From de63a0a820dfd3bd850842ba5d97f8febbcf2e2d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Hor=C3=A1k?= <x400492@fi.muni.cz> Date: Thu, 30 Jan 2025 17:09:50 +0100 Subject: [PATCH] Iteration of basic terminology and some typos, also added a mention about open-source to homepage --- docs/INJECT_process/intro/overview.md | 6 +-- .../specify/exercise_specification.md | 8 +-- docs/INJECT_process/specify/injects.md | 50 ++++++++----------- .../specify/learning_activities.md | 2 +- .../specify/learning_objectives.md | 8 +-- docs/INJECT_process/specify/tools.md | 6 +-- docs/INJECT_process/understand/overview.md | 2 +- docs/authors.md | 2 +- docs/glossary-of-terms.md | 2 +- docs/index.md | 2 +- 10 files changed, 41 insertions(+), 47 deletions(-) diff --git a/docs/INJECT_process/intro/overview.md b/docs/INJECT_process/intro/overview.md index ce80a0c..f266459 100644 --- a/docs/INJECT_process/intro/overview.md +++ b/docs/INJECT_process/intro/overview.md @@ -99,7 +99,7 @@ Depending on the context, these functions may overlap, with some individuals tak These individuals execute the exercise via the platform, provide briefings, and conduct the final hot wash. Unless specified otherwise, they also analyze the final data from the exercise. -- **Exercise Participants** +- **Trainees** These are the individuals who take part in the exercise. Their primary objective is to learn and gain experience from the exercise. @@ -112,9 +112,9 @@ Depending on the context, these functions may overlap, with some individuals tak **The INJECT process is designed to guide you through organizing a successful tabletop exercise using the INJECT Exercise Platform. There are two primary types of exercises you can consider:** -- **Strategic-management exercise**: +- **Strategic decision-making exercises**: These exercises emphasize decision-making, evaluation, and high-level planning. - They are suited for testing strategic thinking and the ability to manage and respond to complex scenarios + They are suited for testing strategic thinking and the ability to manage and respond to complex scenarios. - **Process-Technical Exercises**: These exercises focus on simulating specific processes using designated tools. diff --git a/docs/INJECT_process/specify/exercise_specification.md b/docs/INJECT_process/specify/exercise_specification.md index ec5ce26..c7e898d 100644 --- a/docs/INJECT_process/specify/exercise_specification.md +++ b/docs/INJECT_process/specify/exercise_specification.md @@ -3,7 +3,7 @@ ## In a nutshell - This section builds on the knowledge from previous sections and the information gathered during the 01 Understanding Phase. - It details how to specify exercises for the INJECT platform. -- We present two main approaches: strategic-management exercises and process-technical exercises. +- We present two main approaches: strategic decision-making exercises and process-technical exercises. --- @@ -21,10 +21,10 @@ - You can combine the described [Injects](../specify/injects.md) in any way you like, but you may also find it useful to start from a predefined type and modify it further. As we indicated at the beginning of the section describing [Learning objectives](../specify/learning_objectives.md), you can approach the exercise in two basic ways: -- Type One: **Strategy and Management Exercise** - In this exercise, participants are presented with individual problems in the form of fre forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members. +- Type One: **strategic decision-making exercises** - In this exercise, participants are presented with individual problems in the form of fre forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members. - The second type: **process-technical exercises** - based on an attempt to simulate the course of a process. The main input is e.g. a document describing the response to incidents, etc. injects here are primarily via emails, it is possible to use abstraction of specific tools or measures and at the end there is a reflexive part containing questionnaires or open questions. **Beware, if you don't have the actual organization and process as a basis**, you will be in a very difficult situation as a designer. In fact, if the organisation does not exist, you have to create it completely - a task that exceeds the contribution of TTX in its complexity. -??? "How to specify a strategic-management exercise" +??? "How to specify a strategic decision-making exercise" ### What do these exercises look like off the platform? Participants usually receive a paper assignment where the individual injects are presented, structured into phases or blocks. The injects are most often in the form of text, but sometimes pictures are also added. Each inject is accompanied by questions. Depending on the type of target group, participants work either in small teams or all together. Often a facilitator is involved. @@ -93,7 +93,7 @@ As we indicated at the beginning of the section describing [Learning objectives] ### Possible scenario structure: - Exercises most often start with an introductory inject in exercise information, which includes a description of the