Play2Prepare: A Board Game Supporting IT Security Preparedness Exercises for Industrial Control Organizations

摘要

Industrial control organizations need to perform IT security preparednessexercises more frequently than today. However, limited support materialcurrently exists. This paper presents a board game, Play2Prepare, whichsimulates a large scale attack on the electric power grid. The game consistsof a number of scenarios and questions that are meant to trigger discussionsand knowledge exchange. The intention with this board game is to supportorganizations in strengthening their incident response capabilities. Initialfeedback from the electric power industry indicates that this board game isindeed a relevant tool for preparedness exercises for IT security incidents.