Bridging digital and physical threats: A systematic review of serious games and geogames in cybersecurity and disaster management

This study explores the intersection of serious games and geogames in cybersecurity (CS) and disaster management (DM), examining implementations and applications at this convergence. Through a systematic review of 100 games (53 for cybersecurity and 47 for disaster management), it analyzes their genres, learning objectives, spatial features, target audience, and publishing contexts. The results reveal that while both domains heavily utilize simulation, cybersecurity games tend to emphasize individual awareness through puzzles and quizzes, whereas disaster management games prioritize systemic thinking and collaboration via strategy and role-playing. The key finding of this study is the underutilization of geospatial elements in cybersecurity games, despite their relevance for critical infrastructure protection. In contrast, disaster management games often embed spatial thinking as a core mechanic. This gap highlights an opportunity to develop “cybergeogames” that integrate geographic data and spatial reasoning to simulate real-world cyber-physical threats. The paper calls for a new generation of serious geogames that bridge digital and physical domains to enhance preparedness for complex, location-bound disruptions.