diff --git a/docs/INJECT_process/execute/overview.md b/docs/INJECT_process/execute/overview.md
index 382631b186408e9378956c9a66ee611c43978048..2dc9452be9188651b4a37d1bab1d2a278e6b5ead 100644
--- a/docs/INJECT_process/execute/overview.md
+++ b/docs/INJECT_process/execute/overview.md
@@ -26,11 +26,11 @@ As an exercise instructor, your role is crucial in ensuring the smooth execution
Here are some key tasks to keep in mind:
- **Provide Initial Exercise Brief**:
- Start by providing participants with an initial exercise brief, outlining the context, rules, and expectations for the exercise.
+ Start by providing trainees with an initial exercise brief, outlining the context, rules, and expectations for the exercise.
- **Consider Platform Intro Tutorial**:
- Since the IXP may be new to many participants, it makes sense to **let them to complete the introductory tutorial first**. Although the platform’s user interface is intuitive, having a structured
- overview is more beneficial than letting participants figure it out during the actual exercise. We have created a short introduction that will take no more than 15 minutes to help enhance their
+ Since the IXP may be new to many trainees, it makes sense to **let them to complete the introductory tutorial first**. Although the platform’s user interface is intuitive, having a structured
+ overview is more beneficial than letting trainees figure it out during the actual exercise. We have created a short introduction that will take no more than 15 minutes to help enhance their
experience.
@@ -58,7 +58,7 @@ Here are some key tasks to keep in mind:
- **Provide Hot Wash**:
Finally, conduct a hot wash session after the exercise to
- debrief participants, discuss key learnings, and provide feedback on their performance.
+ debrief trainees, discuss key learnings, and provide feedback on their performance.
Also ask for their feedback on the scenario.
- **Interview Instructors**:
diff --git a/docs/INJECT_process/intro/overview.md b/docs/INJECT_process/intro/overview.md
index f266459bb1f7f037c42ca4fa4b26cd866eb1c1ed..4945915cb67a8caa783d2146d918139f6c27f0c7 100644
--- a/docs/INJECT_process/intro/overview.md
+++ b/docs/INJECT_process/intro/overview.md
@@ -42,7 +42,7 @@ The INJECT Exercise Platform will be used extensively to support these activitie
The Reflection phase is dedicated to evaluating the exercise on multiple levels.
This includes
-* assessing participant performance and providing specific recommendations,
+* assessing trainee performance and providing specific recommendations,
* reviewing the scenario for potential improvements, and
* reflecting on the overall organization and execution of the exercise.
@@ -59,18 +59,18 @@ This phase aims to identify strengths and areas for improvement, helping to enha
The Trainee View is designed for use during the **Execution phase** of the exercise.
It provides trainees with access to the exercise scenario and injects, facilitating their participation and engagement.
- Through the Trainee View, participants can navigate the exercise, respond to injects, and collaborate with teammates in a simulated environment.
+ Through the Trainee View, trainees can navigate the exercise, respond to injects, and collaborate with teammates in a simulated environment.
### Instructor View
The Instructor View is a comprehensive tool used by exercise instructors during the **Execution phase** of the exercise.
- It allows instructors to manage the entire exercise, from overseeing participant interactions to facilitating discussions and providing guidance.
+ It allows instructors to manage the entire exercise, from overseeing trainees interactions to facilitating discussions and providing guidance.
With features for real-time monitoring and intervention, the Instructor View ensures smooth exercise execution and effective facilitation.
### Analyst View
The Analyst View serves multiple purposes throughout the INJECT Process.
- During the **Reflection phase**, it is utilized for evaluation and data analysis, providing insights into participant performance and exercise outcomes.
+ During the **Reflection phase**, it is utilized for evaluation and data analysis, providing insights into trainees performance and exercise outcomes.
Additionally, the Analyst View serves as a source of information during the **Understanding phase**, offering valuable data and feedback to inform exercise preparation.
Its intuitive interface enables thorough evaluation and informed decision-making for future exercises.
@@ -118,7 +118,7 @@ There are two primary types of exercises you can consider:**
- **Process-Technical Exercises**:
These exercises focus on simulating specific processes using designated tools.
- They are ideal for honing technical skills and ensuring that participants are proficient in particular procedures and systems.
+ They are ideal for honing technical skills and ensuring that trainees are proficient in particular procedures and systems.
While these categories provide a useful framework, it is not necessary to adhere strictly to one type.
diff --git a/docs/INJECT_process/prepare/editor.md b/docs/INJECT_process/prepare/editor.md
new file mode 100644
index 0000000000000000000000000000000000000000..c8105f780c384faadb90a1b6ac250db013747986
--- /dev/null
+++ b/docs/INJECT_process/prepare/editor.md
@@ -0,0 +1,106 @@
+# Editor: A Tool for Exercise Creation
+
+## In a nutshell:
+- The Editor is a user-friendly interface for designing INJECT exercises.
+- It makes exercise creation accessible without requiring YAML expertise, because it guides designers through a structured creation process.
+- Currently supports [definition version 0.13.0](https://inject.pages.fi.muni.cz/inject-docs/tech/architecture/definitions/upgrade/).
+
+---
+
+## Where are we in the INJECT process?
+
+
+
+
+## What is the Editor?
+
+The Editor is a new component of the INJECT Exercise Platform that innovates how exercises are created.
+While exercises have traditionally been defined manually in YAML format (requiring technical expertise), the Editor provides an intuitive interface that guides you through the exercise creation process.
+
+### Key Benefits
+- **User-Friendly Interface**: No YAML knowledge required
+- **Guided Process**: Step-by-step exercise creation
+- **Structured Approach**: Systematic organization of exercise components
+- **Automated Generation**: Produces valid YAML exercise definitions automatically
+
+
+### Should You Use the Editor?
+The Editor is recommended for:
+- New exercise designers
+- Those unfamiliar with YAML
+- Exercises that don't require advanced features
+
+Consider manual YAML editing if you need:
+- Latest platform features
+- Complex milestone configurations
+- Role-based exercise design
+- Multiple channel configurations
+
+## How to start?
+* The Editor is easily accessible through the INJECT Gateway - see the picture below.
+* Once you start using it, it will guide you through a structured process.
+
+
+
+## Current Limitations
+
+Before using the Editor, it's important to understand its current limitations to make an informed decision about whether it's the right tool for your exercise.
+
+### Version Compatibility
+The Editor currently works with an older version of the [exercise definition](https://inject.pages.fi.muni.cz/inject-docs/tech/architecture/definitions/upgrade/) format (v0.13.0) than the one used by the Citadel platform (v0.14.0+). This means:
+
+**Supported features:**
+- Basic exercise structures
+- Most common features
+
+**Unsupported features:**
+- Newer platform capabilities
+- Multiple channels of the same type
+
+### Milestone Management
+While the Editor handles common milestone scenarios well, some advanced features are limited:
+
+**Supported Milestone Triggers:**
+- Learning activities
+- Standard injects
+- Tool responses
+- Email templates
+
+**Currently Unsupported:**
+- File download triggers
+- Arbitrary email conversation initiations
+- Complex milestone activation/deactivation patterns
+- Specific questionnaire answer triggers
+
+### Other Considerations
+Some additional limitations to keep in mind:
+
+1. **Single Exercise Definition Focus**
+ - You can work with only one exercise definition at a time
+ - Saving and loading different exercise definitions requires manual file management
+
+2. **Role Management**
+ - No direct support for role-based exercises
+ - Roles need to be added manually after export
+
+3. **Compatibility with Existing Exercises**
+ - Some existing exercises may need restructuring to work with the Editor
+ - Complex conditions might require simplification
+
+4. **Role Management**
+ - No direct support for role-based exercises
+ - Roles need to be added manually after export
+
+5. **Compatibility with Existing Exercises**
+ - Some existing exercises may need restructuring to work with the Editor
+ - Complex conditions might require simplification
+
+
+!!! tip "Working Around Limitations"
+ Most limitations can be addressed by making manual adjustments to the YAML file after using the Editor. If you need these features, consider using the Editor for initial setup and then fine-tuning the exercise definition manually. Check the: [Exercise definition description](../../tech/architecture/definitions/README.md).
+
+
+
+<div class="navigation" markdown>
+ [INJECT Process Overview](../intro/overview.md){ .md-button }
+</div>
diff --git a/docs/INJECT_process/prepare/overview.md b/docs/INJECT_process/prepare/overview.md
index aa3e63516b1c33e318f68166f4c2443570881961..f5f4f6e105bc73f6ed831eea1d0c09ca081b83ef 100644
--- a/docs/INJECT_process/prepare/overview.md
+++ b/docs/INJECT_process/prepare/overview.md
@@ -32,9 +32,21 @@ However, there is an alternative option available: you can prepare content direc
[INJECT Definition Example](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/main/files-from-repos/showcase-definition.zip?ref_type=heads&inline=false){ .md-button }
</div>
+ - Then look at the definition details section:
+ <div class="navigation" markdown>
+ [Definition details](../../tech/architecture/definitions/README.md){ .md-button }
+ </div>
+
+ - In case you want to upgrade the current definition to a newer version:
+ <div class="navigation" markdown>
+ [Definition Upgrade](../../tech/architecture/definitions/upgrade.md){ .md-button }
+ </div>
+
+ ### Additional Notes
- Iterate and Test: Iterate and test a lot to ensure the content is accurate and functional.
- Most of the typos and errors in the YAML format are caught by the validator in the platform.
- Markdown for Complex Texts: If there are any longer or more complex texts or responses (especially those with special characters), it is recommended to use markdown files in the content folder.
+ - If you use overlays, do not set them to start at minute 0 of the exercise - set them to minute 1 instead. Otherwise, the overlay would not appear for trainees.
## Crucial Concepts
@@ -71,11 +83,13 @@ However, there is an alternative option available: you can prepare content direc
If the corespondent is expected to react a certain way to certain situations, use templates.
These give instructor pre-scripted email choices
-!!! Disclaimer
- At this part of the documentation, we will include a guide for the Editor.
- However, please note that the Editor's functionalities are still undergoing extensive iteration.
- As a result, this section is not currently included in the documentation.
+n.
+??? "Editor"
+ The INJECT Exercise Platform now includes a new tool - the Editor - that makes exercise creation more accessible and guided. While it's still in development, it offers a user-friendly alternative to manual YAML editing.
+ <div class="navigation" markdown>
+ [Learn more](../prepare/editor.md){ .md-button }
+ </div>
## Exercise logistics
@@ -103,19 +117,19 @@ However, there is an alternative option available: you can prepare content direc
### Communication Plan
- - Confirm contact information for all participants, instructors, and support staff.
+ - Confirm contact information for all trainees, instructors, and support staff.
- Prepare and schedule pre-exercise communications (reminders, agendas).
- ### Participant Readiness
+ ### Trainees Readiness
- - Distribute pre-exercise materials and instructions to participants.
+ - Distribute pre-exercise materials and instructions to trainees.
- Schedule a pre-exercise briefing session if necessary.
- - Ensure participants have completed any required pre-exercise training or assessments.
+ - Ensure trainees have completed any required pre-exercise training or assessments.
### Logistics Coordination
- Confirm catering arrangements, if applicable.
- - Arrange transportation and accommodation for participants and staff, if necessary.
