Title: Developing Cyber-risk Centric Courses and Training Material for Cyber Ranges: A Systematic Approach

Topics: Security Awareness and Education; Threat Awareness

In Proceedings of the 7th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, 702-713, 2021

ISBN: 978-989-758-491-6

Keyword(s): Security Education, Security Awareness, Cyber Range, Cyber Risk, Course, Training, Cybersecurity, Security Roles, Security Skills, White Team, Green Team, Red Team, Blue Team.

Abstract: The use of cyber ranges to train and develop cybersecurity skills and awareness is attracting more attention, both in public and private organizations. However, cyber ranges typically focus mainly on hands-on exercises and do not consider aspects such as courses, learning goals and learning objectives, specific skills to train and develop, etc. We address this gap by proposing a method for developing courses and training material based on identified roles and skills to be trained in cyber ranges. Our method has been used by people with different background grouped in academia, critical infrastructure, research, and service providers who have developed 22 courses including hands-on exercises. The developed courses have been tried out in pilot studies by SMEs. Our assessment shows that the method is feasible and that it considers learning and educational aspects by facilitating the development of courses and training material for specific cybersecurity roles and skills