Tabletop Exercise in Cybersecurity Incidence Response Education

A Systematic Review

الملخص

The increasing challenges in cybersecurity breaches, the scarcity of qualified cyber incident response (CSIR) professionals, and the continuously altering environment due to cyber threats represent a huge issue for the security industry. Consequently, training providers are always looking for innovative answers to the numerous security issues that currently exists. Both the public and private sectors concur those comprehensive cybersecurity measures, which should include training for workers, must be put into place. Many organizations are now providing their employees and cybersecurity incident response teams (CSIRTs) with cutting-edge training to ensure that they can detect and respond to security breaches in the event that they occur. Tabletop exercises (TTXs) can play a critical role in CSIR training and found to be useful across organizations, however, there is a scarcity of studies explicitly focused on TTX for cybersecurity education which can provide insights and the need for further investigations. This research used systematic review to assessed existing TTX and detailed how they are used in cybersecurity education. It was found that TTX can enhances CSIRTs’ awareness, understanding, and preparation, as well as strategic decision-making, allowing them to be better prepared for security crises. Although research on using TTX for cybersecurity education is expanding, this study recommends an urgent need for academic institutions and technical organizations to teach students and employees how to develop and demonstrate technical and non-technical skills. These skills are crucial as it is frequently found to be lacking across organizations. In addition, TTX should be used to supplement traditional methods such as classroom lectures by giving opportunities for practical learning and practice-based approaches to solving real-world problems. This study suggested further research works which can be explore to provide knowledge around TTX for cybersecurity education to support organizational business continuity.