Game-based learning: Cybersecurity awareness month

The Challenge

For the annual cybersecurity awareness month, the objective was to move away from static flyers and articles which historically suffered from low engagement. The Cybersecurity team required a learning experience that could capture the attention of a global workforce while delivering critical safety protocols in a memorable, performance-based format.

The Strategy

I moved beyond traditional instructional design to build a custom, browser-based defensive simulation. I designed a "Cyber Space Invaders" game where gameplay mechanics served as a direct metaphor for defending corporate infrastructure. This transformed "compliance content" into a high-stakes, interactive task where the learner's success depended on applying security principles in real-time.

The Methodology

Utilizing a technical stack of HTML, CSS, and JavaScript, I developed the game within VS Code with assistance from GitHub Copilot. I integrated specific learning checkpoints that aligned with Australian Cyber Security Centre (ACSC) advice: Active Phishing Defense: Power-ups were granted for correctly identifying suspicious email characteristics, reinforcing the ability to spot threats in the flow of work. Credential Rigour: Level transitions and gameplay progress required players to apply principles of secure passphrases and Multi-Factor Authentication (MFA). High-Fidelity Feedback: I designed interactive simulations that mirrored real operational decisions, providing immediate feedback that translated directly into professional practice.

The Data Engine

The game was hosted on the internal company LMS, allowing for direct tracking of participation and completion rates. By sharing the experience into the corporate newsletter via a seamless hyperlink, I leveraged existing communication channels to drive record-breaking engagement for the campaign.

The Result

The initiative dramatically outperformed previous engagement benchmarks, with click rates for this piece 300% higher than previous years. By replacing passive awareness with an authentic, safe environment for practice, we saw a measurable improvement in learner confidence and a significant increase in the voluntary completion of cybersecurity training.

Interactive artifact from this project. Best on desktop, but touch controls are supported.