Designing Framework for Tabletop Exercise to Promote Resilience Against Cyber Attacks

In recent years, there has been an increase in the number of cyber-attacks targeting ICS (Industrial Control System), also used in the critical infrastructure that supports our daily lives. As a result, companies using ICS need to improve their ability to respond to cyber incidents to ensure business continuity. Cyber incidents at ICS require an enterprise-wide response, as they have a significant impact on IT system security issues, plant safety, and the company’s business. For this company-wide response to proceed smoothly, it is essential to create a response plan in advance and create an environment that allows for an instant response when an incident occurs. Many companies do not have enough experience with ICS-targeted incident response to develop this plan. In this study, we developed an exercise to simulate an incident and improve response to a cyber-attack.