+ - Arrange transportation and accommodation for trainees and staff, if necessary.
- Ensure all logistical support staff are briefed and understand their roles.
??? "Platform Setup"
@@ -130,7 +144,7 @@ However, there is an alternative option available: you can prepare content direc
- The exercise panel has two main sections:
- **Definitions**: This section handles definitions. You can upload, remove, and manage instructor access to them.
- - **Exercises**: This section handles exercises. You can create, pause, remove exercises, add participants, and download logs.
+ - **Exercises**: This section handles exercises. You can create, pause, remove exercises, add trainees, and download logs.
2. **Upload an Exercise Definition**
@@ -146,9 +160,9 @@ However, there is an alternative option available: you can prepare content direc
- A window will pop up asking you to select a definition and configure exercise options such as `Number of teams` and `Exercise name`.
- After configuring these options, click `Submit` to finish creating the exercise.
- 4. **Add Participants**
- - After creating the exercise, click on the `Participants` tab under the exercise you have created.
- - Here, you will see all the accounts that were automatically created, and you can assign each one a participant.
+ 4. **Add Trainees**
+ - After creating the exercise, click on the `Trainees` tab under the exercise you have created.
+ - Here, you will see all the accounts that were automatically created, and you can assign each one a trainee.
5. **Start the Exercise**
- Once all configurations and settings are completed, click the `Start` button under the exercise you created.
@@ -158,8 +172,8 @@ However, there is an alternative option available: you can prepare content direc
??? "Onboarding"
- Since the IXP may be new to many participants, it makes sense to **let them to complete the introductory tutorial first**. Although the platform’s user interface is intuitive, having a structured
- overview is more beneficial than letting participants figure it out during the actual exercise. **We have created a short introduction that will take no more than 15 minutes to help enhance their
+ Since the IXP may be new to many trainees, it makes sense to **let them to complete the introductory tutorial first**. Although the platform’s user interface is intuitive, having a structured
+ overview is more beneficial than letting trainees figure it out during the actual exercise. **We have created a short introduction that will take no more than 15 minutes to help enhance their
experience.**
<div class="navigation" markdown>
diff --git a/docs/INJECT_process/reflect/overview.md b/docs/INJECT_process/reflect/overview.md
index 4449836324f1961895f79d6b3cbcfc93b15e785b..79c0a01ba78607c8dbef7ac84601ac5ac475122a 100644
--- a/docs/INJECT_process/reflect/overview.md
+++ b/docs/INJECT_process/reflect/overview.md
@@ -3,7 +3,7 @@
## In a nutshell:
- This is the fifth phase of the INJECT process, aimed at evaluating the exercise on multiple levels.
-- Focuses on assessing participant performance, reviewing the scenario, and reflecting on the overall organization and execution.
+- Focuses on assessing trainee performance, reviewing the scenario, and reflecting on the overall organization and execution.
- Provides specific recommendations for improvements and identifies strengths to enhance future exercises.
---
@@ -14,16 +14,19 @@
---
-## Participant Performance Evaluation
+## Log analysis
+- If you have an external tool, you can utilize logs - see the [log specification](../../tech/log-format.md) for details.
-- Reflect on how participants performed based on the established learning objectives and activities.
+## Trainee Performance Evaluation
+
+- Reflect on how trainees performed based on the established learning objectives and activities.
- Analyze both individual and group performance throughout the exercise.
-- Recognize areas where participants excelled and demonstrated competency.
-- Highlight aspects where participants faced challenges or showed gaps in understanding.
+- Recognize areas where trainees excelled and demonstrated competency.
+- Highlight aspects where trainees faced challenges or showed gaps in understanding.
### Provide recommendations for improvement
-- Offer clear recommendations for enhancing participant performance in relation to the exercise objectives.
+- Offer clear recommendations for enhancing trainees performance in relation to the exercise objectives.
- Suggest practical insights for addressing identified weaknesses and leveraging strengths.
!!! Disclaimer
@@ -34,7 +37,7 @@
## Scenario Review
- Recognize any shortcomings or areas for improvement within the scenario.
-- Consider feedback from participants and facilitators on areas that could be strengthened.
+- Consider feedback from trainees and facilitators on areas that could be strengthened.
- Propose specific changes or additions to the scenario to enhance realism, engagement, and learning outcomes.
## Organization and execution reflection
diff --git a/docs/INJECT_process/specify/advanced_approaches.md b/docs/INJECT_process/specify/advanced_approaches.md
index c0fe16d6b8664a3c7f5501e9833781c6446a8ffd..dc01ffc16593071f9c79cfa342ff5f5a0572a8c1 100644
--- a/docs/INJECT_process/specify/advanced_approaches.md
+++ b/docs/INJECT_process/specify/advanced_approaches.md
@@ -2,7 +2,7 @@
## In a nutshell
- This section focuses on advanced approaches to exercise specification.
-- These approaches can greatly enhance the overall participant experience.
+- These approaches can greatly enhance the overall trainee experience.
- Specifically, this includes the addition of tools, the use of conditioned responses, and the interaction between these elements.
---
@@ -14,32 +14,32 @@
---
## Use of Conditions
-Ordinary TTXs are usually unable to react in any way to the actions of participants. IXP can do this on multiple levels.
+Ordinary TTXs are usually unable to react in any way to the actions of trainees. IXP can do this on multiple levels.
Some injects types have this integrated by default:
- The instructor chooses one of the possible answers to the email - the chosen answer can be followed up with the following automatic action of the platform..
- Using reactions to free form injects - similarly, diffrent reactions can be linked to the following automatic action of the platform..
- Using decision points - each answer chosen can be associated with another automatic action of the platform.
-- Hints - Hints are actually conditioned responses to participants' behavior.
+- Hints - Hints are actually conditioned responses to trainees' behavior.
-However, the possibility of conditioning does not end there. Almost every action of the participant that is manifested in the platform, can be linked by the another automatic action. This is done by so-called milestones. You can simply think of them as a switch. If the activity of the participant in the platform activates this switch than the next automatic action happen.
+However, the possibility of conditioning does not end there. Almost every action of the trainee that is manifested in the platform, can be linked by the another automatic action. This is done by so-called milestones. You can simply think of them as a switch. If the activity of the trainee in the platform activates this switch than the next automatic action happen.
You can also set a condition that triggers the switch if a specific action doesn't occur by a set time. For example, if the CEO hasn't been informed by the 20th minute of the exercise, the platform will automatically send a complaint email asking why they were left out.
-Similarly, a questionnaire may come in response or media coverage depending on the fact that participants chose not to communicate a cyberattack on their organization.
+Similarly, a questionnaire may come in response or media coverage depending on the fact that trainees chose not to communicate a cyberattack on their organization.
### Beware of two common problems:
**1.**
-You might think that it is possible to create a whole parallel storyline to the scenario, and you will be right. However, reality is very complex and the exercise scenario is always a simplification of it. Beware of the trap of developing a scenario into several parallel storylines. The reason is that you will ultimately spend much more time in preparation but the problem is, most of the content prepared in this way will not be seen by your participants anyway (logically, they will choose only one of the storylines). Conditional injects are therefore an interesting and welcome option that conventional exercises do not offer. However, we recommend making these conditional storylines as minimalist as possible. Among other things, this will also come in handy during the exercise evaluation.
+You might think that it is possible to create a whole parallel storyline to the scenario, and you will be right. However, reality is very complex and the exercise scenario is always a simplification of it. Beware of the trap of developing a scenario into several parallel storylines. The reason is that you will ultimately spend much more time in preparation but the problem is, most of the content prepared in this way will not be seen by your trainees anyway (logically, they will choose only one of the storylines). Conditional injects are therefore an interesting and welcome option that conventional exercises do not offer. However, we recommend making these conditional storylines as minimalist as possible. Among other things, this will also come in handy during the exercise evaluation.
**2.**
-Linking of activities in the platforms is complex and needs to be verified several times that it cannot be bypassed. A concrete example might be a situation where a designer thinks like this: The final step in the exercise is the use of the tool "Convene Crisis Meeting". So we set the condition that after activating it, a questionnaire with a final reflection is automatically sent to the participants. At first glance, everything looks logical, however, we have to ask ourselves - can the participant use the tool earlier? For example, because of a bad evaluation of the situation - if so, it cannot be expected that this will always happen at the end of the exercise and therefore the condition set in this way is inappropriate.
+Linking of activities in the platforms is complex and needs to be verified several times that it cannot be bypassed. A concrete example might be a situation where a designer thinks like this: The final step in the exercise is the use of the tool "Convene Crisis Meeting". So we set the condition that after activating it, a questionnaire with a final reflection is automatically sent to the trainees. At first glance, everything looks logical, however, we have to ask ourselves - can the trainees use the tool earlier? For example, because of a bad evaluation of the situation - if so, it cannot be expected that this will always happen at the end of the exercise and therefore the condition set in this way is inappropriate.
## Combinations of injects
*Please, note that this section will be further developed later. *
- The platform allows us to create very specific types of scenarios that can combine diffrent types of injects, eg. email communication with interactive injects.
-- Testing is essential when designing these types of exercises - because it is harder to know whether the intended links between activities will be understood by participants.
+- Testing is essential when designing these types of exercises - because it is harder to know whether the intended links between activities will be understood by trainees.
??? "Bonus: How to make exercise more fun?"
diff --git a/docs/INJECT_process/specify/exercise_specification.md b/docs/INJECT_process/specify/exercise_specification.md
index c7e898df1f7c7092a66fc696165b9a4e38e685bc..7d7d958f8bfe3d2fa683bc574004a6450e9d3e5c 100644
--- a/docs/INJECT_process/specify/exercise_specification.md
+++ b/docs/INJECT_process/specify/exercise_specification.md
@@ -14,105 +14,96 @@
---
## General information
-**Three basic elements of an exercise - learning objectives, learning activities and injects are closely related**. We found it useful to draw out each relationship on paper first so that we know - what are our learning objectives for the exercise (LO), what specifically the participants will do in it (learning activities) and what injects we need to prepare for them. The whole design process is necessarily iterative.
+**Three basic elements of an exercise - learning objectives, learning activities and injects are closely related**. We found it useful to draw out each relationship on paper first so that we know - what are our learning objectives for the exercise (LO), what specifically the trainees will do in it (learning activities) and what injects we need to prepare for them. The whole design process is necessarily iterative.
- You can combine the described [Injects](../specify/injects.md) in any way you like, but you may also find it useful to start from a predefined type and modify it further.
As we indicated at the beginning of the section describing [Learning objectives](../specify/learning_objectives.md), you can approach the exercise in two basic ways:
-- Type One: **strategic decision-making exercises** - In this exercise, participants are presented with individual problems in the form of fre forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members.
+- Type One: **strategic decision-making exercises** - In this exercise, trainees are presented with individual problems in the form of fre forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members.
- The second type: **process-technical exercises** - based on an attempt to simulate the course of a process. The main input is e.g. a document describing the response to incidents, etc. injects here are primarily via emails, it is possible to use abstraction of specific tools or measures and at the end there is a reflexive part containing questionnaires or open questions. **Beware, if you don't have the actual organization and process as a basis**, you will be in a very difficult situation as a designer. In fact, if the organisation does not exist, you have to create it completely - a task that exceeds the contribution of TTX in its complexity.
