People have asked a number of times about the card decks I use to teach risk models. Here are the links below where you can pick them up. I am working on a storefront where I can buy them in bulk and offer them at a lower price.
The Balanced Attacker Model card deck, which incorporates elements of the FAIR framework to balance attacker strength with control effectiveness and asset value. Uses the NIST Critical Infrastructure Framework.
I also offer customized and branded card decks for in-house risk management training.