Let’s start with a thorny concept most of us have heard of: cybercrime. It’s a mature industry with an extensive professionally run underground economy. As you might know, the cybercrime economy is based on the development and distribution of sophisticated tools to carry out large-scale fraud attacks, consumer-data breaches and politically motivated distributed denial-of-service (DDoS) attacks. These attacks on financial institutions, retailers and governmental agencies result in the loss of billions of dollars every year.
Now, imagine that you’re a managing director at a large corporation. You’re going about your normal business day when… BAM! The corporate website goes down; you learn that the call center is being flooded by panicked customers; and members of the media are calling you to comment on the surge of negative comments on your Twitter page. What should you do first? How are you going to respond to this crisis and return your business’ functions to their normal state?
These and other questions were running through my clients’ minds. They wanted to investigate how they might be affected by a hypothetical cybercrime, and they were asking questions. “What if we lost electricity?” “What if we lost control of the website or our mobile apps?” “What if sensitive customer data were stolen?” “What would we do?” Instead of waiting for a crisis to occur so that they could learn from the school of hard knocks, they decided to simulate a handful of devastating “What ifs” ahead of time in the form of a game.
Because I had been involved in planning the scenario game, I knew which artifacts to gather: the playing cards, the transcript of moves and dialog, and the list of team members, stakeholders and game goals. I translated the transcript of moves and dialog into 60 thumbnail-sized sketches. While this might sound like a lot of work, it took only four hours to complete, and the entire story fit onto four pieces of 11 × 17-inch (or A3) paper. This storyboard, or “wireframe,” made it easy for the scenario master and I to quickly arrange the scenes into a sequence that matched the overall flow of the game.
I designed each page to be a standalone worksheet that focuses on a particular problem encountered during the game, the people involved and the decisions they made. For example, the page below illustrates the probing questions of the media team and the reaction of the business team. For those of you wondering about the time required to ink the final pages, it was about one hour per page.