@@ -8,23 +8,23 @@ helping you navigate through exercise preparations and discussions with confiden
Tabletop Exercise, TTX
: a type of teaching activity designed to train professional teams in incident response to a crisis situation [[NIST](https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-84.pdf)].
The simulated crisis happens in the context of business operations in an organization, such as a phishing attack on employees or malware infecting the company infrastructure.
The team members, who hold various roles in the organization (e.g., manager or cybersecurity incident responder) [[ICS](https://doi.org/10.1108/ICS-05-2022-0085)], discuss which actions to take to effectively respond to the emergency while following proper protocols and regulations.
The team members, who hold various roles in the organization (e.g., manager or cybersecurity incident responder) [[Angafor](https://doi.org/10.1108/ICS-05-2022-0085)], discuss which actions to take to effectively respond to the emergency while following proper protocols and regulations.
These discussions are facilitated by instructors, who also present an exercise debriefing at the end.
TTXs are an effective educational tool that enhance incident preparedness, particularly in communication, coordination, and collaboration [[ICS](https://doi.org/10.1108/ICS-05-2022-0085)].
TTXs are an effective educational tool that enhance incident preparedness, particularly in communication, coordination, and collaboration [[Angafor](https://doi.org/10.1108/ICS-05-2022-0085)].
Inject
: a pre-scripted message, such as an email, provided to trainees during a tabletop exercise (TTX).
Its purpose is to move the scenario forward and prompt additional actions.
For example, an inject can inform the trainees about a data breach in their company, requiring them to respond accordingly.
: The INJECT Exercise Platform (IXP) is an interactive web application designed to support the delivery and evaluation of TTXs.
: The INJECT Exercise Platform (IXP) is an interactive web application designed to support the delivery and evaluation of TTXs[[Švábenský](https://is.muni.cz/publication/2390899/2024-ITiCSE-paper-platform-evolution-novel-learning-environment-tabletop-exercises-paper.pdf)].
Designers use the platform to instantiate an exercise definition, which prescribes the exercise story, injects, available tools, and milestones.
An exercise definition is implemented as a set of structured text-based files (in YAML format) that are both human- and machine-readable.
IXP automates a substantial portion of the TTX by providing trainees with tools and inject response templates, significantly reducing the workload and personnel requirements for TTX delivery.
INJECT
: a pre-scripted message, such as an email, provided to trainees during a Tabletop Exercise (TTX).
Its purpose is to move the scenario forward and prompt additional actions.
For example, an inject can inform the trainees about a data breach in their company, requiring them to respond accordingly.
: This term refers to a complete scenario that has been incorporated into the required format for the platform, specifically using YAML files.
Such a definition can be downloaded as a zip file and then launched as an exercise on the platform.
...
...
@@ -72,27 +72,24 @@ Client
## Components of the platform
Editor
: a **future (currently prototyped)** INJECT Exercise Platform Component.
It is a versatile tool used during the Definition and Preparation phases of the INJECT Process.
It allows exercise designers to define exercise objectives, create scenarios, and prepare exercise content.
With its user-friendly interface, the Editor enables efficient scenario development and content organization.
Trainee View
: The Trainee View is an INJECT Exercise Platform Component.
It is designed for use during the Execution phase of the exercise.
: It is designed for use during the Execution phase of the exercise.
It provides trainees with access to the exercise scenario and injects, facilitating their participation and engagement.
Through the Trainee View, participants can navigate the exercise, respond to injects, and collaborate with teammates in a simulated environment.
Instructor View
: The Instructor View is an INJECT Exercise Platform Component.
It is a comprehensive tool used by exercise instructors during the Execution phase of the exercise.
: It is a comprehensive interface used by exercise instructors during the Execution phase of the exercise.
It allows instructors to manage the entire exercise, from overseeing participant interactions to facilitating discussions and providing guidance.
With features for real-time monitoring and intervention, the Instructor View ensures smooth exercise execution and effective facilitation.
Analyst View
: The Analyst View is an INJECT Exercise Platform Component.
It serves multiple purposes throughout the INJECT Process.
: It serves multiple purposes throughout the INJECT Process.
During the Reflection phase, it is utilized for evaluation and data analysis, providing insights into participant performance and exercise outcomes.
Additionally, the Analyst View serves as a source of information during the Understanding phase, offering valuable data and feedback to inform exercise preparation.
Its intuitive interface enables thorough evaluation and informed decision-making for future exercises.
Editor
: a **future (currently prototyped)** INJECT Exercise Platform Component.
It is a versatile tool used during the Definition and Preparation phases of the INJECT Process.
It allows exercise designers to define learning objectives, create scenarios, and prepare exercise content.
With its user-friendly interface, the Editor enables efficient scenario development and content organization.