Learn to Train Like You Fight

Abstract

This qualitative study includes nine semi-structured interviews with cybersecurity experts from different security-related organizations who are familiar with cybersecurity exercises. Its contribution to cybersecurity workforce development focuses on organizational learning rather than individual skills development and relevant competencies. It was found that the utilization of thematic analysis methods develop individual readiness and expertise. It also enhances the maturity of an organization's processes, roles, communication, and exercise capabilities. Moreover, the exercises increase social trust between individuals and organizations through business-to-business cooperation. However, there were several barriers and challenges in utilizing learned skills and competencies within an organization, including a need to increase the capacity of staff members who participate in the exercise.