??? "How to specify a strategic decision-making exercise"
- ### What do these exercises look like off the platform?
- Participants usually receive a paper assignment where the individual injects are presented, structured into phases or blocks.
- The injects are most often in the form of text, but sometimes pictures are also added. Each inject is accompanied by questions. Depending on the type of target group, participants work either in small teams or all together. Often a facilitator is involved.
-
- ### Modes of presentation in the platform:
- - It is recommended to divide participants into smaller teams (3-5 members). It is best if everyone has a laptop with access to the platform, and they designate that only one of them will interact with it. Alternatively, they will divide their roles in some way.
-
- - If a screen or larger screen is available, the exercise can be presented to a larger group (the discussion will be influenced by the dominant members). It is useful to have a facilitator.
-
- - If the participants cannot control the platform, one of the instructors can do so.
-
- - The exercise can theoretically be run for one participant. However, without discussion it becomes more of an interactive training. Each team can go at its own speed
- ### How to use different types of injects
- - Inject type: email - not used in this type of exercise.
- - Inject type: execise information - suitable for instructions and outlining the general context at the beginning of the exercise.
- - Injects of the type: document - strategic briefs, reports, etc. Consider sending before the exercise.
- - Inject type: questionnaire / scale - recommended.
- - Decision point - recommended.
- - Inject type: free form - the main variant of inject for this type of exercise.
- - Media injects - suitable for adding context or as a direct part of the script.
- - Inject type: An off-platform activity - a spice up of the scenario, use is not necessary.
- - Hint - as needed.
- ### Use of tools
- - No tools are necessary for this type of exercise. If we want to use them, we recommend them for specific processes or actions that you want to highlight for the participants.
- - Examples: The tool can substitute a supervisor’s decisions such as issuing a press release, conducting a legal analysis, contacting the police, etc.
-
- ### Possible scenario structures:
- #### A) Coherent story - individual injects are interconnected. Everything relates to one storyline that unfolds gradually. Example:
- - The exercise starts with a document type inject - with a report from a national authority describing the current serious situation. This is followed by a combination of inject type:
- - Free form - activities: propose, argue, summarize ...
- – Scale/questionnaire - evaluate, select, determine
- – The exercise is complemented first by injects in the social media channel that express the public's perception of the situation
- – The following is also article in major medium.
- - The exercise proceeds to a serious decision - decision point type inject - we have an alternative conditional inject for each of the variants.
- - Adding several injects to reflect on the actions taken (free form or questionnaire).
- - Exercise is otherwise more or less linear, hints do not need to be prepared in advance.
- #### B) A sets of situations
- The participants deals with different situations, which are not connected and are only briefly indicated, inspiration: https://x.com/badthingsdaily?lang=cs
- - The exercise starts with a general introduction in exercise information.
- - The first block follows with a description of the situation within the free form inject and a request for a description of the possible response.
- - Followed by 2-3 interactive injects.
- - The exercise continues in this way with a few more, tightened or slightly altered blocks.
- - At the end there is space for more general reflection.
- - The exercise can be improved by conditioning some of the responses in the free form injects.
+ ### What do these exercises look like off the platform?
+ Trainees usually receive a paper assignment where the individual injects are presented, structured into phases or blocks.
+ The injects are most often in the form of text, but sometimes pictures are also added. Each inject is accompanied by questions. Depending on the type of target group, trainees work either in small teams or all together. Often a facilitator is involved.
+
+ ### Modes of presentation in the platform:
+ - It is recommended to divide trainees into smaller teams (3-5 members). It is best if everyone has a laptop with access to the platform, and they designate that only one of them will interact with it. Alternatively, they will divide their roles in some way.
+
+ - If a screen or larger screen is available, the exercise can be presented to a larger group (the discussion will be influenced by the dominant members). It is useful to have a facilitator.
+
+ - If the trainees cannot control the platform, one of the instructors can do so.
+
+ - The exercise can theoretically be run for one trainee. However, without discussion it becomes more of an interactive training. Each team can go at its own speed
+ ### How to use different types of injects
+ - Inject type: email - not used in this type of exercise.
+ - Inject type: execise information - suitable for instructions and outlining the general context at the beginning of the exercise.
+ - Injects of the type: document - strategic briefs, reports, etc. Consider sending before the exercise.
+ - Inject type: questionnaire / scale - recommended.
+ - Decision point - recommended.
+ - Inject type: free form - the main variant of inject for this type of exercise.
+ - Media injects - suitable for adding context or as a direct part of the script.
+ - Inject type: An off-platform activity - a spice up of the scenario, use is not necessary.
+ - Hint - as needed.
+ ### Use of tools
+ - No tools are necessary for this type of exercise. If we want to use them, we recommend them for specific processes or actions that you want to highlight for the trainees.
+ - Examples: The tool can substitute a supervisor's decisions such as issuing a press release, conducting a legal analysis, contacting the police, etc.
+
+ ### Possible scenario structures:
+ #### A) Coherent story - individual injects are interconnected. Everything relates to one storyline that unfolds gradually. Example:
+ - The exercise starts with a document type inject - with a report from a national authority describing the current serious situation. This is followed by a combination of inject type:
+ - Free form - activities: propose, argue, summarize ...
+ – Scale/questionnaire - evaluate, select, determine
+ – The exercise is complemented first by injects in the social media channel that express the public's perception of the situation
+ – The following is also article in major medium.
+ - The exercise proceeds to a serious decision - decision point type inject - we have an alternative conditional inject for each of the variants.
+ - Adding several injects to reflect on the actions taken (free form or questionnaire).
+ - Exercise is otherwise more or less linear, hints do not need to be prepared in advance.
+ #### B) A sets of situations
+ The trainees deals with different situations, which are not connected and are only briefly indicated, inspiration: https://x.com/badthingsdaily?lang=cs
+ - The exercise starts with a general introduction in exercise information.
+ - The first block follows with a description of the situation within the free form inject and a request for a description of the possible response.
+ - Followed by 2-3 interactive injects.
+ - The exercise continues in this way with a few more, tightened or slightly altered blocks.
+ - At the end there is space for more general reflection.
+ - The exercise can be improved by conditioning some of the responses in the free form injects.
??? "How to specify a process-technical exercise"
- ### What do these exercises look like on the platform?
- Participants usually receive a paper assignment where individual injects are presented, structured into phases or blocks. The injects are most often in the form of text, but sometimes pictures are also added. Each inject is accompanied by questions. Participants work in teams. It is assumed that the exercise relates to a process with which the participants are familiar.
- ### Modes of presentation in the platform:
- - It is recommended to divide participants into smaller teams (3-5 members). It is best if each person has a laptop with access to the platform, and designates that only one of them will interact with it.
- - The exercise can be completed even if only one of the participants has a computer.
-
- ### How to use different types of injects
-
- - Inject type: Email - the main type of inject for this type of exercise.
- - Inject type: Execise information - intro inject, identity, tasks, context etc.
- - Inject type: Document - politics, structures, manuals, guides
- - Inject type: questionnaire / scale - reflection, propability
- - Decision point - usually not used (decisions are made in an email communication)
- - Inject type: free form - gathering opinions or more speicific reflections.
- - Medial injects - context, impact of the actions
- - Inject type: Hint - response to wrong action, action that wass missed or stuck in the exercise.
-
- ### Use of tools
- - For this type of exercise, the tools are absolutely essential. They usually try to mimic real tools that would be available to the trainee in a real situation and that could be used to resolve the incident. Most often these will be tools that are not too complex, such as IP blocking, network traffic dump, logging service logging, or creating a backup.
- ### Possible scenario structure:
- - Exercises most often start with an introductory inject in exercise information, which includes a description of the organisation concerned, the tasks of the exercisers and, if necessary, important contact details or documents to work with.
- - The following 2 options are available, either the participants will learn about the problem or incident, for example through a notification they receive by email, or they can be tasked to be proactive and use, for example, a system scanning tool to detect a problem in the system (a very technical exercise).
- - The tools that the participant is tasked with using to resolve the incident or support the process play a significant role here. However, the whole scenario does not revolve only around the tools, but combines extensively with elements from the strategic decision-making exercises, where participants are also guided through questionnaires, either in the form of scales or free form.
- - Many processes are also heavily based on communication with actors in the organization, which implies the possibility of abundantly involving communication via email with fictional characters (careful reduces automation and keeps the instructor more busy).
- - The exercise is very much based on the actions of the participant and only if they perform the anticipated actions can they move towards the goal of resolving the incident.
- - Very often, hints are implemented to prevent the team from getting completely
- - In the end, send reflective questionnaires
-
-
-
-
-
-
-
-
+ ### What do these exercises look like on the platform?
+ Trainees usually receive a paper assignment where individual injects are presented, structured into phases or blocks. The injects are most often in the form of text, but sometimes pictures are also added. Each inject is accompanied by questions. Trainees work in teams. It is assumed that the exercise relates to a process with which the trainees are familiar.
+ ### Modes of presentation in the platform:
+ - It is recommended to divide trainees into smaller teams (3-5 members). It is best if each person has a laptop with access to the platform, and designates that only one of them will interact with it.
+ - The exercise can be completed even if only one of the trainees has a computer.
+
+ ### How to use different types of injects
+
+ - Inject type: Email - the main type of inject for this type of exercise.
+ - Inject type: Execise information - intro inject, identity, tasks, context etc.
+ - Inject type: Document - politics, structures, manuals, guides
+ - Inject type: questionnaire / scale - reflection, propability
+ - Decision point - usually not used (decisions are made in an email communication)
+ - Inject type: free form - gathering opinions or more speicific reflections.
+ - Medial injects - context, impact of the actions
+ - Inject type: Hint - response to wrong action, action that wass missed or stuck in the exercise.
+
+ ### Use of tools
+ - For this type of exercise, the tools are absolutely essential. They usually try to mimic real tools that would be available to the trainee in a real situation and that could be used to resolve the incident. Most often these will be tools that are not too complex, such as IP blocking, network traffic dump, logging service logging, or creating a backup.
+ ### Possible scenario structure:
+ - Exercises most often start with an introductory inject in exercise information, which includes a description of the organisation concerned, the tasks of the exercisers and, if necessary, important contact details or documents to work with.
+ - The following 2 options are available, either the trainees will learn about the problem or incident, for example through a notification they receive by email, or they can be tasked to be proactive and use, for example, a system scanning tool to detect a problem in the system (a very technical exercise).
+ - The tools that the trainee is tasked with using to resolve the incident or support the process play a significant role here. However, the whole scenario does not revolve only around the tools, but combines extensively with elements from the strategic decision-making exercises, where trainees are also guided through questionnaires, either in the form of scales or free form.
+ - Many processes are also heavily based on communication with actors in the organization, which implies the possibility of abundantly involving communication via email with fictional characters (careful reduces automation and keeps the instructor more busy).
+ - The exercise is very much based on the actions of the trainee and only if they perform the anticipated actions can they move towards the goal of resolving the incident.