organisation concerned, the tasks of the exercisers and, if necessary, important contact details or documents to work with. - The following 2 options are available, either the participants will learn about the problem or incident, for example through a notification they receive by email, or they can be tasked to be proactive and use, for example, a system scanning tool to detect a problem in the system (a very technical exercise). - - The tools that the participant is tasked with using to resolve the incident or support the process play a significant role here. However, the whole scenario does not revolve only around the tools, but combines extensively with elements from the strategic management exercise, where participants are also guided through questionnaires, either in the form of scales or free form. + - The tools that the participant is tasked with using to resolve the incident or support the process play a significant role here. However, the whole scenario does not revolve only around the tools, but combines extensively with elements from the strategic decision-making exercises, where participants are also guided through questionnaires, either in the form of scales or free form. - Many processes are also heavily based on communication with actors in the organization, which implies the possibility of abundantly involving communication via email with fictional characters (careful reduces automation and keeps the instructor more busy). - The exercise is very much based on the actions of the participant and only if they perform the anticipated actions can they move towards the goal of resolving the incident. - Very often, hints are implemented to prevent the team from getting completely diff --git a/docs/INJECT_process/specify/injects.md b/docs/INJECT_process/specify/injects.md index fcaf7fd..f9012a5 100644 --- a/docs/INJECT_process/specify/injects.md +++ b/docs/INJECT_process/specify/injects.md @@ -23,7 +23,7 @@ - **Exercise information** – general channel for communication about exercise - **Emails** – classical email communication - **Tools** - tools outputs - – **Questions** - a channel where interactive type injects (e.g. questionnaires) are displayed. The channel name can be changed. + – **Questions** - a channel where various interactive injects (e.g. questionnaires) are displayed. The channel name can be changed. <BR> The implementation of media channels is being considered: - **Website** - for simulating websites of different organizations @@ -32,11 +32,8 @@ - **Media** - injects in the form of articles, audio or video. May carry the name of a specific media outlet. - - - ??? "Overlay" - This is an interface effect that directly affects the dynamics of the exercise. While normally, for example, the questionnaire will be displayed in the preset channel, **if this inject is also set as an overlay, it will be displayed first above everything else**. + This is an interface effect that directly affects the dynamics of the exercise. While normally, for example, the questionnaire will be displayed in the preset channel, **if this inject is also set as an overlay, it will be displayed first above everything else**. <br> - Example, the overaly questionnaire will cause everything else to go dark and it will appear in the middle of the screen. This makes the inject disrupt the participants' existing activity and draws their attention. Some strategy exercises may consist entirely of injects presented through an overlay. @@ -45,17 +42,14 @@ ??? "A caption: "Not implemented"" The injects with this caption have not yet been implemented in the platform. They are likely to be added in the future, though they may be modified based on team discussions. - +## INJECT Options +Let's now take a detailed look at the different inject options. This is not a final list; you can create any inject options you want from the basic elements in the platform. However, we describe these options because they have proven valuable in most exercises. Think of inject options as proven building blocks that you can use to construct your exercises. We describe their typical use in an exercise and the related learning activities. [Learning activities](../specify/learning_activities.md). - -## INJECT Types -Let's now take a detailed look at the different types of injects, their typical use in an exercise and the related [Learning activities](../specify/learning_activities.md). - -??? "1. Inject type: Email" +??? "1. Inject option: Email" ### Inject description - This is a classic email conversation. It can also contain email attachments. The sender address is also an important part of this type of inject and is fully configurable. Emails in the form of an inject can be sent either automatically or as an instructor activity. + This is a classic email conversation. It can also contain email attachments. The sender address is also an important part of this option of inject and is fully configurable. Emails in the form of an inject can be sent either automatically or as an instructor activity. ### Channel Only a specific channel for emails. The channel functions as a simple email