Development of the Cyber Exercise for Critical Infrastructures Focusing on Inter-Organization Communication

Abstract In recent years, the risk that cyber incidents occur is increasing in Industrial Control System (ICS) which is the core function of Critical Infrastructures (CIs). As a result, companies holding CIs must improve the organization's incident response ability to cyber incidents. Because cyber incidents in ICS cause not only problems to cybersecurity but also problems to plant's safety and company's business, the company-wide response including not only the IT department but also the ICS department and management layer is essential. To smoothly promote this company-wide response, Incident Commanders who adjust between departments are essential. However, many companies holding CIs do not adequately educate Incident Commanders. Therefore, in this research, the authors developed the cyber exercise aimed at educating Incident Commanders.