Publication

This report by Robert S Dewar provides cyber exercise organizers with important points to bear in mind when staging an exercise. It does this by examining the After Action Reports (AARs) of a number of national and international cyber exercises, and using information from expert interviews. The report sets out a number of types of exercises, which can be conducted and uses the AARs and interviews to identify key points, such as the importance of a clear context for the exercise, and the need for realistic, flexible scenarios.