OWASP
Describe the alternative cheating rule
Cheating is a very good way of getting cards played that may be important for the threat modeling, but that otherwise wouldn’t get played, but it can be hard to do it since we haven’t really said anything about how which is too bad as it is a really fun game rule.
I was thinking that the alternative cheeting rule could be like this:
In Microsoft's EoP guidance, they recommend cheating as a good game strategy. This is how you can incorporate cheating. Let the players cheat by allowing them to play another suit than the suit in play despite having cards in the choosen suit or the trump suit on hand. This way, score points for applicable threats. If the player is discovered at a later time by two or more players, withdraw the point that the player was awarded for cheating.
Got some feedback from Adam. Opening up for giving minus point may have the adverse effect of stopping cheeting. It would be better to look at it as bluffing. We should still say a bit more about how bluffing could be utilized, however, as well encourage it in the rules.