{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,28]],"date-time":"2026-07-28T14:38:05Z","timestamp":1785249485073,"version":"3.55.0"},"reference-count":94,"publisher":"MDPI AG","issue":"5","license":[{"start":{"date-parts":[[2025,5,13]],"date-time":"2025-05-13T00:00:00Z","timestamp":1747094400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>This study introduces a novel approach to cyber defense exercises, emphasizing the emulation of technical tasks to create realistic incident response scenarios. Unlike traditional cyber ranges or tabletop exercises, this method enables both management and technical leaders to engage in decision-making processes without requiring a full technical setup. The initial observations indicate that exercises based on the emulation of technical tasks require less preparation time compared to conventional methods, addressing the growing demand for efficient training solutions. This study aims to assist organizations in developing their own cyber defense exercises by providing practical insights into the benefits and challenges of this approach. The key advantages observed include improved procedural compliance, inter-team communication, and a better understanding of the chain of command as participants navigate realistic, organization-wide scenarios. However, new challenges have also emerged, such as managing the simulation tempo and balancing technical complexity\u2014particularly in offense\u2013defense team configurations. This study proposes a structured and scalable approach as a practical alternative to the traditional training methods, aligning better with the evolving demands of modern cyber defense.<\/jats:p>","DOI":"10.3390\/info16050398","type":"journal-article","created":{"date-parts":[[2025,5,13]],"date-time":"2025-05-13T06:40:23Z","timestamp":1747118423000},"page":"398","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Innovating Cyber Defense with Tactical Simulators for Management-Level Incident Response"],"prefix":"10.3390","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5309-3891","authenticated-orcid":false,"given":"Dalibor","family":"Gernhardt","sequence":"first","affiliation":[{"name":"Croatian Military Academy, 10000 Zagreb, Croatia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6619-2859","authenticated-orcid":false,"given":"Stjepan","family":"Gro\u0161","sequence":"additional","affiliation":[{"name":"Faculty of Electrical Engineering and Computing, University of Zagreb, 10000 Zagreb, Croatia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4188-6357","authenticated-orcid":false,"given":"Gordan","family":"Gledec","sequence":"additional","affiliation":[{"name":"Faculty of Electrical Engineering and Computing, University of Zagreb, 10000 Zagreb, Croatia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,5,13]]},"reference":[{"key":"ref_1","unstructured":"National Institute of Standards and Technology (2018). Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1, Technical Report."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Vykopal, J., Vizvary, M., Oslejsek, R., Celeda, P., and Tovarnak, D. (2017, January 18\u201321). Lessons learned from complex hands-on defence exercises in a cyber range. Proceedings of the 2017 IEEE Frontiers in Education Conference (FIE), Indianapolis, IN, USA.","DOI":"10.1109\/FIE.2017.8190713"},{"key":"ref_3","unstructured":"Kick, J. (2014). Cyber Exercise Playbook, The MITRE Corporation."},{"key":"ref_4","unstructured":"Appleget, J., Burks, R., and Cameron, F. (2020). The Craft of Wargaming: A Detailed Planning Guide for Defense Planners and Analysts, Naval Institute Press."},{"key":"ref_5","unstructured":"Fox, D.B., Mccollum, C.D., Arnoth, E.I., and Mak, D.J. (2018). HSSEDI: Cyber Wargaming: Framework for Enhancing Cyber Wargaming with Realistic Business Context, The MITRE Corporation. Technical Report 18, The Homeland Security Systems Engineering and Development Institute (HSSEDI)."},{"key":"ref_6","unstructured":"Wilhelmson, N., and Svensson, T. (2014). Handbook for Planning, Running and Evaluating Information Technology and Cyber Security Exercises, The Swedish National Defence College, Center for Asymmetric Threat Studies (CATS)."