Card Decks

People have asked a number of times about the card decks I use to teach risk models. Below are a few of the cards. I buy them in bulk so I can offer them at a lower price than direct from the printer.

Shipping:

1 - 3: Free

4 - 10: $10

11 - 25: $20


The Balanced Attacker Model (BAM) card deck consists of 10 attackers, 18 assets, the 23 NIST cybersecurity framework categories, and six risk categories.

This deck uses the NIST Critical Infrastructure Framework to address a number of concepts, including:

Threat Modeling

Loss Scenario Iteration

Tradeoff Analysis

Risk Appetite

Resource Scarcity

Risk Management

Resiliency

Layered Defense

Defense-in-Breadth

Defense-in-Depth

$20

I also offer customized and branded card decks for in-house risk management training.