A structured approach for implementing cyber security exercises

Cyber security exercises are a very effective way of learning the practical aspects of information security. Designing and implementing a cyber security exercise is a complex task because it can have many forms and approaches. The paper presents a step-by-step implementation of a cyber security exercise including design considerations for each of the steps and following a structured approach. The paper can be used as a guide for institutions who want to organize cyber security exercises for training purposes.