},{"key":"ref_7","unstructured":"National Institute of Standards and Technology (NIST) (2006). Special Publication 800-84: Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities, NIST Special Publication."},{"key":"ref_8","unstructured":"Club de la Continuit\u00e9 d\u2019Activit\u00e9 (Business Continuity Club CCA) (2021). Organising a Cyber Crisis Management Exercise, Agence Nationale de la S\u00e9curit\u00e9 des Syst\u00e8mes d\u2019Information. [1st ed.]."},{"key":"ref_9","unstructured":"Cybersecurity and Infrastructure Security Agency (CISA) (2020, February 10). Tabletop Exercise Package (CTEP) Hompage, Available online: https:\/\/www.cisa.gov\/cisa-tabletop-exercises-packages."},{"key":"ref_10","unstructured":"Ouzounis, E., Trimintzios, P., and Saragiotis, P. (2009). Good Practice Guide on National Exercises, ENISA."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1081","DOI":"10.20965\/jdr.2017.p1081","article-title":"On the complexity of cybersecurity exercises proportional to preparedness","volume":"12","author":"Aoyama","year":"2017","journal-title":"J. Disaster Res."},{"key":"ref_12","unstructured":"Costantini, L.P., and Raffety, A. (2021). Cybersecurity Tabletop Exercise Guide, National Association of Regulatory Utilty Commissioners NARUC. [1.1 ed.]."},{"key":"ref_13","unstructured":"Brajdi\u0107, I., Kova\u010devi\u0107, I., and Gro\u0161, S. (2021). Review of National and International Cybersecurity Exercises Conducted in 2019. ICCWS 2021 16th International Conference on Cyber Warfare and Security, Academic Conferences International Ltd."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"3153","DOI":"10.1007\/s11042-018-5897-5","article-title":"Modified cyber kill chain model for multimedia service environments","volume":"78","author":"Kim","year":"2019","journal-title":"Multimed. Tools Appl."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Petersen, R., Santos, D., Smith, M.C., Wetzel, K.A., and Witte, G. (2020). SP 800-181 rev1: Workforce Framework for Cybersecurity (NICE Framework), Technical Report.","DOI":"10.6028\/NIST.SP.800-181r1"},{"key":"ref_16","unstructured":"The MITRE Corporation (2019, July 01). ATT&CK\u2014Adversarial Tactics, Techniques, and Common Knowledge Home Page. Available online: https:\/\/attack.mitre.org\/."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"100361","DOI":"10.1016\/j.cosrev.2021.100361","article-title":"Cyber security training for critical infrastructure protection: A literature review","volume":"40","author":"Chowdhury","year":"2021","journal-title":"Comput. Sci. Rev."},{"key":"ref_18","unstructured":"PwC Czech Republic (2023, December 14). Video: CSAS Workshop EN. Available online: https:\/\/www.youtube.com\/watch?v=ueU-tOALeW0."},{"key":"ref_19","unstructured":"CybergmIEC (2023, December 15). edp CyberGym Movie. Available online: https:\/\/www.youtube.com\/watch?v=C2s2IBdEloQ."},{"key":"ref_20","unstructured":"CybergmIEC (2023, December 16). CyberGymNYC Video. Available online: https:\/\/www.youtube.com\/watch?v=gqD-pug_Ib4."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Sipola, T., Kokkonen, T., Puura, M., Riuttanen, K.E., Pitk\u00e4niemi, K., Juutilainen, E., and Kontio, T. (2023). Digital Twin of Food Supply Chain for Cyber Exercises. Appl. Sci., 13.","DOI":"10.3390\/app13127138"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Holik, F., Yayilgan, S.Y., and Olsborg, G.B. (2024). Emulation of Digital Substations Communication for Cyber Security Awareness. Electronics, 13.","DOI":"10.3390\/electronics13122318"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Ask, T.F., Knox, B.J., Lugo, R.G., Hoffmann, L., and S\u00fctterlin, S. (2023). Gamification as a neuroergonomic approach to improving interpersonal situational awareness in cyber defense. Front. Educ., 8.","DOI":"10.3389\/feduc.2023.988043"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1016\/j.cose.2006.10.005","article-title":"A video game for cyber security training and awareness","volume":"26","author":"Cone","year":"2007","journal-title":"Comput. Secur."