Well, in this case for creating a strategy for maritime cyber security in the South Baltic. Let us explain what we are planning to do. A SECMAR Cyber war game exercersise will take place in October, 2021.
Introduction
New technologies are changing how industrial production and service systems are organized and delivered. While these are sources of great value for evolving societies, they result in increasingly complex socio-technical systems. On the other hand, cybercrime evolves by keeping ahead of system security. In order to pre-empt and mitigate cybercrime, system developers and stakeholders must effectively anticipate attacks on increasingly complex systems and be able to implement preventative solutions in time.
Cyber wargames are undertaken by stakeholders to develop knowledge and insight about the future of cybersecurity and cybercrime. By simulating an experience of the evolution of cybercrime and cybersecurity in the context of emerging technologies and capabilities, stakeholders are able to identify new threats and killchain variations, and in turn, generate options for better mitigation, deterrence, and protocol development. The insights generated in cyber wargames provide the foundation for refreshing and updating cybersecurity strategies and policies.
Undertaking the cyber wargame 1) challenges individuals’ imagination, sensemaking skills, hypothetical and conditional reasoning, and puzzle solving skills, and 2) provides a team experience in which stakeholders learn together, create together, share information, and develop a new shared language to describe emerging futures together.
Workshop
A cyber wargame is a immersive role-playing simulation of a dynamic situation. Teams are assigned to play the roles of an attack team and a response team in hypothetical situations that focus on different emerging technologies and capabilities. A typical cyber wargame lasts two rounds, where one team is presented with a future technological capability vignette and is tasked with imagining a cyberattack from or with it. The attack team then presents the details of the attack to the response team who is tasked to 1) resolve the threat, and 2) pre-empt the threat. The teams then discuss together both the attack and the solution to explore in detail the threats and mitigation strategies.
Preparation
Wargame preparation requires “a playbook” complete with a description of the current state-of-play (hereafter “situation analysis”), validated future technological capability vignettes (hereafter “scenarios”), and materials and resources (hereafter “cards”) that players can draw upon in the wargame. This requires:
-Interviews with experts to develop the situation analysis;
-Horizon scanning to identify emerging technologies in the domain of interest, in this case, maritime and offshore economies;
-Scenario text prompt development
-Scenario validation through online surveys
-Analysis of the survey data to 1) forecast their application horizon 2) iterate the scenarios, and 3) develop cards.
Keep posted for more information!
//TEAM SECMAR
