This paper presents a theoretical framework that categorises the design paradigms in serious games developed for cybersecurity training. This theoretical framework was developed based on game design factors responsible for the player’s decision-making process and their role in signifying morality in the gameworld. The model’s development was followed by an evaluation process constituting in-depth semi-structured interviews conducted with seven professional game designers with industry experience.