client. ### Overlay @@ -78,7 +72,7 @@ Let's now take a detailed look at the different types of injects, their typical - Etc. -??? "2. Inject type: Execise information " +??? "2. Inject option: Execise information " ### Inject description It is used to communicate basic information about the exercise - e.g., introductory inject, contextual information, exercise time shift information, closing information. ### Channel @@ -86,7 +80,7 @@ Let's now take a detailed look at the different types of injects, their typical ### Overlay The Exercise information inject can be displayed as an overlay, this is especially useful for important notifications or hints. ### Typical use in exercise - This type of inject is defacto a form of instruction, so it can be used in any exercise. + This inject option is defacto a form of instruction, so it can be used in any exercise. ### Possible mistakes - Mixing "ingame" information and information outside the exercise. Our recommendation is that all information should be communicated in a manner as appropriate to the scenario as possible. In other words, we recommend omitting information that shifts the context out of the scenario (e.g., noting that there is a catering ready, etc.). ### Related manifestations in the platform @@ -99,7 +93,7 @@ Let's now take a detailed look at the different types of injects, their typical - Summary of the exercise. -??? "3. Inject type: Document" +??? "3. Inject option: Document" ### Inject description This inject means sending a pdf document to the participants to read, analyze or make a decision based on it. ### Channel @@ -124,7 +118,7 @@ Let's now take a detailed look at the different types of injects, their typical -??? "4. Inject type: Questionnaire/scale" +??? "4. Inject option: Questionnaire/scale" ### Inject description Standard questionnaire - single choice or multiple choice. It can also act as a scale. ### Channel @@ -132,7 +126,7 @@ Let's now take a detailed look at the different types of injects, their typical ### Overlay The use is very appropriate. ### Typical use in exercises - This type of inject is very suitable for strategic-management exercises for presenting scenario-related questions. For process-technical exercises it can also be used, for example towards the end of the exercise, to reflect on the steps taken. + This inject option is very suitable for strategic decision-making exercises for presenting scenario-related questions. For process-technical exercises it can also be used, for example towards the end of the exercise, to reflect on the steps taken. ### Possible mistakes - Avoid making the whole exercise just a questionnaire. Such exercises do exist, but it is not engaging for the participants and it does not fully exploit the potential of the platform. - Avoid making the exercise look like a knowledge test. Questionnaires can often be about expressing opinions (e.g. scales) rather than factual accuracy. @@ -145,7 +139,7 @@ Let's now take a detailed look at the different types of injects, their typical - Answer a factual question about the scenario (legal, organisational and technological aspects, competences, ...). - Etc. -??? "5. Inject type: Decision point" +??? "5. Inject option: Decision point" ## Not yet implemented ### Inject description @@ -156,7 +150,7 @@ Let's now take a detailed look at the different types of injects, their typical ### Overlay The use is very appropriate. ### Typical use in exercises - This type of inject is very suitable for strategic-managerial exercises for situations where it is necessary to choose one of the options. It is particularly useful when you want to emphasize the importance of a decision. Using this type of inject will draw more attention to the decision and is likely to lead to discussion. + This inject option is very suitable for strategic decision-making exercises for situations where it is necessary to choose one of the options. It is particularly useful when you want to emphasize the importance of a decision. Using this inject option will draw more attention to the decision and is likely to lead to discussion. ### Possible mistakes Avoid creating too many alternative paths - such an exercise will be much more difficult to prepare and most of the content will not be seen by participants anyway. Simplification is desirable. ### Related manifestations in the platform @@ -170,7 +164,7 @@ Let's now take a detailed look at the different types of injects, their typical -??? "6. Inject type: Free form" +??? "6. Inject option: Free form" ## Not yet implemented ### Inject description Inject with open response, can contain input in the form of image, video or text. Participants respond in the form of free text. @@ -179,7 +173,7 @@ Let's now take a detailed look at the different types of injects, their typical ### Overlay The use is very appropriate. ### Typical use in exercises - This inject is very suitable for strategic-management exercises. + This inject is very suitable for strategic decision-making exercises. ### Possible mistakes - Too long or complex assignments. - Not using the possibility of conditioned responses to the free