+ - Very often, hints are implemented to prevent the team from getting completely
+ - In the end, send reflective questionnaires
<div class="navigation" markdown>
- [← Tools](../specify/tools.md){ .md-button }
- [Advanced approaches →](../specify/advanced_approaches.md){ .md-button }
+ [← Tools](../specify/tools.md){ .md-button }
+ [Advanced approaches →](../specify/advanced_approaches.md){ .md-button }
</div>
<div class="navigation" markdown>
- [Specification Phase Overview](../specify/overview.md){ .md-button }
-</div>
-
+ [Specification Phase Overview](../specify/overview.md){ .md-button }
+</div>
\ No newline at end of file
diff --git a/docs/INJECT_process/specify/injects.md b/docs/INJECT_process/specify/injects.md
index f9012a57afb3b9a80d9b0b9555a4754f845200b0..8508b78c466005764fe85a0fbecc203c36e45a42 100644
--- a/docs/INJECT_process/specify/injects.md
+++ b/docs/INJECT_process/specify/injects.md
@@ -1,8 +1,8 @@
# INJECTS
## In a nutshell
-- Inject is the information that we send to the participants of the exercise and to which they have to react.
- -This is a very simple inject: "Suddenly no computers are working in your organization. How will you react?"
+- Inject is the information that we send to the trainees of the exercise and to which they have to react.
+-This is a very simple inject: "Suddenly no computers are working in your organization. How will you react?"
- By using a digital platform, we have many more options that can be combined in the exercises.
@@ -18,29 +18,29 @@
??? "Channels"
- The location within the platform where the inject appears - each inject has just one channel within the exercise. At the same time, you can deliver the same inject information via diffrent channels. The basic channels are:
+ The location within the platform where the inject appears - each inject has just one channel within the exercise. At the same time, you can deliver the same inject information via diffrent channels. The basic channels are:
- - **Exercise information** – general channel for communication about exercise
- - **Emails** – classical email communication
- - **Tools** - tools outputs
- – **Questions** - a channel where various interactive injects (e.g. questionnaires) are displayed. The channel name can be changed.
- <BR>
- The implementation of media channels is being considered:
- - **Website** - for simulating websites of different organizations
- - **Intranet**
- - **Social media** / - can be named as X, Facebook, LN, ...
- - **Media** - injects in the form of articles, audio or video. May carry the name of a specific media outlet.
+ - **Exercise information** – general channel for communication about exercise
+ - **Emails** – classical email communication
+ - **Tools** - tools outputs
+ – **Questions** - a channel where various interactive injects (e.g. questionnaires) are displayed. The channel name can be changed.
+ <BR>
+ The implementation of media channels is being considered:
+ - **Website** - for simulating websites of different organizations
+ - **Intranet**
+ - **Social media** / - can be named as X, Facebook, LN, ...
+ - **Media** - injects in the form of articles, audio or video. May carry the name of a specific media outlet.
??? "Overlay"
- This is an interface effect that directly affects the dynamics of the exercise. While normally, for example, the questionnaire will be displayed in the preset channel, **if this inject is also set as an overlay, it will be displayed first above everything else**.
- <br>
-
- - Example, the overaly questionnaire will cause everything else to go dark and it will appear in the middle of the screen. This makes the inject disrupt the participants' existing activity and draws their attention. Some strategy exercises may consist entirely of injects presented through an overlay.
+ This is an interface effect that directly affects the dynamics of the exercise. While normally, for example, the questionnaire will be displayed in the preset channel, **if this inject is also set as an overlay, it will be displayed first above everything else**.
+ <br>
+
+ - Example, the overaly questionnaire will cause everything else to go dark and it will appear in the middle of the screen. This makes the inject disrupt the trainees' existing activity and draws their attention. Some strategy exercises may consist entirely of injects presented through an overlay.
??? "A caption: "Not implemented""
- The injects with this caption have not yet been implemented in the platform. They are likely to be added in the future, though they may be modified based on team discussions.
+ The injects with this caption have not yet been implemented in the platform. They are likely to be added in the future, though they may be modified based on team discussions.
@@ -48,239 +48,238 @@
Let's now take a detailed look at the different inject options. This is not a final list; you can create any inject options you want from the basic elements in the platform. However, we describe these options because they have proven valuable in most exercises. Think of inject options as proven building blocks that you can use to construct your exercises. We describe their typical use in an exercise and the related learning activities. [Learning activities](../specify/learning_activities.md).
??? "1. Inject option: Email"
- ### Inject description
- This is a classic email conversation. It can also contain email attachments. The sender address is also an important part of this option of inject and is fully configurable. Emails in the form of an inject can be sent either automatically or as an instructor activity.
- ### Channel
- Only a specific channel for emails. The channel functions as a simple email client.
- ### Overlay
- Emails are usually not used in conjunction with overlays.
- ### Typical use in an exercise
- Emails can be used in any type of exercise. They are essential in process-technical exercises.
- ### Possible mistakes
- - An important prerequisite for the use of emails is that the exercise participants know their "game identity". In other words, they need to be clear why they are receiving the email. If you, as an instructor, do not communicate this well, there may be misunderstandings that result in not being able to use the pre-prepared template responses.
- - You must identify all email addresses prior to the exercise. Omissions cannot simply be resolved during the exercise, any address must be entered into the platform in advance. Therefore, think carefully about their structure and meaning. For example, ensure that all emails within the organisation have the same spelling. Also consider creating email addresses to give to participants even if you don't intend to use them - it completes the scenario better and adds more decision-making for participants.
- - Another possible error is a misunderstanding of the context for which this tool is suited. Could you imagine dealing with a truly escalated crisis situation through emails? Or would it be more likely that the team would be more likely to meet physically or at least make a phone call?
- - Consider whether it is necessary to specifically instruct participants at the beginning of the exercise that the emails are legitimate and that they do not need to look for phishing attempts. In one of our first exercises, we had participants simply not open the initial email because they thought it was phishing - in short, they expected it in a cybersecurity exercise.
- ### Related manifestations in the platform
- - Establishing email communication - participants sent an email. LA is filled just by sending an email. Only 1x can be used for each email address.
- - Email reply from the instructor - see above.
- ### Examples
- - Internal communication in the organisation.
- - Inter-organisational communication.
- - Communication with oustsorced co-workers.
- - Communication with journalists.
- - Etc.
+ ### Inject description
+ This is a classic email conversation. It can also contain email attachments. The sender address is also an important part of this option of inject and is fully configurable. Emails in the form of an inject can be sent either automatically or as an instructor activity.
+ ### Channel
+ Only a specific channel for emails. The channel functions as a simple email client.
+ ### Overlay
+ Emails are usually not used in conjunction with overlays.
+ ### Typical use in an exercise
+ Emails can be used in any type of exercise. They are essential in process-technical exercises.
+ Strategic decision-making exercises can be fully conducted via email, but require a scenario designed to work with specific individuals (concrete names and positions) within the organization.
+ ### Possible mistakes
+ - An important prerequisite for the use of emails is that the exercise trainees know their "game identity". In other words, they need to be clear why they are receiving the email. If you, as an instructor, do not communicate this well, there may be misunderstandings that result in not being able to use the pre-prepared template responses.
+ - You must identify all email addresses prior to the exercise. Omissions cannot simply be resolved during the exercise, any address must be entered into the platform in advance. Therefore, think carefully about their structure and meaning. For example, ensure that all emails within the organisation have the same spelling. Also consider creating email addresses to give to trainees even if you don't intend to use them - it completes the scenario better and adds more decision-making for trainees.
+ - Another possible error is a misunderstanding of the context for which this tool is suited. Could you imagine dealing with a truly escalated crisis situation through emails? Or would it be more likely that the team would be more likely to meet physically or at least make a phone call?
+ - Consider whether it is necessary to specifically instruct trainees at the beginning of the exercise that the emails are legitimate and that they do not need to look for phishing attempts. In one of our first exercises, we had trainees simply not open the initial email because they thought it was phishing - in short, they expected it in a cybersecurity exercise.
+ ### Related manifestations in the platform
+ - Establishing email communication - trainees sent an email. LA is filled just by sending an email. Only 1x can be used for each email address.
+ - Email reply from the instructor - see above.
+ ### Examples
+ - Internal communication in the organisation.
+ - Inter-organisational communication.
+ - Communication with oustsorced co-workers.
+ - Communication with journalists.
+ - Etc.
??? "2. Inject option: Execise information "
- ### Inject description
- It is used to communicate basic information about the exercise - e.g., introductory inject, contextual information, exercise time shift information, closing information.
- ### Channel
- Exercise information.
- ### Overlay
- The Exercise information inject can be displayed as an overlay, this is especially useful for important notifications or hints.
- ### Typical use in exercise
- This inject option is defacto a form of instruction, so it can be used in any exercise.
- ### Possible mistakes
- - Mixing "ingame" information and information outside the exercise. Our recommendation is that all information should be communicated in a manner as appropriate to the scenario as possible. In other words, we recommend omitting information that shifts the context out of the scenario (e.g., noting that there is a catering ready, etc.).
- ### Related manifestations in the platform
- - Depending on the information presented, any LA may follow up. However, the Click on the Confirmation Button has a specific use - e.g. in situations where we want participants to consciously end the phase of reading more extensive input information and move on.
- ### Examples
- - Information about the exercise identity of the participants.
- - Basic rules of the exercise.
- - Information that the next injects take place at a different time than the previous one.
- - Context information that cannot be naturally communicated within other injects.
- - Summary of the exercise.
+ ### Inject description
+ It is used to communicate basic information about the exercise - e.g., introductory inject, contextual information, exercise time shift information, closing information.
+ ### Channel
+ Exercise information.
+ ### Overlay
+ The Exercise information inject can be displayed as an overlay, this is especially useful for important notifications or hints.
+ ### Typical use in exercise
+ This inject option is defacto a form of instruction, so it can be used in any exercise.
+ ### Possible mistakes
+ - Mixing "ingame" information and information outside the exercise. Our recommendation is that all information should be communicated in a manner as appropriate to the scenario as possible. In other words, we recommend omitting information that shifts the context out of the scenario (e.g., noting that there is a catering ready, etc.).
+ ### Related manifestations in the platform
+ - Depending on the information presented, any LA may follow up. However, the Click on the Confirmation Button has a specific use - e.g. in situations where we want trainees to consciously end the phase of reading more extensive input information and move on.
+ ### Examples
+ - Information about the exercise identity of the trainees.
+ - Basic rules of the exercise.
+ - Information that the next injects take place at a different time than the previous one.
+ - Context information that cannot be naturally communicated within other injects.
+ - Summary of the exercise.
??? "3. Inject option: Document"
- ### Inject description
- This inject means sending a pdf document to the participants to read, analyze or make a decision based on it.
- ### Channel
- The document is most often used in the Exercise information channel , but can also be presented in other, more specialized channels such as an intranet or website. Last but not least, it can also be sent by an email or using tools (more in the specific section ->Â [Tools](../specify/tools.md)) .
- ### Overlay
- It can be used.
- ###Â Typical use in the exercise
- Sending reports, analyses, briefings, internal regulations, etc. At the same time, the document can serve as a certain assignment, a framework, which is then followed by other injects - for example, questionnaires or decision point.
- ### Possible mistakes
- - Sending a long document. If you need participants to read a large amount of text, do everything you can to get them to do so before the exercise - e.g. sending handouts in advance.
- ### Related manifestations in the platform
- - It depends on which channel you are presenting the document in and what the content is. For example, the document can be initiated by LA, which will be linked to an email response from the instructor, etc.
