Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Using tabletop exercises to raise cybersecurity awareness of decision-makers
Jönköping University, School of Engineering, JTH, Department of Computer Science and Informatics.ORCID iD: 0000-0003-2084-9119
Jönköping University, School of Engineering, JTH, Department of Computer Science and Informatics.ORCID iD: 0009-0004-4515-2216
Jönköping University, School of Engineering, JTH, Department of Computer Science and Informatics.ORCID iD: 0000-0002-1436-2980
2025 (English)In: Critical information infrastructures security: 19th International Conference, CRITIS 2024, Rome, Italy, September 18–20, 2024, Revised Selected Papers / [ed] G. Oliva, S. Panzieri, B. Hämmerli, F. Pascucci, & L. Faramondi, Cham: Springer, 2025, p. 231-248Conference paper, Published paper (Refereed)
Abstract [en]

The continuous digitalization of modern organizations leads to increased exposure to digital threats. Consequently, safeguarding digital assets is central to the organization’s resiliency and cybersecurity, which are core business functions. Commitment from organizational decision-makers is crucial for good cybersecurity posture since they are responsible for allocating resources and prioritising cybersecurity. To underpin such commitment, decision-makers must be aware of the organization’s cybersecurity risks and digital assets. The subsequent challenge addressed in this research is to raise awareness among decision-makers. This research draws on previous research to develop a tabletop exercise designed to raise cybersecurity awareness among decision-makers. Using a multiple-case study research approach, the tabletop exercise was conducted and evaluated on six occasions with a total of 90 decision-makers from various industrial sectors. The general view of the participants was that the tabletop exercise was a good and engaging way to learn about cybersecurity. The main contribution of this research is that it outlines tabletop exercises as a promising approach to raising cybersecurity awareness among decision-makers. However, it is important that such exercises are designed so that enough time for discussions is allowed. Furthermore, this research identifies a need for more evaluations focusing on the long-term effects of tabletop exercises.

Place, publisher, year, edition, pages
Cham: Springer, 2025. p. 231-248
Series
Lecture Notes in Computer Science, ISSN 0302-9743, E-ISSN 1611-3349 ; 15549
Keywords [en]
Cybersecurity, Awareness, Decision-makers, Tabletop exercises
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:hj:diva-67443DOI: 10.1007/978-3-031-84260-3_14Scopus ID: 2-s2.0-105000826154ISBN: 978-3-031-84259-7 (print)ISBN: 978-3-031-84260-3 (electronic)OAI: oai:DiVA.org:hj-67443DiVA, id: diva2:1946309
Conference
19th International Conference, CRITIS 2024, Rome, Italy, September 18–20, 2024
Funder
Swedish Civil Contingencies Agency, VISKA (MSB 2021-14650) and ICANP (MSB 2023-10887)Available from: 2025-03-20 Created: 2025-03-20 Last updated: 2025-04-15Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Kävrestad, JoakimJohansson, SonnyBergström, Erik

Search in DiVA

By author/editor
Kävrestad, JoakimJohansson, SonnyBergström, Erik
By organisation
JTH, Department of Computer Science and Informatics
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 26 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf