Cards 22, 23, 24 are the characteristics of information

Cards 25, 26, 27 are the states of information

Cards 28, 29, 30 are information countermeasures

Cards 31 – 39 are example cards (cards that are examples of the cross-section)

Pick 2 of the three sets. For example, you can pick the characteristics of information and the states of information.

Arrange the two sets into an array, as shown in the diagram below:

The object of the game is to place the correct example card in the appropriate cross-section. In the example below – Card 31, “Javier’s Concern,” indicates that he wants to encrypt his hard drive. As such, it is put in the first row first column since it cross-references storage (hard drive) and encryption (confidentiality).  Players must put all nine cards down in the matrix. If there is a question as to where the card should be placed the answer is on the card – encrypted. For example, on card 31, the lower right hand has the code XON21. This code is a simple rotation cipher and it rotated 21. You will get a three-letter answer. In this case, it will be CTS. The first letter will be either C, I, or A for Confidentiality, Integrity, Availability. The second letter will be P, E, or T for safeguards – Policy, Education, or Technology. The third letter will be S, T, or P for states – Storage, Transmission or Processing. In this case, the answer is C for Confidentiality, and S for Storage.

Adapting the game for your gen cyber experience: For the different things you are teaching, you can create cards or slips of paper with descriptions. Students then have to place the new descriptions in the appropriate location in the array.