forms. It can enhance the exercise participants. @@ -192,7 +186,7 @@ Let's now take a detailed look at the different types of injects, their typical -??? "7. Inject type: Media" +??? "7. Inject option: Media" ## Not yet implemented ### Description of the inject Media injects are currently a combination of media outputs and specifically named channels that is an abstraction of a real-world channel (the platform does not attempt to mimic the look of social networks or websites). @@ -218,7 +212,7 @@ Let's now take a detailed look at the different types of injects, their typical - A hateful blog post on a organization's website that appeared here because of stolen login credentials. - Warning from the IT department on the organisation's intranet. -??? "8. Inject type: Off-platform activity" +??? "8. Inject option: Off-platform activity" ## Not yet implemented ### Inject description Sometimes it can really make sense to include an off-platform inject. This increases our possibilities for creating interesting scenarios. Technically, this is an instruction in the platform that is combined with a confirmation button. Example: Instruction 'Discuss now three action steps that you could implement in your organization later this month. Once you have that, click on the button." And below that instruction would be a confirmation button "Done". @@ -226,14 +220,15 @@ Let's now take a detailed look at the different types of injects, their typical The confirmation button will display in Exercise information channel. ### Overlay - It is very useful for injecs of this type. + It is very useful for this inject option. ### Typical use in exercise: - Invitation to participants to discuss something. - Invite a representative of the team to attend a physical interview with the journalist. - Call for a representative to go to the classified room and see documents that other members do not have access to. ### Possible mistakes - - By having the activity take place outside the platform, think about its evaluation. It may be followed up by other LAs - e.g. writing a summary in an email to a supervisor, etc. Or you can also decide to evaluate it outside the platform - e.g. a journalist will conduct an evaluation of the interview, according to the criteria given. + - By having the activity take place outside the platform, think about its evaluation. It may be followed up by other LAs - e.g. writing a summary in an email to a supervisor, etc. + Or you can also decide to evaluate it outside the platform - e.g. a journalist will conduct an evaluation of the interview, according to the criteria given. ### Related manifestations in the platform - Click on the confirmation button. However, it should be added that off-platform activities can also be stimulated by other injects - for example, an email instruction arrives for an off-platform task, after which a response is required. Thus, it mainly depends on the creativity of the designer. ### Examples: @@ -245,7 +240,7 @@ Let's now take a detailed look at the different types of injects, their typical - Obtaining information from a classified document. -??? "9. Inject type: Hint" +??? "9. Inject option: Hint" ### Inject description It's a form of conditioned inject that activates if participants miss an action, take the wrong action, or become stuck. Example - participants did not report the incident to management, but should have. The hint can be automated or sent by the instructor on an ad hoc basis. @@ -271,8 +266,7 @@ Let's now take a detailed look at the different types of injects, their typical ## Conditional injects -Finally, we would like to say a few words about conditional injects. It should be emphasized that this is not a specific type of inject, but a feature of any of the injects described. - +It should be emphasized that this is not a specific inject option, but a feature of any inject options. It means that a conditional inject comes to the participants in response to the fact that something has either happened (we have decided on some option) or something has not happened by a certain time and it is e.g. appropriate to send a hint. This is further explored in Section called [Advanced approaches](../specify/advanced_approaches.md). diff --git a/docs/INJECT_process/specify/learning_activities.md b/docs/INJECT_process/specify/learning_activities.md index db9a258..81b5880 100644 --- a/docs/INJECT_process/specify/learning_activities.md +++ b/docs/INJECT_process/specify/learning_activities.md @@ -76,7 +76,7 @@ In the platform, participants can generally perform the following actions: But what is the most appropriate way of the platform manifestation? -The answer to this question depends largely on your experience and intuition. It is true that the same LA can manifest in different ways, and it is always closely related to the type of inject. The designer's task is to choose the one that makes sense in terms of the LO. Let's flesh this out further and work with the LA from the previous step. +The answer to this question depends largely on your experience and intuition. It is true that the same LA can manifest in different ways, and it