Risk analysis and security policy development are essential components of an educated approach to security. The author discusses an online security role play scenario and policy development exercise designed to include Schneier’s five step risk assessment methodology, while developing higher level cognitive, consensus building, communication, and decision-making skills. A Poster Presentation for the Educause Conference, October 24th 2007