Preparing for Cyber Crisis Management Exercises

Abstract

In this paper the authors discuss how to create a preparation schedule for exercises (PSE) to support EXCON-teams and instructors for full-scaled combined crisis management and cyber-exercises. The process to create the preparation schedule starts by performing vulnerability analysis to identify the most relevant and likely threats to the organization, before processing historical threats and attacks to further focus our simulation scenario development by planning and designing a socio-technical scenario. Moreover, a plan for simulation that are realistic and based on the organization's maturity will be considered, and finally, in terms of a societal crisis impact exercise necessary lectures will be prepared. After this framework has been reviewed by the HCI International 2020, we plan to test the model when planning for exercises at the Norwegian Cyber Range (NCR) environment. NCR will be an arena where testing, training, and exercise will be used to expose individuals, public and private organizations, government agencies to simulate socio-technical cyber security events and situations in a realistic but safe environment.

A Socio-Technical Regime Transitions Model for Gerontechnology Service Design: Privacy, Information Security and Cyber Security in Focus

“…As part of her 4-year doctoral research program, Østby is developing within a hybrid cyber range platform a socio-technical cyber security readiness assessment tool to support training and education of civilian organization to prevention and proactively manage cyber security crises that can occur with the introduction of digital technology into civil (non-military) societal services and products. This readiness assessment tool was designed using several different socio-technical models [13,14].…”