- - It can be very useful to link to a click on the confirmation button. Imagine a document display with a button below it that says "Done", "Analysis complete", "Understood", "Read", etc. *Please note that this option is not yet implemented.*
- ### Examples
- - Incident response plan
- - Analysis of the media situation
- - Threat analysis
- - Expert group report
- - Warning from the national authority
- - Opinion of the Authority
- - Etc.
+ ### Inject description
+ This inject means sending a pdf document to the trainees to read, analyze or make a decision based on it.
+ ### Channel
+ The document is most often used in the Exercise information channel , but can also be presented in other, more specialized channels such as an intranet or website. Last but not least, it can also be sent by an email or using tools (more in the specific section -> [Tools](../specify/tools.md)) .
+ ### Overlay
+ It can be used.
+ ### Typical use in the exercise
+ Sending reports, analyses, briefings, internal regulations, etc. At the same time, the document can serve as a certain assignment, a framework, which is then followed by other injects - for example, questionnaires or decision point.
+ ### Possible mistakes
+ - Sending a long document. If you need trainees to read a large amount of text, do everything you can to get them to do so before the exercise - e.g. sending handouts in advance.
+ ### Related manifestations in the platform
+ - It depends on which channel you are presenting the document in and what the content is. For example, the document can be initiated by LA, which will be linked to an email response from the instructor, etc.
+ - It can be very useful to link to a click on the confirmation button. Imagine a document display with a button below it that says "Done", "Analysis complete", "Understood", "Read", etc. *Please note that this option is not yet implemented.*
+ ### Examples
+ - Incident response plan
+ - Analysis of the media situation
+ - Threat analysis
+ - Expert group report
+ - Warning from the national authority
+ - Opinion of the Authority
+ - Etc.
??? "4. Inject option: Questionnaire/scale"
- ### Inject description
- Standard questionnaire - single choice or multiple choice. It can also act as a scale.
- ### Channel
- They are displayed in a special channel, which we refer to here as Questions. The channel can of course be called something else.
- ### Overlay
- The use is very appropriate.
- ### Typical use in exercises
- This inject option is very suitable for strategic decision-making exercises for presenting scenario-related questions. For process-technical exercises it can also be used, for example towards the end of the exercise, to reflect on the steps taken.
- ### Possible mistakes
- - Avoid making the whole exercise just a questionnaire. Such exercises do exist, but it is not engaging for the participants and it does not fully exploit the potential of the platform.
- - Avoid making the exercise look like a knowledge test. Questionnaires can often be about expressing opinions (e.g. scales) rather than factual accuracy.
- ### Related manifestations in the platform
- - Submiting of questionaire is manifestation itself.
- ### Examples:
- - Assessment of the gravity of the situation
- – Reflection of actions
- - Probability assessment
- - Answer a factual question about the scenario (legal, organisational and technological aspects, competences, ...).
- - Etc.
+ ### Inject description
+ Standard questionnaire - single choice or multiple choice. It can also act as a scale.
+ ### Channel
+ They are displayed in a special channel, which we refer to here as Questions. The channel can of course be called something else.
+ ### Overlay
+ The use is very appropriate.
+ ### Typical use in exercises
+ This inject option is very suitable for strategic decision-making exercises for presenting scenario-related questions. For process-technical exercises it can also be used, for example towards the end of the exercise, to reflect on the steps taken.
+ ### Possible mistakes
+ - Avoid making the whole exercise just a questionnaire. Such exercises do exist, but it is not engaging for the trainees and it does not fully exploit the potential of the platform.
+ - Avoid making the exercise look like a knowledge test. Questionnaires can often be about expressing opinions (e.g. scales) rather than factual accuracy.
+ ### Related manifestations in the platform
+ - Submiting of questionaire is manifestation itself.
+ ### Examples:
+ - Assessment of the gravity of the situation
+ – Reflection of actions
+ - Probability assessment
+ - Answer a factual question about the scenario (legal, organisational and technological aspects, competences, ...).
+ - Etc.
??? "5. Inject option: Decision point"
- ## Not yet implemented
-
- ### Inject description
- This is a similar inject to the questionnaire. However, the difference is that some options can be linked to another, automatic response in the platform. The number of options for a decision is 2-5.
- - Simple example: decide the situation to communicate YES/NO to the public. If you choose "NO", the platform will respond by receiving an email a few minutes later from a curious journalist who has heard about the situation.
- ### Channel
- These injects are displayed in a special channel, which we refer to here as Questions. The channel can of course be called something else.
- ### Overlay
- The use is very appropriate.
- ### Typical use in exercises
- This inject option is very suitable for strategic decision-making exercises for situations where it is necessary to choose one of the options. It is particularly useful when you want to emphasize the importance of a decision. Using this inject option will draw more attention to the decision and is likely to lead to discussion.
- ### Possible mistakes
- Avoid creating too many alternative paths - such an exercise will be much more difficult to prepare and most of the content will not be seen by participants anyway. Simplification is desirable.
- ### Related manifestations in the platform
- - Submiting of decision point is manifestation itself.
- ### Examples:
- - Ransomware ransom
- - Contacting the authority/stakeholder
- - Escalation
- - Declaration of a state of emergency.
- - Etc.
+ ## Not yet implemented
+
+ ### Inject description
+ This is a similar inject to the questionnaire. However, the difference is that some options can be linked to another, automatic response in the platform. The number of options for a decision is 2-5.
+ - Simple example: decide the situation to communicate YES/NO to the public. If you choose "NO", the platform will respond by receiving an email a few minutes later from a curious journalist who has heard about the situation.
+ ### Channel
+ These injects are displayed in a special channel, which we refer to here as Questions. The channel can of course be called something else.
+ ### Overlay
+ The use is very appropriate.
+ ### Typical use in exercises
+ This inject option is very suitable for strategic decision-making exercises for situations where it is necessary to choose one of the options. It is particularly useful when you want to emphasize the importance of a decision. Using this inject option will draw more attention to the decision and is likely to lead to discussion.
+ ### Possible mistakes
+ Avoid creating too many alternative paths - such an exercise will be much more difficult to prepare and most of the content will not be seen by trainees anyway. Simplification is desirable.
+ ### Related manifestations in the platform
+ - Submiting of decision point is manifestation itself.
+ ### Examples:
+ - Ransomware ransom
+ - Contacting the authority/stakeholder
+ - Escalation
+ - Declaration of a state of emergency.
+ - Etc.
??? "6. Inject option: Free form"
## Not yet implemented
### Inject description
- Inject with open response, can contain input in the form of image, video or text. Participants respond in the form of free text.
- ### Channel
- These injects are displayed in a special channel, which we refer to here as Questions. The channel can of course be called something else.
- ### Overlay
- The use is very appropriate.
- ### Typical use in exercises
- This inject is very suitable for strategic decision-making exercises.
- ### Possible mistakes
- - Too long or complex assignments.
- - Not using the possibility of conditioned responses to the free forms. It can enhance the exercise participants.
- ###Â Related manifestations in the platform
- - Firstly, there is the actual submiting of the free form inject, which is sufficient if we don't need to evaluate the content during the exercise.
- - Secondly, it is the instructor's response - i.e., the instructor reads the content and evaluates the fulfillment of a predefined condition - accordingly, he chooses a response that can trigger further automated steps.
- ### Examples:
- - A short description of an incident in the text and a request for participants to briefly describe the first steps they will take in their organisation in response.
- - Similarly, they can present arguments, summarise their position, assess the situation, etc. The assignment can take the form of text, image or video.
+ Inject with open response, can contain input in the form of image, video or text. Trainees respond in the form of free text.
+ ### Channel
+ These injects are displayed in a special channel, which we refer to here as Questions. The channel can of course be called something else.
+ ### Overlay
+ The use is very appropriate.
+ ### Typical use in exercises
+ This inject is very suitable for strategic decision-making exercises.
+ ### Possible mistakes
+ - Too long or complex assignments.
+ - Not using the possibility of conditioned responses to the free forms. It can enhance the exercise trainees.
+ ### Related manifestations in the platform
+ - Firstly, there is the actual submiting of the free form inject, which is sufficient if we don't need to evaluate the content during the exercise.
+ - Secondly, it is the instructor's response - i.e., the instructor reads the content and evaluates the fulfillment of a predefined condition - accordingly, he chooses a response that can trigger further automated steps.
+ ### Examples:
+ - A short description of an incident in the text and a request for trainees to briefly describe the first steps they will take in their organisation in response.
+ - Similarly, they can present arguments, summarise their position, assess the situation, etc. The assignment can take the form of text, image or video.
??? "7. Inject option: Media"
- ## Not yet implemented
- ### Description of the inject
- Media injects are currently a combination of media outputs and specifically named channels that is an abstraction of a real-world channel (the platform does not attempt to mimic the look of social networks or websites).
- - There may be more than one such channel in each exercise. Let's take a few examples: websites of different organizations, social networks, mass media or intranets. Injects can be in the form of plain text, or graphic materials (e.g. a Facebook post screenshots) or a prepared video can be inserted into the platform.
- ### Channel
- In general, we refer to this channel as "media." It's likely that multiple media channels with different names can be used during the exercise. For example, you could have one media channel called "FB" to display screenshots of FB posts, and another channel for the national cybersecurity authority’s website to display warnings.
- ### Overlay
- It may be appropriate in some cases - e.g. breaking news, warnings, etc. It always depends on the exercise scenario.
- ### Typical use in exercise:
- - Website or intranet: e.g. www.narodniautorita.cz and posts here can be titled as blog, warning, etc. In the same logic, the feeds can be, for example, the website of a practitioners' organisation or other relevant body. Pre-prepared graphics (i.e. screenshots from the web, etc.) can also be used.
- - Mass media: works similarly to the previous one. It is very useful to use pre-prepared graphic materials or videos. The media can report on a current crisis that affects the practitioners directly or just changes the context of the exercise.
- - Social media –specific posts can influence the perception of the situation in the exercise from the point of view of ordinary people or our target groups. Again, this can relate directly to the situation in the scenario (response to a service outage) or a more general trend that will influence future decision making.
-
- ### Possible mistakes
- - The platform does not currently style specific media channels - it is therefore advisable to use pre-prepared graphics or videos within them.
- - Inconsistency with the "media behaviour" of the target group: choose channels that are actually relevant for the exercise. Do not try to use media channels just because you have the opportunity.
- ### Related manifestations in the platform
- - It very much depends on the context of the scenario. The related manifestations in the platform can be very explicit. For example, we expect participants to immediately contact their PR department in response to the report they have seen, or we may ask them some form of question - an interactive inject - depending on the events presented in the media. Finally, we can imagine that media injects only help to complete the context of the exercise and are not closely linked to any specific activity.
-
- ### Examples:
- - Negative reactions on Facebook in response to our service outage.
- - TV report on the terrorist attack in our city.
- - A hateful blog post on a organization's website that appeared here because of stolen login credentials.
- - Warning from the IT department on the organisation's intranet.
-
+ ## Not yet implemented
+ ### Description of the inject
+ Media injects are currently a combination of media outputs and specifically named channels that is an abstraction of a real-world channel (the platform does not attempt to mimic the look of social networks or websites).
+ - There may be more than one such channel in each exercise. Let's take a few examples: websites of different organizations, social networks, mass media or intranets. Injects can be in the form of plain text, or graphic materials (e.g. a Facebook post screenshots) or a prepared video can be inserted into the platform.