},{"key":"ref_25","first-page":"55","article-title":"Development of a Hybrid Exercise for Organizational Cyber Resilience","volume":"1","author":"Ota","year":"2021","journal-title":"Saf. Secur. Eng. IX"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"e126","DOI":"10.1002\/spy2.126","article-title":"Game-based learning: A review of tabletop exercises for cybersecurity incident response training","volume":"3","author":"Angafor","year":"2020","journal-title":"Secur. Priv."},{"key":"ref_27","unstructured":"HITRUST Health Information Trust Alliance (2015). CyberRX 2.0 Level I Playbook Participant and Facilitator Guide, HITRUST Health Information Trust Alliance."},{"key":"ref_28","unstructured":"UK National Cyber Security Centre (2023, April 21). Exercise in a Box, Available online: https:\/\/www.ncsc.gov.uk\/information\/exercise-in-a-box."},{"key":"ref_29","unstructured":"NATO Allied Command Transformation (2023). NATO Wargaming Handbook, NATO Allied Command Transformation."},{"key":"ref_30","unstructured":"Perla, P. (2012). The Art of Wargaming: A Guide for Professionals and Hobbyists."},{"key":"ref_31","unstructured":"UK Defence Science and Technology Laboratory (2021). The Dstl Cyber Red Team Game, UK Defence Science and Technology Laboratory."},{"key":"ref_32","unstructured":"Bae, S.J. (2022). Littoral Commander: Indo-Pacific Rulebook, The Dietz Foundation."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"49","DOI":"10.17083\/ijsg.v7i2.349","article-title":"Battlespace Next(TM)","volume":"7","author":"Flack","year":"2020","journal-title":"Int. J. Serious Games"},{"key":"ref_34","unstructured":"Reed, M. (2023, June 07). The Operational Wargame Series: The Best Game Not in Stores Now. Available online: https:\/\/nodicenoglory.com\/2021\/06\/23\/the-operational-wargame-series-the-best-game-not-in-stores-now."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Engelstein, G., and Shalev, I. (2022). Building Blocks of Tabletop Game Design: An Encyclopedia of Mechanisms, CRC Press. [2nd ed.].","DOI":"10.1201\/9781003179184"},{"key":"ref_36","unstructured":"Haggman, A. (2019). Cyber Wargaming: Finding, Designing, and Playing Wargames for Cyber Security Education. [Ph.D. Thesis, University of London]."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Smith, F.L.I., Kollars, N., and Schechter, B. (2024). Cyber Wargaming: Research and Education for Security in a Dangerous Digital World, Georgetown University Press.","DOI":"10.2307\/jj.2458922"},{"key":"ref_38","unstructured":"Kodalle, T. (2021). Cyber Wargaming on the Strategic\/Political Level: Exploring Cyber Warfare in a Matrix Wargame. ECCWS 2021 20th European Conference on Cyber Warfare and Security, Academic Conferences International Ltd."},{"key":"ref_39","unstructured":"Glava\u0161, J., and Po\u017eega, \u017d. (2023). Wargaming and decision-making process in defence. Interdisciplinary Management Research XIX: Conference Proceedings, Proceedings of the 19th Interdisciplinary Management Research (IMR 2023), Osijek, Croatia, 28\u201330 September 2023, Ekonomski fakultet Sveu\u010dili\u0161ta Josipa Jurja Strossmayera u Osijeku."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"203","DOI":"10.1016\/j.trpro.2023.11.909","article-title":"Wargaming adjudication in the air-force and other military areas of education","volume":"73","author":"Lorusso","year":"2023","journal-title":"Transp. Res. Procedia"},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"1005","DOI":"10.1007\/s10207-023-00680-4","article-title":"Cyber range design framework for cyber security education and training","volume":"22","author":"Katsantonis","year":"2023","journal-title":"Int. J. Inf. Secur."