• Risk & Regulatory

Cyber Crime Dinner

Cyber security awareness as an immersive crime dinner:

  • Realistic ransomware attack as a role play
  • For 5 to 54 participants
  • Documentable for NIS-2 and DORA

Cyber Crime Dinner

Cyberattacks and security breaches affect every organisation. According to the Verizon Data Breach Investigations Report 2025, human error is a factor in approximately 60 % of all data breaches. This makes it even more important to implement cybersecurity measures and to raise awareness of, and develop strategies for managing, the human risk factor within one’s own organisation. Traditional IT security training courses, whether delivered in a classroom setting or via e-learning, often come across as dry and are only partially effective. At the same time, NIS-2, DORA, ISO 27001 and the IT-Grundschutz require regular, documented cybersecurity awareness-raising at all levels.

The Cyber Crime Dinner is a simulation game in the crime dinner format: participants reconstruct a realistic ransomware attack on a fictional hospital. Taking on various roles, from cyber specialists to doctors, participants learn about attack methods such as social engineering, phishing and AI-supported techniques through discussion, evidence gathering and teamwork. Gamification makes complex threats tangible even without any prior technical knowledge. The format is designed for between five and 54 people and is either run independently or facilitated and moderated either on-site or virtually by PwCexperts. The programme is delivered using a digital or printed game set.

This fulfils the obligation to carry out regular awareness-raising activities in accordance with NIS-2 (Section 38 of the German Information Security Act), ISO 27001, BSI IT-Grundschutz and DORA. As a documented security awareness training programme, each instance of the cyber security simulation exercise can be verified.

Your Benefits

80%

Top rating

80 per cent of participants rated the overall experience as very good. This means that the Security Awareness Training performs significantly better than traditional e-learning courses or training sessions.

5–54

Participants

Ideal for small and large teams: up to six groups of nine people can take part per event. Available as a digital or printed  game set the Cyber Crime Dinner can be played online or in person – we’re also happy to act as the host.

0

Technical know-how

The game deliberately introduces complex cybersecurity topics through storytelling and role play, so no specific prior knowledge is needed.

3

Formats

As a digital or printed game set, or as part of an event the Cyber Crime Dinner can be played online or in person. Our PwC experts are also happy to act as hosts.

How the Cyber Crime Dinner works

Whether moderated by one of our PwC experts or run on your own with the game set: in just four steps you move from preparing the game to real learning transfer.

01Select a format and make an enquiry (1.0–1.5 hours)

Choose between the digital or printed game set and a  sself-run session or a session facilitated by our PwCexperts. You are also welcome to choose whether the Cyber Crime Dinner takes place in person or online.  

For an event hosted by us, our PwC experts will discuss the details and key arrangements with you (including the venue, date and catering).

The Cyber Crime Dinner is held in German as standard. If you would like the English version, please do get in touch with us.

Pricing

Printed Set

You can conveniently order the complete printed game set – complete with sealed sections and all the materials needed for one round of play – right here. 

€ 250,00

one-time

per set including shipping cost

This service is not intended for consumers within the meaning of Section 13 of the German Civil Code (BGB).

Digital Set

You may use the complete digital game set as often as you like for training purposes within your organisation.

€ 2.500,00

one-time

ready for immediate use; can be used multiple times

This service is not intended for consumers within the meaning of Section 13 of the German Civil Code (BGB).

Live Event

A crime dinner moderated by PwC experts on site or virtual, including role assignment and case resolution. In addition, you can build on the knowledge you have gained through play in a workshop with our experts.

On request

including preparation, facilitation, delivery and follow-up – on-site or online

How long does the Cyber Crime Dinner take?

The game itself takes about 1.5 to 3 hours, depending on how much time you plan for discussion and a shared dinner. If you add the optional deep-dive workshop, the full format lasts around three to four hours.

How many people can take part in the Cyber Crime Dinner?

Each group consists of five to nine people playing together at one table. For larger events, up to six groups can be organised simultaneously, meaning a single event can accommodate up to 54 participants.

Do participants need any technical background?

No, participants do not need any prior technical knowledge or specialist knowledge of cyber security. The game deliberately introduces complex topics through storytelling and role-play.

Does the Cyber Crime Dinner meet regulatory evidence requirements?

Yes, the format addresses the requirement for regular awareness-raising under NIS-2 (Section 38 of the BSIG), ISO 27001, BSI IT-Grundschutz and DORA. As a Social Awareness training course, every session can be documented and verified.

In which formats can the Cyber Crime Dinner be played?

The Cyber Crime Dinner is available as a self-guided experience or as a hosted event. You can choose between an in-person or virtual experience. The game set is available in digital (PDF) and printed formats. In the hosted version, a PwC expert takes charge of the entire hosting and guides you and your team through the crime dinner. Optionally, an in-depth workshop can be added to the format, in which topics such as social engineering, phishing and ransomware are explored in greater depth, and specific measures for your company are derived

Do you need our cyber security simulation in English?

No problem – please feel free to contact us after purchasing the digital or printed version. The event can also be held in German or English.

What learning objectives and training aims are achieved through the PwC Cyber Crime Dinner?

Through the PwC Cyber Crime Dinner, participants develop a comprehensive understanding of modern cyber threats, the impact of internal friction points on IT security, and effective

Protective measures. The following aspects will be discussed:

• Physical security: Tailgating

• The ‘least privilege’ principle

• Risks posed by sensitive information accessible to the public

• Psychological Trigger / Social Engineering

• Spotting phishing emails

• The importance of a good culture of error handling

• Ransomware attacks

• Backups and recovery procedures

• The importance of good preparation and emergency drills

The individual topics can be explored in more detail in a workshop after the game. Through reflection on the content, specific knowledge can be introduced and key points from the game can be addressed in a targeted manner.

What materials are included in the Cyber Crime Dinner?

The game consists of the following materials (in printed form or digitally as a PDF):

• 9 character booklets — one booklet per participant, each containing an individual character description, personal background, relationships with other characters, and sealed sections containing clues that are gradually revealed as the game progresses.

• Event booklet / Presenter’s guide — contains the prologue, round-by-round accounts of the events, presenter’s instructions with time limits, and the full resolution of the case.

• Additional information (“Shadow-Wiki”) – a booklet containing background information and technical explanations of cyber security concepts (social engineering, ransomware, phishing), and a glossary of key terms.

• Supplementary materials — such as emails, system log extracts and other in-game documents, which serve as clues.

• Print templates — name badges, ballot papers.

Can the scenario be tailored to our industry?

Yes, the standard scenario (hospital) can also be adapted. Please feel free to get in touch. 

How does the Cyber Crime Dinner differ from other gamified PwC formats?

The Cyber Crime Dinner is an in-person, social event featuring team discussions and a dining experience, which requires no technical set-up. Other formats are designed to be more digital in nature.

Do you have any questions about the Cyber Crime Dinner?