+ ### Channel
+ In general, we refer to this channel as "media." It's likely that multiple media channels with different names can be used during the exercise. For example, you could have one media channel called "FB" to display screenshots of FB posts, and another channel for the national cybersecurity authority's website to display warnings.
+ ### Overlay
+ It may be appropriate in some cases - e.g. breaking news, warnings, etc. It always depends on the exercise scenario.
+ ### Typical use in exercise:
+ - Website or intranet: e.g. www.narodniautorita.cz and posts here can be titled as blog, warning, etc. In the same logic, the feeds can be, for example, the website of a practitioners' organisation or other relevant body. Pre-prepared graphics (i.e. screenshots from the web, etc.) can also be used.
+ - Mass media: works similarly to the previous one. It is very useful to use pre-prepared graphic materials or videos. The media can report on a current crisis that affects the practitioners directly or just changes the context of the exercise.
+ - Social media –specific posts can influence the perception of the situation in the exercise from the point of view of ordinary people or our target groups. Again, this can relate directly to the situation in the scenario (response to a service outage) or a more general trend that will influence future decision making.
+
+ ### Possible mistakes
+ - The platform does not currently style specific media channels - it is therefore advisable to use pre-prepared graphics or videos within them.
+ - Inconsistency with the "media behaviour" of the target group: choose channels that are actually relevant for the exercise. Do not try to use media channels just because you have the opportunity.
+ ### Related manifestations in the platform
+ - It very much depends on the context of the scenario. The related manifestations in the platform can be very explicit. For example, we expect trainees to immediately contact their PR department in response to the report they have seen, or we may ask them some form of question - an interactive inject - depending on the events presented in the media. Finally, we can imagine that media injects only help to complete the context of the exercise and are not closely linked to any specific activity.
+
+ ### Examples:
+ - Negative reactions on Facebook in response to our service outage.
+ - TV report on the terrorist attack in our city.
+ - A hateful blog post on a organization's website that appeared here because of stolen login credentials.
+ - Warning from the IT department on the organisation's intranet.
+
??? "8. Inject option: Off-platform activity"
- ## Not yet implemented
- ### Inject description
- Sometimes it can really make sense to include an off-platform inject. This increases our possibilities for creating interesting scenarios. Technically, this is an instruction in the platform that is combined with a confirmation button. Example: Instruction 'Discuss now three action steps that you could implement in your organization later this month. Once you have that, click on the button." And below that instruction would be a confirmation button "Done".
- ### Channel
- The confirmation button will display in Exercise information channel.
-
- ### Overlay
- It is very useful for this inject option.
-
- ### Typical use in exercise:
- - Invitation to participants to discuss something.
- - Invite a representative of the team to attend a physical interview with the journalist.
- - Call for a representative to go to the classified room and see documents that other members do not have access to.
- ### Possible mistakes
- - By having the activity take place outside the platform, think about its evaluation. It may be followed up by other LAs - e.g. writing a summary in an email to a supervisor, etc.
- Or you can also decide to evaluate it outside the platform - e.g. a journalist will conduct an evaluation of the interview, according to the criteria given.
- ### Related manifestations in the platform
- - Click on the confirmation button. However, it should be added that off-platform activities can also be stimulated by other injects - for example, an email instruction arrives for an off-platform task, after which a response is required. Thus, it mainly depends on the creativity of the designer.
- ### Examples:
- - Crisis interview.
- - Press conference.
- - Convening a crisis meeting that takes place in person and where, for example, participants must present the situation to management.
- - Discussion on a predefined topic.
- - Telephone interview.
- - Obtaining information from a classified document.
+ ## Not yet implemented
+ ### Inject description
+ Sometimes it can really make sense to include an off-platform inject. This increases our possibilities for creating interesting scenarios. Technically, this is an instruction in the platform that is combined with a confirmation button. Example: Instruction 'Discuss now three action steps that you could implement in your organization later this month. Once you have that, click on the button." And below that instruction would be a confirmation button "Done".
+ ### Channel
+ The confirmation button will display in Exercise information channel.
+
+ ### Overlay
+ It is very useful for this inject option.
+
+### Typical use in exercise:
+ - Invitation to trainees to discuss something.
+ - Invite a representative of the team to attend a physical interview with the journalist.
+ - Call for a representative to go to the classified room and see documents that other members do not have access to.
+### Possible mistakes
+ - By having the activity take place outside the platform, think about its evaluation. It may be followed up by other LAs - e.g. writing a summary in an email to a supervisor, etc.
+ Or you can also decide to evaluate it outside the platform - e.g. a journalist will conduct an evaluation of the interview, according to the criteria given.
+### Related manifestations in the platform
+ - Click on the confirmation button. However, it should be added that off-platform activities can also be stimulated by other injects - for example, an email instruction arrives for an off-platform task, after which a response is required. Thus, it mainly depends on the creativity of the designer.
+### Examples:
+ - Crisis interview.
+ - Press conference.
+ - Convening a crisis meeting that takes place in person and where, for example, trainees must present the situation to management.
+ - Discussion on a predefined topic.
+ - Telephone interview.
+ - Obtaining information from a classified document.
??? "9. Inject option: Hint"
- ### Inject description
- It's a form of conditioned inject that activates if participants miss an action, take the wrong action, or become stuck.
- Example - participants did not report the incident to management, but should have. The hint can be automated or sent by the instructor on an ad hoc basis.
- - **Automated hints:** are set in advance, in response to something happening or not happening by a certain time. These hints are set based on exercise designer intuition about what might be causing the problem or data gathered from earlier runs of the exercise.
- - **Ad hoc hints:** are created and sent by the instructor in response to unexpected developments during the exercise.
- ### Channel
- Hints are displayed in the exercise information channel.
- ###Â Overlay
- It is very suitable to use it.
- ###Â Typical use in an exercise
- - We want to alert participants to a misstep, an omission of an action, or help them move on.
- - If you were creating some form of tutorial, you could also use them for positive feedback.
- ### Possible mistakes
- - Overuse of hints - they should be used very sensitively and only when absolutely necessary - i.e. when it is not possible to nudge the participants with another form of inject - for example with an email from an exercise entity (this form of ingame hint is usually much better).
- - Overuse of ad-hoc hints - if possible, rely instead on pre-prepared hints that come for selected situations.
- - We do not recommend using hints to give positive feedback during exercise because uncertainty is an important part of the exercise.
- ### Related manifestations in the platform:
- - The purpose of the hint is to alert users that they should engage in a learning activity.
- ### Examples:
- - Participants forget to contact their CISO, the whole scenario freezes because of this. Hint suggests to do it.
- - The participants convened the crisis staff too early - hint suggests to proceed with further communication after the requirements given in the respective process have been fulfilled.
- - In the tutorial we’ve designed for our students, we aim to confirm the correct use of the tool. Specifically, when the student clicks on the required action using the tool, an overlay hint appears, confirming that they have successfully completed the step.
+ ### Inject description
+ It's a form of conditioned inject that activates if trainees miss an action, take the wrong action, or become stuck.
+ Example - trainees did not report the incident to management, but should have. The hint can be automated or sent by the instructor on an ad hoc basis.
+ - **Automated hints:** are set in advance, in response to something happening or not happening by a certain time. These hints are set based on exercise designer intuition about what might be causing the problem or data gathered from earlier runs of the exercise.
+ - **Ad hoc hints:** are created and sent by the instructor in response to unexpected developments during the exercise.
+ ### Channel
+ Hints are displayed in the exercise information channel.
+ ### Overlay
+ It is very suitable to use it.
+ ### Typical use in an exercise
+ - We want to alert trainees to a misstep, an omission of an action, or help them move on.
+ - You can use a hint to notify about incoming emails—especially useful in strategic decision-making exercises or in scenarios where trainees do not work with emails regularly.
+ - If you were creating some form of tutorial, you could also use them for positive feedback.
+ ### Possible mistakes
+ - Overuse of hints - they should be used very sensitively and only when absolutely necessary - i.e. when it is not possible to nudge the trainees with another form of inject - for example with an email from an exercise entity (this form of ingame hint is usually much better).
+ - Overuse of ad-hoc hints - if possible, rely instead on pre-prepared hints that come for selected situations.
+ - We do not recommend using hints to give positive feedback during exercise because uncertainty is an important part of the exercise.
+ ### Related manifestations in the platform:
+ - The purpose of the hint is to alert trainees that they should engage in a learning activity.
+ ### Examples:
+ - Trainees forget to contact their CISO, the whole scenario freezes because of this. Hint suggests to do it.
+ - The trainees convened the crisis staff too early - hint suggests to proceed with further communication after the requirements given in the respective process have been fulfilled.
+ - In the tutorial we've designed for our students, we aim to confirm the correct use of the tool. Specifically, when the student clicks on the required action using the tool, an overlay hint appears, confirming that they have successfully completed the step.
## Conditional injects
It should be emphasized that this is not a specific inject option, but a feature of any inject options.
-It means that a conditional inject comes to the participants in response to the fact that something has either happened (we have decided on some option) or something has not happened by a certain time and it is e.g. appropriate to send a hint.
+It means that a conditional inject comes to the trainees in response to the fact that something has either happened (we have decided on some option) or something has not happened by a certain time and it is e.g. appropriate to send a hint.
This is further explored in Section called [Advanced approaches](../specify/advanced_approaches.md).
-
-
-
<div class="navigation" markdown>
- [← Learning activities](../specify/learning_activities.md){ .md-button }
- [Tools →](../specify/tools.md){ .md-button }
+ [← Learning activities](../specify/learning_activities.md){ .md-button }
+ [Tools →](../specify/tools.md){ .md-button }
</div>
<div class="navigation" markdown>
- [Specification Phase Overview](../specify/overview.md){ .md-button }
+ [Specification Phase Overview](../specify/overview.md){ .md-button }
</div>
@@ -291,4 +290,3 @@ This is further explored in Section called [Advanced approaches](../specify/adva
-
diff --git a/docs/INJECT_process/specify/learning_activities.md b/docs/INJECT_process/specify/learning_activities.md
index 81b5880439566cfade92644fd323a9669f66d43b..ed1c15daa88d0fca99b8e2586914cbb0ada0c966 100644
--- a/docs/INJECT_process/specify/learning_activities.md
+++ b/docs/INJECT_process/specify/learning_activities.md
@@ -1,78 +1,31 @@
-# Learning Activities
-
-## In a nutshell
-- Learning Activities (LAs) are actions that the trainee performs that are directly reflected in the platform. This then allows us to evaluate their performance.
-- Each LA is linked to just one Learning Objective (LO). One LO can link any number of LAs to itself.
-- We consider the ideal number to be 5 LAs for a single LO.
----
-
-## Where are we in the INJECT process?
-
-
-
----
-
-
-## Basics
-The exercise designer must be clear about three things for each LA:
-
-1. **What specifically the participant is to do/practice**.
-For example, he/she has to decide, analyze, present, discuss, etc. The chosen activity must make sense in relation to the LO to which the LA relates.
-
-2. **How will the participants`action manifest itself in the platform**
-If we omit this step, it is difficult for us to measure the fulfilment of the action. This condition does not mean that everything during the exercise must happen directly in the platform. For example, you can give participants an LA which purpose will be to discuss an issue in detail; we will link it to the platform with a confirmation button (described further) that participants activate at the end of the discussion. This step is fundamentally related to the following one and cannot be simply separated.
