SCIPS: Using Experiential Learning to Raise Cyber Situational Awareness in Industrial Control System

Cook, Allan; Smith, Richard G.; Maglaras, Leandros; Janicke, Helge

Abstract

The cyber threat to industrial control systems is an acknowledged security issue, but a qualified dataset to quantify the risk remains largely unavailable. Senior executives of facilities that operate these systems face competing requirements for investment budgets, but without an understanding of the nature of the threat, cyber security may not be a high priority. Education and awareness campaigns are established methods of raising the profile of security issues with stakeholders, but traditional techniques typically deliver generic messages to wide audiences, rather than tailoring the communications to those who understand the impact of organisational risks. This paper explores the use of experiential learning through serious games for senior executives, to develop mental models within which participants can frame the nature of the threat, thereby raising their cyber security awareness, and increasing their motivation to address the issue.

Citation

Cook, A., Smith, R. G., Maglaras, L., & Janicke, H. (2017). SCIPS: Using Experiential Learning to Raise Cyber Situational Awareness in Industrial Control System. International Journal of Cyber Warfare and Terrorism, 7(2), Article 1. https://doi.org/10.4018/ijcwt.2017040101

• Journal Article Type: Article
• Publication Date: 2017-04
• Deposit Date: Dec 13, 2022
• Journal: International Journal of Cyber Warfare and Terrorism
• Print ISSN: 1947-3435
• Electronic ISSN: 1947-3443
• Publisher: IGI Global
• Peer Reviewed: Peer Reviewed
• Volume: 7
• Issue: 2
• Article Number: 1
• DOI: https://doi.org/10.4018/ijcwt.2017040101
• Keywords: Awareness, Critical National Infrastructures, Cyber Security, Experiential learning, Game Theory, Industrial Control Systems, Risk Assessment, Threats
• Public URL: http://researchrepository.napier.ac.uk/Output/2969555