This paper introduces CollabSec, a new tool for studying risk assessment in a collaborative online environment. Players decide how to allocate limited resources to apply controls to various assets to mitigate threats and protect a network. A set of rules determines the impact of these decisions on a variety of risk outcomes in an organization. The game will be used to teach and train students and employees, as well as perform empirical research.