-
-3. **We need to know which inject will trigger this LA**.
-In other words, the LA will not happen unless the participant receives the necessary cue. It is not necessary for each LA to have a specific inject. On the contrary, one inject can easily become the source for several LAs. For example, a simple incident report will trigger a series of LAs based on the incident response plan.
-
-## How to specify Learning Activities?
-### 1.
-
-**LA is always determined in relation to LO**. Let's illustrate this with an example where we create an LA for this LO: Handle the incident according to the process described in their manual.
-
-Now we need to find an answer to what exactly the participants should do. We can find this out in several ways - but mainly from the processes described, from interviews with experts or from our own experience.
-
-If there is not an exact match to a given LO, or if we want to get more variety into our LAs, we can use these action words:
-
-```
-Identify, Search, Summarize, Predict, Decide, Estimate,
-
-Conduct, Compare, Examine, Present, Implement, Act out,
-
-Break down, Argue, Negotiate, Criticize, Reflect,
-
-Review, Write, Solve.
-```
-
-
In our case, we have created the following three LAs.
-LA1.1: Participants must **conduct** an incident analysis.
+LA1.1: Trainees must **conduct** an incident analysis.
-LA1.2: The parties must **decide** whether the incident needs to be escalated.
+LA1.2: The trainees must **decide** whether the incident needs to be escalated.
-LA1.3: Participants should **identify** the next appropriate course of action.
+LA1.3: Trainees should **identify** the next appropriate course of action.
### 2.
Now we have to decide **what they will specifically do in the platform within the given activities and what injects will make them do it.** These steps are closely linked, they cannot be separated.
-In the platform, participants can generally perform the following actions:
+In the platform, trainees can generally perform the following actions:
-- *Clicking the confirmation button after participants have performed the LA* - this manifestation is great for LAs that don't have another clear manifestation in the platform, specifically:
- - LA takes place primarily in the minds of the participants - e.g. analysing documents, familiarising themselves with the situation, reading instructions.
- - LA takes place outside the platform: participants have to discuss something, present something, be interviewed by a journalist, etc.
+- *Clicking the confirmation button after trainees have performed the LA* - this manifestation is great for LAs that don't have another clear manifestation in the platform, specifically:
+ - LA takes place primarily in the minds of the trainees - e.g. analysing documents, familiarising themselves with the situation, reading instructions.
+ - LA takes place outside the platform: trainees have to discuss something, present something, be interviewed by a journalist, etc.
-- *Establishing email communication* - participants sent the first email to the given address. LA is filled just by sending the email. Note that for each unique address, this action is only recorded once by the platform.
+- *Establishing email communication* - trainees sent the first email to the given address. LA is filled just by sending the email. Note that for each unique address, this action is only recorded once by the platform.
- *Email response from the instructor* - very often just sending an email will not be enough to show us that LA is fulfilled. In fact, the previous manifestation does not evaluate the content. In this case, the instructor reads the email and if the content is appropriate, he/she responds using a template that also indicates the fulfillment of the LA in the platform.
-- *Submitting an interactive inject* - participants submit a questionnaire, scale or decision.
+- *Submitting an interactive inject* - trainees submit a questionnaire, scale or decision.
- *Response in free form inject with open response* - the manifestation is already a separate sending, we do not need to respond to the sent content further within the scenario.
- *Instructor response to free form inject with open response* - same principle as instructor email response.
-- *Participants used a predefined tool.* Tools are a specific capability of the platform designer. We describe them in more detail in section called [Tools](../specify/tools.md)).
+- *Trainees used a predefined tool.* Tools are a specific capability of the platform designer. We describe them in more detail in section called [Tools](../specify/tools.md)).
But what is the most appropriate way of the platform manifestation?
@@ -82,34 +35,23 @@ Note: **In the Specification Phase, you cannot proceed in a completely linear fa
#### Examples:
-a. LA1.1: Participants must conduct an incident analysis.
+a. LA1.1: Trainees must conduct an incident analysis.
- As exercise designers, we decided that the inject that would be associated with this LA would be to report the incident via email. However, this email will not contain all the necessary information. Therefore, we know that the logical outcome of a successful analysis will be to query the missing information.
-- Thus, the most appropriate manifestation in the platform will be an email response from the instructor. Simply establishing email communication would not suffice as a relevant manifestation in the platform, we need to be sure that the participant has asked for what they really need to know.
-- Is there another way to do it? Yes, we could send a report to the participants and let them confirm the analysis with a confirmation button. Or we could send participants a Free form inject with an open response and the action in the platform would then be the instructor's response.
+- Thus, the most appropriate manifestation in the platform will be an email response from the instructor. Simply establishing email communication would not suffice as a relevant manifestation in the platform, we need to be sure that the trainee has asked for what they really need to know.
+- Is there another way to do it? Yes, we could send a report to the trainees and let them confirm the analysis with a confirmation button. Or we could send trainees a Free form inject with an open response and the action in the platform would then be the instructor's response.
-b. LA1.2: The parties must decide whether the incident needs to be escalated.
+b. LA1.2: The trainees must decide whether the incident needs to be escalated.
- Again, it depends on the injection. Fulfillment of this activity can be manifested, for example, by sending an interactive decision injection, an email response from the instructor, or by the instructor's response to a free form inject.
-c. LA1.3: Participants should identify the next appropriate course of action.
+c. LA1.3: Trainees should identify the next appropriate course of action.
-- Similarly, participants here may receive an email from a supervisor as an inject, asking them for their next suggested steps. The manifestation can be just sending the email.
+- Similarly, trainees here may receive an email from a supervisor as an inject, asking them for their next suggested steps. The manifestation can be just sending the email.
- Or they can get the same question in a free form injection with an open-ended answer, and the manifestation can also just be a simple submission.
The above are just examples. Once you understand the principles, you can easily make a series of connections to fit your scenario.
-
-
-
-
-
-
-
-
-
-
-
<div class="navigation" markdown>
[← Learning objectives](../specify/learning_objectives.md){ .md-button }
[Injects →](../specify/injects.md){ .md-button }
@@ -117,4 +59,4 @@ The above are just examples. Once you understand the principles, you can easily
<div class="navigation" markdown>
[Specification Phase Overview](../specify/overview.md){ .md-button }
-</div>
+</div>
\ No newline at end of file
diff --git a/docs/INJECT_process/specify/learning_objectives.md b/docs/INJECT_process/specify/learning_objectives.md
index 5f9a481f22c0ecbdcf3136a3bdbed79ad79e7408..ce7ecc3d098a8bda39c0a45f9b08d218f5c18abd 100644
--- a/docs/INJECT_process/specify/learning_objectives.md
+++ b/docs/INJECT_process/specify/learning_objectives.md
@@ -3,7 +3,7 @@
## In a nutshell
- Learning Objectives (LOs) specify what the trainee should learn or practice.
- They must be set in a way that best responds to the needs for which the exercise was created.
-- LOs are the basic units that give structure to the whole exercise. Each LO is further decomposed into specific participant actions - learning activities (LAs).
+- LOs are the basic units that give structure to the whole exercise. Each LO is further decomposed into specific trainees actions - learning activities (LAs).
---
## Where are we in the INJECT process?
@@ -18,13 +18,13 @@ There are two basic ways to approach the exercise. We discuss them in detail in
### Type One: Strategic decision-making exercises
-In this exercise, participants are presented with individual problems in the form of free forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members.
+In this exercise, trainees are presented with individual problems in the form of free forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members.
### The second type: process-technical exercises
This exercise is based on an attempt to simulate the course of a process. The main input here is e.g. a document describing the response to incidents etc. Injections here are primarily via emails, it is possible to use abstraction of specific tools or measures and at the end there is a reflection part containing questionnaires or open questions.
-**Beware, if you don't have the actual organization and process as a basis, you will be in a very difficult situation as a designer.** In fact, if the organisation does not exist, you have to create it completely - a task that exceeds the contribution of TTX in its complexity. This is because the designer is at an impasse when trying to replicate the processes within the organisation, as every idea and conjecture has to be somehow explicitly communicated to the participants in order for them to have a chance of successfully completing the exercise, but this means that instead of the TTX itself, the participants spend much more time learning to understand this imaginary organisation.
+**Beware, if you don't have the actual organization and process as a basis, you will be in a very difficult situation as a designer.** In fact, if the organisation does not exist, you have to create it completely - a task that exceeds the contribution of TTX in its complexity. This is because the designer is at an impasse when trying to replicate the processes within the organisation, as every idea and conjecture has to be somehow explicitly communicated to the trainees in order for them to have a chance of successfully completing the exercise, but this means that instead of the TTX itself, the trainees spend much more time learning to understand this imaginary organisation.
In addition, **you can also create your own type that combines the above options**, but if you are starting out, it is better to think about one of the two specific types of exercises.
@@ -34,7 +34,7 @@ Suppose we are designing an exercise for a public sector organization for which
Depending on this, we have to ask the question: **What specifically should the involved employees handle in such an incident?** If I don't know the answers, I need to study best practices, talk to experts, or research available plans or processes. Let's assume that we have done all this and based on this we already define specific objectives for the exercise.
-Participants should:
+Trainees should:
1. Manage the incident in accordance with the process outlined in their manual.
2. Communicate clearly with all stakeholders.
3. Decide whether and how to communicate with the national data protection authority.
diff --git a/docs/INJECT_process/specify/overview.md b/docs/INJECT_process/specify/overview.md
index da6d7c4b5ecfe9835ed205b32c8a597b1be4aa4c..20e8b0e4332d4109c9dd65ae22ab235fc3e0abed 100644
--- a/docs/INJECT_process/specify/overview.md
+++ b/docs/INJECT_process/specify/overview.md
@@ -31,9 +31,9 @@
## The description of this phase
It is divided into five sections, which describe all the essentials. It is recommended to go through them one by one, as they build on each other and form a kind of simple introductory crash course to help you use the possibilities of IXP.
-1. First, we will discuss **[Learning objectives](../specify/learning_objectives.md)**, which will define what exactly the participants are supposed to learn or practice.
+1. First, we will discuss **[Learning objectives](../specify/learning_objectives.md)**, which will define what exactly the trainees are supposed to learn or practice.
-2. Next, we will focus on **[Learning activities](../specify/learning_activities.md)**. Each learning objective is about specific actions that we expect from the participants of the exercise.
+2. Next, we will focus on **[Learning activities](../specify/learning_activities.md)**. Each learning objective is about specific actions that we expect from the trainees of the exercise.
3. The third section focuses on **[Injects](../specify/injects.md)**, which are in turn inputs designed to stimulate learning activities. Simply, you can think of them as tasks.
@@ -50,7 +50,7 @@ It is divided into five sections, which describe all the essentials. It is recom
- **Please note, this is not a step-by-step guide!** Why? The three basic elements of the exercise, learning objectives, learning activities and injects, are closely related. They need to be understood first and then worked with.
- There is no point in defining learning activities until you have at least a framework of what injects you will be able to prepare. Nor does it make sense to design the injects first and then to think of objectives and learning activities for them.
- - In short, there is a dynamic between all three parts that requires initial thought. But that investment will pay off handsomely in the quality of the exercise and the experience you prepare for your participants.