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"\u0160v\u00e1bensk\u00fd, V., Cermak, M., Vykopal, J., and La\u0161tovi\u010dka, M. (2018, January 2\u20134). Enhancing cybersecurity skills by creating serious games. Proceedings of the 23rd Annual ACM Conference on Innovation and Technology in Computer Science Education, ITiCSE, Larnaca, Cyprus.","DOI":"10.1145\/3197091.3197123"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Ukwandu, E., Farah, M.A.B., Hindy, H., Brosset, D., Kavallieros, D., Atkinson, R., Tachtatzis, C., Bures, M., Andonovic, I., and Bellekens, X. (2020). A review of cyber-ranges and test-beds: Current and future trends. Sensors, 20.","DOI":"10.3390\/s20247148"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Ostby, G., Lovell, K.N., and Katt, B. (2019, January 5\u20137). EXCON Teams in Cyber Security Training. Proceedings of the 2019 International Conference on Computational Science and Computational Intelligence (CSCI), Las Vegas, NV, USA.","DOI":"10.1109\/CSCI49370.2019.00010"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1007\/s10111-015-0350-2","article-title":"Measuring team effectiveness in cyber-defense exercises: A cross-disciplinary case study","volume":"18","author":"Andersson","year":"2016","journal-title":"Cogn. Technol. Work"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"831","DOI":"10.1287\/mnsc.1100.1148","article-title":"Hierarchical Structure and Search in Complex Organizations","volume":"56","author":"Mihm","year":"2010","journal-title":"Manag. Sci."},{"key":"ref_47","unstructured":"U.S. Joint Chiefs of Staff (2013). Doctrine for the Armed Forces of the United States, U.S. Joint Chiefs of Staff."},{"key":"ref_48","unstructured":"Johnson, J. (2024, August 30). The \u201cFour Levels\u201d of Wargaming: A New Scope on the Hobby. Available online: https:\/\/www.beastsofwar.com\/featured\/levels-wargames-exploring-scopes-hobby\/."},{"key":"ref_49","first-page":"50","article-title":"Waffles or Pancakes ? Operational- versus Tactical-Level Wargaming","volume":"3","author":"Eikmeier","year":"2015","journal-title":"Jt. Force Q."},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Chouliaras, N., Kittes, G., Kantzavelou, I., Maglaras, L., Pantziou, G., and Ferrag, M.A. (2021). Cyber Ranges and TestBeds for Education, Training, and Research. Appl. Sci., 11.","DOI":"10.3390\/app11041809"},{"key":"ref_51","unstructured":"Mouat, T. (2024, August 28). Practical Advice on Matrix Games Version 15. Available online: http:\/\/www.mapsymbs.com\/PracticalAdviceOnMatrixGames.pdf."},{"key":"ref_52","unstructured":"National Institute of Standards and Technology (NIST) (2020). Security and Privacy Controls for Information Systems and Organizations."},{"key":"ref_53","unstructured":"European Commission (2022). Consolidated Text: Directive (EU) 2022\/2555 of the European Parliament and of the Council of 14 December 2022 on Measures for a High Common Level of Cybersecurity Across the Union, Amending Regulation (EU) No 910\/2014 and Directive (EU) 2018\/1972, and rep, European Commission."},{"key":"ref_54","unstructured":"European Commission (2022). Regulation (EU) 2022\/2554 of the European Parliament and of the Council on Digital Operational Resilience for the Financial Sector and Amending Regulations (EC) No 1060\/2009, (EU) No 648\/2012, (EU) No 600\/2014, (EU) No 909\/2014 and (EU) 2016\/1011, European Commission."},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Mases, S., Maennel, K., Toussaint, M., and Rosa, V. (2021, January 6\u201310). Success Factors for Designing a Cybersecurity Exercise on the Example of Incident Response. Proceedings of the 2021 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Vienna, Austria.","DOI":"10.1109\/EuroSPW54576.2021.00033"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"62232","DOI":"10.1109\/ACCESS.2022.3182383","article-title":"ICSTASY: An Integrated Cybersecurity Training System for Military Personnel","volume":"10","author":"Lee","year":"2022","journal-title":"IEEE Access"},{"key":"ref_57","unstructured":"Utilis, d.o.o. (2024, April 20). Cyber Conflict Simulator Homepage, 2022. Available online: https:\/\/ccs.utilis.biz\/."},{"key":"ref_58","unstructured":"Sokol, N., Ke\u017eman, V., and Gro\u0161, S. (2024, January 8\u201310). Using Simulations to Determine Economic Cost of a Cyber Attack. Proceedings of the Workshop on the Economics of Information Security (WEIS), Dallas, TX, USA."