Preliminary design of a new approach to choose cyber exercise methodologies for critical infrastructures
Georgios Makrodimitris, Panayiotis Kotzanikolaou, Christos Douligeris · 2018
The Critical Infrastructures (CIs) whose assets, systems, and networks, whether physical or virtual, are considered so vital to the whole world that their loss or destruction would have a crucial effect on security, national economic security, or safety, or any combination of them. Therefore, security training and awareness is a very important security control for CIs, whose operators and administrators should be continuously trained to be ready to face emergencies, like cyber-attacks. For this reason, it is considered necessary and demanding that the CIs should participate in cyber exercises, which offer such training and preparation to face cyber-attacks. Since several cyber security exercises methodologies have been developed by various organizations, the question is which cyber exercise methodology is more suitable for CIs. This research compares the most known cyber security exercise methodologies and proposes a new way to assist the operators in choosing the most appropriate cyber exercise according to their evolving needs.