Cybersecurity and Cyberdefense Exercises

Abstract

This Report provides current and potential cyber exercise organizers and coordinators with important points to bear in mind when considering staging an exercise. It does this by examining the After Action Reports (AARs) of a number of national and international cyber exercises, and using information from a series of expert interviews. The report sets out a number of types of exercises which can be conducted, as well as using the AARs and interviews to identify key points and pitfalls from the experiences of others, such as the importance of a clear context for the exercise, and the need for realistic, flexible scenarios.