},{"key":"ref_59","doi-asserted-by":"crossref","unstructured":"Whitehead, D.E., Owens, K., Gammel, D., and Smith, J. (2017, January 3\u20136). Ukraine cyber-induced power outage: Analysis and practical mitigation strategies. Proceedings of the 2017 70th Annual Conference for Protective Relay Engineers (CPRE), College Station, TX, USA.","DOI":"10.1109\/CPRE.2017.8090056"},{"key":"ref_60","unstructured":"Lee, R.M., Assante, M., and Conway, T. (2016). Analysis of the Cyber Attack on the Ukrainian Power Grid, E-ISAC\u2014Electricty Information Sharing and Analysis Center, SANS Industrial Control Systems. Technical Report."},{"key":"ref_61","doi-asserted-by":"crossref","unstructured":"Cichonski, P., Millar, T., Grance, T., and Scarfone, K. (2012). Computer Security Incident Handling Guide: Recommendations of the National Institute of Standards and Technology, Technical Report.","DOI":"10.6028\/NIST.SP.800-61r2"},{"key":"ref_62","unstructured":"Petek, D. (2023, May 17). Simpozij Kiberneti\u010dka Obrana. Available online: https:\/\/osrh.hr\/Data\/HTML\/HR\/GLAVNA\/DOGA%C4%90ANJA\/20220822_Simpozij_Kiberneti%C4%8Dka_obrana\/Simpozij_Kiberneti%C4%8Dka_obrana_HR.htm."},{"key":"ref_63","unstructured":"Deep Conference Committee (2020, January 15). Deep 2022 Workshop|Lead. Available online: https:\/\/deep-conference.com\/deep-2022\/."},{"key":"ref_64","unstructured":"Military Agency for Standardization (1996). Stanag 2116 Mis (Edition 5)\u2014Nato Codes for Grades of Military Personnel, Military Agency for Standardization."},{"key":"ref_65","unstructured":"North Atlantic Treaty Organisation (2013). BI-SC Collective Training and Exercise Directive (CT&ED) 075-003, North Atlantic Treaty Organisation."},{"key":"ref_66","unstructured":"Shilling, A. (2019). Operations Assessment in Complex Environments: Theory and Practice, NATO Science and Technology Organization. Technical Report Final Report of RTG SAS-110."},{"key":"ref_67","unstructured":"Department of Defense (2018). The Department of Defense Cyber Table Top Guidebook, Technical Report."},{"key":"ref_68","unstructured":"Department of Defense (2021). The Department of Defense Cyber Table Top Guidebook Version 2.0, Technical Report."},{"key":"ref_69","unstructured":"Colbert, E.J., Sullivan, D.T., Patrick, J.C., Schaum, J.W., Ritchey, R.P., Reinsfelder, M.J., Leslie, N.O., and Lewis, R.C. (2017). Terra Defender Cyber-Physical Wargame, US Army Reasearch Laboratory. Technical Report."},{"key":"ref_70","doi-asserted-by":"crossref","first-page":"236","DOI":"10.1007\/s11036-019-01442-0","article-title":"A Framework for the Evaluation of Trainee Performance in Cyber Range Exercises","volume":"25","author":"Andreolini","year":"2020","journal-title":"Mob. Netw. Appl."},{"key":"ref_71","unstructured":"National Security Agency, Department of Homeland Security, and Applied Physics Laboratory Johns Hopkins (2022, February 13). IACD Playbooks and Workflows. Available online: https:\/\/www.iacdautomate.org\/playbook-and-workflow-examples."},{"key":"ref_72","unstructured":"Scottish Government (2023, April 20). Publication\u2014Advice and Guidance, Cyber Resilience: Incident Management Homepage, Available online: https:\/\/www.gov.scot\/publications\/cyber-resilience-incident-management."},{"key":"ref_73","first-page":"111","article-title":"Why wargaming works","volume":"64","author":"Perla","year":"2011","journal-title":"Nav. War Coll. Rev."},{"key":"ref_74","doi-asserted-by":"crossref","unstructured":"Henshel, D.S., Deckard, G.M., Lufkin, B., Buchler, N., Hoffman, B., Rajivan, P., and Collman, S. (2016, January 1\u20133). Predicting proficiency in cyber defense team exercises. Proceedings of the MILCOM 2016\u20142016 IEEE Military Communications Conference, Baltimore, MD, USA.","DOI":"10.1109\/MILCOM.2016.7795423"},{"key":"ref_75","unstructured":"National Institute of Standards and Technology NIST Special Publication 800 Series, various years."},{"key":"ref_76","unstructured":"Mandiant Inc (2023). Mandiant Special Report: M-Trends 2023, Mandiant Inc.. Technical Report."},{"key":"ref_77","doi-asserted-by":"crossref","unstructured":"Gernhardt, D., and Gros, S. (2022, January 23\u201327). Use of a non-peer reviewed sources in cyber-security scientific research. Proceedings of the 2022 45th Jubilee International Convention on Information, Communication and Electronic Technology (MIPRO), Opatija, Croatia.","DOI":"10.23919\/MIPRO55190.2022.9803478"},{"key":"ref_78","unstructured":"The MITRE Corporation (2020, April 17). MITRE ATT&CK: Groups. Available online: https:\/\/attack.mitre.org\/groups."