is always closely related to the inject options. The designer's task is to choose the one that makes sense in terms of the LO. Let's flesh this out further and work with the LA from the previous step. Note: **In the Specification Phase, you cannot proceed in a completely linear fashion**. The following examples may not make sense to you until you read the description of [Injects](../specify/injects.md). diff --git a/docs/INJECT_process/specify/learning_objectives.md b/docs/INJECT_process/specify/learning_objectives.md index 58bfbc6..5f9a481 100644 --- a/docs/INJECT_process/specify/learning_objectives.md +++ b/docs/INJECT_process/specify/learning_objectives.md @@ -1,9 +1,9 @@ # Learning Objectives ## In a nutshell -– Learning Objectives (LOs) specify what the trainee should learn or practice. -– They must be set in a way that best responds to the needs for which the exercise was created. -– LOs are the basic units that give structure to the whole exercise. Each LO is further decomposed into specific participant actions - learning activities (LAs). +- Learning Objectives (LOs) specify what the trainee should learn or practice. +- They must be set in a way that best responds to the needs for which the exercise was created. +- LOs are the basic units that give structure to the whole exercise. Each LO is further decomposed into specific participant actions - learning activities (LAs). --- ## Where are we in the INJECT process? @@ -16,7 +16,7 @@ There are two basic ways to approach the exercise. We discuss them in detail in Link: Section 5, but you should already know about them because it will allow you to think better about the LO of the whole exercise. -### Type One: Strategy and Management Exercise +### Type One: Strategic decision-making exercises In this exercise, participants are presented with individual problems in the form of free forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members. diff --git a/docs/INJECT_process/specify/tools.md b/docs/INJECT_process/specify/tools.md index bd8904b..d87ae0d 100644 --- a/docs/INJECT_process/specify/tools.md +++ b/docs/INJECT_process/specify/tools.md @@ -1,9 +1,9 @@ # Tools ## In a nutshell -– In this section we will focus on the tools that are one of the innovations that IXP brings to tabletop exercises. -– The tools allow to enrich the exercise by using organizational or technical measures. -– You don't have to use the tools in the exercise, but it's good to know about this option. +- In this section we will focus on the tools that are one of the innovations that IXP brings to tabletop exercises. +- The tools allow to enrich the exercise by using organizational or technical measures. +- You don't have to use the tools in the exercise, but it's good to know about this option. --- diff --git a/docs/INJECT_process/understand/overview.md b/docs/INJECT_process/understand/overview.md index b38e097..0f2a0bc 100644 --- a/docs/INJECT_process/understand/overview.md +++ b/docs/INJECT_process/understand/overview.md @@ -65,7 +65,7 @@ One good way to dig deeper is by using the 5 Whys method. - After this, determine if you've uncovered any new insights that might impact the next exercise preparation. #### Determine the preferred type of the exercise - - **Type One: Strategy and Management Exercise** + - **Type One: Strategic decision-making exercises** In this exercise, participants are presented with individual problems in the form of free forms, questionnaires, scales, decision tasks, media inputs, etc. It is more suitable for more general scenarios or managerial positions, but can also be prepared for CSIRT members. diff --git a/docs/authors.md b/docs/authors.md index f6e94c7..40e56c2 100644 --- a/docs/authors.md +++ b/docs/authors.md @@ -17,4 +17,4 @@ | Valdemar Švábenský | researcher | | Michal Urban | lead developer of the first prototype | | Marek Veselý | full-stack developer | -| Jan Vykopal | pricipal investigator | +| Jan Vykopal | principal investigator | diff --git a/docs/glossary-of-terms.md b/docs/glossary-of-terms.md index e9127b8..bab53bf 100644 --- a/docs/glossary-of-terms.md +++ b/docs/glossary-of-terms.md @@ -59,7 +59,7 @@ Exercise Instructors : These individuals execute the exercise via the platform, provide briefings, and conduct the final hot wash. Unless specified otherwise, they also analyze the final data from the exercise. -Exercise Participants +Trainees : These are the individuals who take part in the exercise. Their primary objective is to learn and gain experience from the exercise. diff --git a/docs/index.md b/docs/index.md index 3c03189..9980627 100644 --- a/docs/index.md +++ b/docs/index.md @@ -12,7 +12,7 @@ Welcome! Whether you're responsible for technical deployment or facilitating tab ## What is the INJECT Exercise Platform (IXP)? -- A digital platform designed for conducting interactive tabletop exercises. +- An open-source digital platform designed for conducting interactive tabletop exercises. - Provides immediate reactions to decisions, enhancing the learning process. - Simplifies the preparation, execution, and evaluation of exercises, reducing organizer workload. -- GitLab