Analysis of cyber exercises approaches

Raising awareness of the organization’s employees comes down to cyber exercise. They can target both an individual employee and specialists in general. This is implemented mainly in four stages of organization of the cyber exercises. In the first stage, the purpose, scenarios, evaluating system of results for their execution are defined, and scenario-modeling environment is established. It is tested for compliance with the purpose of cyber exercises within the second stage. In the third stage, cybersecurity scenarios are being developed. The results of the execution are evaluated in the fourth stage. This is due to the relevance of the analysis of approaches to the organization of cyber exercises. In solving this problem, it was established that there was no uniform interpretation of this concept. First, such ambiguity of interpretations is associated with the direction of cyber exercises. Therefore, approaches to their organization are focused on obtaining theoretical knowledge, practical skills, and cybersecurity skills. Primarily, an incident detection and prevention approach is common. An other common approach is assessment of cybersecurity through penetration testing. The application of these approaches can be generalized and organized as a game