},{"key":"ref_79","unstructured":"Bouwman, X., Griffioen, H., Egbers, J., Doerr, C., Klievink, B., and van Eeten, M. (2020, January 12\u201314). A different cup of TI? The added value of commercial\nthreat intelligence. Proceedings of the 29th USENIX Security Symposium, Boston, MA, USA."},{"key":"ref_80","unstructured":"Lockheed Martin (2019, January 19). Applying Cyber Kill Chain\u00ae Methodology. Available online: https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain.html."},{"key":"ref_81","unstructured":"Assante, M., and Lee, R. (2015). SANS Whitepaper: The Industrial Control System Cyber Kill Chain, Sans Institute. Technical Report."},{"key":"ref_82","unstructured":"Development Concepts and Doctrine Centre (2021). Red Teaming Handbook."},{"key":"ref_83","unstructured":"Department of the Army (2019). Army Techniques Publication (ATP) 2-01.3 Intelligence Preparation of the Battlefield, Department of the Army."},{"key":"ref_84","first-page":"166","article-title":"A collaborative cyber incident management system for European interconnected critical infrastructures","volume":"34","author":"Settanni","year":"2017","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_85","doi-asserted-by":"crossref","first-page":"2525","DOI":"10.1109\/COMST.2021.3117338","article-title":"A Comparative Study on Cyber Threat Intelligence: The Security Incident Response Perspective","volume":"23","author":"Schlette","year":"2021","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_86","unstructured":"Brilingait\u0117, A., Bukauskas, L., Juozapavi\u010dius, A., and Kutka, E. (2020, January 25\u201326). Information Sharing in Cyber Defence Exercises. Proceedings of the 19th European Conference on Cyber Warfare, Online."},{"key":"ref_87","unstructured":"North American Electric Reliability Corporation (2022, February 24). GridEx\u2014Grid Security Exercises Overview. Available online: https:\/\/www.nerc.com\/pa\/CI\/ESISAC\/Pages\/GridEx.aspx."},{"key":"ref_88","first-page":"5","article-title":"Your Boss, Players and Sponsor: The Three Witches of Wargaming","volume":"67","year":"2014","journal-title":"Nav. War Coll. Rev."},{"key":"ref_89","doi-asserted-by":"crossref","unstructured":"Weuve, C.A., Perla, P.P., Markowitz, M.C., Rubel, R., Downes-Martin, S., Martin, M., and Vebber, P.V. (2004). Wargame Pathologies, CNA and Naval War College. Technical Report.","DOI":"10.21236\/ADA596774"},{"key":"ref_90","doi-asserted-by":"crossref","unstructured":"Schlette, D., Empl, P., Caselli, M., Schreck, T., and Pernul, G. (2024, January 19\u201323). Do You Play It by the Books? A Study on Incident Response Playbooks\nand Influencing Factors. Proceedings of the 2024 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP54263.2024.00060"},{"key":"ref_91","doi-asserted-by":"crossref","first-page":"1215","DOI":"10.1007\/s10207-023-00760-5","article-title":"Generating ICS vulnerability playbooks with open standards","volume":"23","author":"Empl","year":"2024","journal-title":"Int. J. Inf. Secur."},{"key":"ref_92","doi-asserted-by":"crossref","unstructured":"McHugh, F. (1966). Fundamentals of War Gaming, US Naval War College. [3rd ed.].","DOI":"10.21236\/AD0686108"},{"key":"ref_93","unstructured":"United Kingdom Ministry of Defence (2017). Wargaming Handbook."},{"key":"ref_94","first-page":"2","article-title":"Defining Military Strategy","volume":"69","author":"Lykke","year":"1989","journal-title":"Mil. Rev."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/16\/5\/398\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T17:31:41Z","timestamp":1760031101000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/16\/5\/398"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5,13]]},"references-count":94,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2025,5]]}},"alternative-id":["info16050398"],"URL":"https:\/\/doi.org\/10.3390\/info16050398","relation":{},"ISSN":["2078-2489"],"issn-type":[{"value":"2078-2489","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,5,13]]}}}