Play2Prepare: A Board Game Supporting IT Security Preparedness Exercises for Industrial Control Organizations
Play2Prepare: A Board Game Supporting IT Security Preparedness Exercises for Industrial Control Organizations
复制标题
Play2Prepare：一款支持工业控制组织 IT 安全准备练习的棋盘游戏
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
K. Bernsmed
中科院分区：
文献类型：
--
作者：
Ingrid Graffer;Maria Bartnes;K. Bernsmed
工业控制组织需要比现在更频繁地执行IT安全准备演习。然而，目前的辅助材料有限。本文介绍了一个棋盘游戏，Play2Prepare，它模拟了对电网的大规模攻击。游戏由许多场景和问题组成，旨在引发讨论和知识交流。这个棋盘游戏的目的是支持组织加强他们的事件响应能力。电力行业的初步反馈表明，这种棋盘游戏确实是IT安全事件准备演习的相关工具。
Industrial control organizations need to perform IT security preparedness exercises more frequently than today. However, limited support material currently exists. This paper presents a board game, Play2Prepare, which simulates a large scale attack on the electric power grid. The game consists of a number of scenarios and questions that are meant to trigger discussions and knowledge exchange. The intention with this board game is to support organizations in strengthening their incident response capabilities. Initial feedback from the electric power industry indicates that this board game is indeed a relevant tool for preparedness exercises for IT security incidents.