Design and evaluation for cybersecurity incident handling exercise considering interorganizational communication

Abstract

In this paper we describe design and evaluation for cybersecurity incident handling exercise considering interorganizational communication. Interorganizational cooperation is necessary to handling cybersecurity incident. But interorganizational cooperation has difficulty because goal or role, culture are different and it makes communication gap between organization. We developed a scenario based exercise that can understand difference of organization goal and decrease a communication gap. We also developed a sustainable mechanism to retake an exercise continually because attendee can not take known scenario. Experiment result shows our exercise decrease a communication gap and make incident handling faster.