+ - In short, there is a dynamic between all three parts that requires initial thought. But that investment will pay off handsomely in the quality of the exercise and the experience you prepare for your trainees.
!!! Glossary
We use several terms in the INJECT process that may be unfamiliar, but you can always find their definitions in our [glossary](../../glossary-of-terms.md).
diff --git a/docs/INJECT_process/specify/tools.md b/docs/INJECT_process/specify/tools.md
index d87ae0dc0de45d397d7d364bfa310d98ef9fb0f1..2b69f7ddc0ced5abb09152469ed5f9d144a3649f 100644
--- a/docs/INJECT_process/specify/tools.md
+++ b/docs/INJECT_process/specify/tools.md
@@ -19,7 +19,7 @@ Tools are abstractions of actual technical tools or organizational processes. **
### Some examples of usage:
- When you enter an IP address in the tool box, the address is blocked in the context of the scenario. The tool will return information about the blocking and other actions can follow (e.g. email of an angry user).
-- When the "Report an incident to the Authority" tool is activated, information about a successful report is displayed, and in the reality of the scenario, participants can then receive an email from the Authority.
+- When the "Report an incident to the Authority" tool is activated, information about a successful report is displayed, and in the reality of the scenario, trainees can then receive an email from the Authority.
- A specific tool can be a contact list, which returns the relevant contacts for the exercise after listing the argument.
- The tool can also return a pdf document - for example, you can create a tool to request a report that will then come directly into the Tools channel.
@@ -45,9 +45,9 @@ Tools are abstractions of actual technical tools or organizational processes. **
- The output from the tool can initiate another LA -> for example, we can get the necessary contact details and send an email. This means that I don't have to send this information to subscribers via specif inject anymore (but I can).
- The output from the tool doesn't have to be just text - it can also be an image from the actual tool, for example.
- Especially technically oriented users can look for real solutions behind the tools. Make sure they understand the nature of the tools in the platform.
-- Don't give participants tools they don't even normally have. If your participants are part of the communications team, they probably won't be responsible for reporting the incident to the authorities or blocking the IP address.
-- Don't oversimplify the wrong tools in relation to tool - if the participants are in the role of CEO or board, the tool to issue a press release makes sense. If they're members of the communications team, this tool is more likely to put them in a bind - they'll want to write the release themselves in that case.
-- For tools that are organisational measures, it will often be the case that a similar thing could also be done by email. For example, organization-wide user alerts against phishing. If we make a measure into a tool, we give it a special importance and the participants become more aware of it. At the same time, you can intentionally confuse participants by giving them tools they won't actually need during the exercise. For example, we give participants the option of using the tool to convene a crisis meeting, even though according to the procedural procedures it will not make sense to use it. And if they use it? We can sent them an angry email from their boss or a hint that will explain that they used the tool wrongly.
+- Don't give trainees tools they don't even normally have. If your trainees are part of the communications team, they probably won't be responsible for reporting the incident to the authorities or blocking the IP address.
+- Don't oversimplify the wrong tools in relation to tool - if the trainees are in the role of CEO or board, the tool to issue a press release makes sense. If they're members of the communications team, this tool is more likely to put them in a bind - they'll want to write the release themselves in that case.
+- For tools that are organisational measures, it will often be the case that a similar thing could also be done by email. For example, organization-wide user alerts against phishing. If we make a measure into a tool, we give it a special importance and the trainees become more aware of it. At the same time, you can intentionally confuse trainees by giving them tools they won't actually need during the exercise. For example, we give trainees the option of using the tool to convene a crisis meeting, even though according to the procedural procedures it will not make sense to use it. And if they use it? We can sent them an angry email from their boss or a hint that will explain that they used the tool wrongly.
We can then enhance the light instruction element by having a negative email or explanatory hint come in response to the activation.
diff --git a/docs/INJECT_process/understand/overview.md b/docs/INJECT_process/understand/overview.md
index 0f2a0bc89a8d7af210079027cfa99001e3f78b3c..6583bd9f9173a2d5f31a98c898def821c03bbb31 100644
--- a/docs/INJECT_process/understand/overview.md
+++ b/docs/INJECT_process/understand/overview.md
@@ -67,7 +67,7 @@ One good way to dig deeper is by using the 5 Whys method.
#### Determine the preferred type of the exercise
- **Type One: Strategic decision-making exercises**
- In this exercise, participants are presented with individual problems in the form of free forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members.
+ In this exercise, trainees are presented with individual problems in the form of free forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members.
- **The second type: process-technical exercises**
diff --git a/docs/faq.md b/docs/faq.md
index f81c10a4fd928d78fc432d058a3fc074ac8ee9d5..43e657c35a055dbdac2cb33dfaf5ff3a6e388ebf 100644
--- a/docs/faq.md
+++ b/docs/faq.md
@@ -7,3 +7,6 @@ Yes. Most navigation buttons contain a link, so you can easily open a new tab by
## How can I access error notifications after they've disappeared?
Error notifications are logged and can be accessed in the user settings. Furthermore, you can prevent a notification from disappearing by hovering over it with the cursor or by selecting it using the `tab` key.
+
+## How do I know which documentation version matches my platform version?
+Check our [Version Compatibility](tech/version-compatibility.md) page that provides a clear overview of which documentation version corresponds to your platform version.
\ No newline at end of file
diff --git a/docs/glossary-of-terms.md b/docs/glossary-of-terms.md
index bab53bf3852728705f5873da8bcdf0c1591786a7..c8e815f279ffb3e35eba9cd2e5fee984434a8bda 100644
--- a/docs/glossary-of-terms.md
+++ b/docs/glossary-of-terms.md
@@ -89,7 +89,7 @@ Analyst View
Its intuitive interface enables thorough evaluation and informed decision-making for future exercises.
Editor
-: a **future (currently prototyped)** INJECT Exercise Platform Component.
+: INJECT Exercise Platform Component.
It is a versatile tool used during the Definition and Preparation phases of the INJECT Process.
It allows exercise designers to define learning objectives, create scenarios, and prepare exercise content.
- With its user-friendly interface, the Editor enables efficient scenario development and content organization.
\ No newline at end of file
+ With its user-friendly interface, the Editor enables efficient scenario development and content organization. [More about Editor](INJECT_process/prepare/editor.md)
\ No newline at end of file
diff --git a/docs/images/editor.png b/docs/images/editor.png
new file mode 100644
index 0000000000000000000000000000000000000000..42a57581b8fd89ed2d9e0a58e4dfc208e57d6e0a
Binary files /dev/null and b/docs/images/editor.png differ
diff --git a/docs/index.md b/docs/index.md
index 998062765e6ac99bf087075498dbbcb4fb50aa66..17661d111dbb382dcaedcca8c54e63b5ab488401 100644
--- a/docs/index.md
+++ b/docs/index.md
@@ -25,23 +25,15 @@ Welcome! Whether you're responsible for technical deployment or facilitating tab
<div class="navigation-main" markdown>
[Exercise Preparation](INJECT_process/intro/overview.md){ .md-button }
</div>
-<div class="navigation-main" markdown>
- [Architecture](tech/architecture/overview.md){ .md-button }
-</div>
-<div class="navigation-main" markdown>
- [API documentation](tech/api/overview.md){ .md-button }
-</div>
-<div class="navigation-main" markdown>
- [Security](tech/security.md){ .md-button }
-</div>
<div class="navigation-main" markdown>
[Report issues](report-issue.md){ .md-button }
</div>
</div>
!!! News
- *September 30, 2024*
- We’ve just released the second version of the INJECT Exercise Platform (v 2.0.0). The entire documentation has been updated to reflect this new version. If you’re still using the first version, we strongly recommend following the installation guide and upgrading to the latest release.
+ *February 16, 2025*
+ We've just released the third version of the INJECT Exercise Platform (v 3.0.0). The entire documentation has been updated to reflect this new version.
+ If you are using an older version of the platform, please check our [Version Compatibility](tech/version-compatibility.md) page to ensure you are using the correct documentation version.
## The Big Picture
@@ -60,9 +52,10 @@ Welcome! Whether you're responsible for technical deployment or facilitating tab
**[Installation Guide ↲](tech/installation/overview.md)**:
Step-by-step instructions for deploying IXP using Docker Compose and Nginx.
-
**[Architecture Overview](tech/architecture/overview.md)**:
Detailed documentation on the architecture of the IXP, including component definition.
+ **[Definition Description](tech/architecture/definitions/README.md)**: documentation of exercise definitions - learn how YAML-based configurations describe the structure and content of exercises.
+ **[Version Compatibility](tech/version-compatibility.md)**: Overview of platform versions and their corresponding documentation versions - check which documentation version matches your platform version.
**[Security](tech/security.md)**:
Details on the security measures and practices implemented in the IXP.
**[API Documentation](tech/api/overview.md)**:
diff --git a/docs/tech/version-compatibility.md b/docs/tech/version-compatibility.md
new file mode 100644
index 0000000000000000000000000000000000000000..17009f5a266a6e24895032e6f8e95f873c4a4f6b
--- /dev/null
+++ b/docs/tech/version-compatibility.md
@@ -0,0 +1,13 @@
+# Platform and Documentation Version Compatibility
+
+## In a nutshell:
+- The INJECT platform comes in different versions
+- Each platform version has a matching documentation version
+- Check the table below to find which documentation version you should use
+
+---
+
+| Platform Version | Documentation Version |
+|-----------------|----------------------|
+| Up to 0.12.1 | 2.0 |
+| 0.12.1 - (will be specified) | 3.0 |
diff --git a/mkdocs.yml b/mkdocs.yml
index dd1887008c4c279b67e3d697335f779dad4aa272..7493dccd9ec97691b74ac4639072f848ac8e87f5 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -34,15 +34,14 @@ nav:
- Adding users: tech/installation/users.md
- System architecture:
- Overview: tech/architecture/overview.md
- - Definition documentation:
- - Overview: tech/architecture/definitions/README.md
- - Upgrade definition: tech/architecture/definitions/upgrade.md
- - CHANGELOG: tech/architecture/definitions/CHANGELOG.md
- - Authorization and User Management: tech/security.md
+ - Authorization and User Management: tech/security.md
- API Documentation:
- Overview: tech/api/overview.md
-# - Graphql Documentation: tech/api/graphql-docs.md
- Rest API documentation: tech/api/swagger-docs.md
+ - Definition documentation:
+ - Overview: tech/architecture/definitions/README.md
+ - Upgrade definition: tech/architecture/definitions/upgrade.md
+ - CHANGELOG: tech/architecture/definitions/CHANGELOG.md
- Exercise log format: tech/log-format.md
- How to prepare an exercise?:
- INJECT Process: INJECT_process/intro/overview.md
@@ -58,6 +57,7 @@ nav:
- Advanced approaches: INJECT_process/specify/advanced_approaches.md
- 03 Prepare:
- Phase overview: INJECT_process/prepare/overview.md
+ - Editor: INJECT_process/prepare/editor.md
- 04 Execute:
- Phase overview: INJECT_process/execute/overview.md
- 05 Reflect:
@@ -70,7 +70,6 @@ nav:
- Acknowledgements: acknowledgements.md
- How to cite: how-to-cite.md
- License: license.md
-# - License: license.md
markdown_extensions:
- attr_list
- md_in_html