Play2Prepare: A Board Game Supporting IT Security Preparedness Exercises for Industrial Control Organizations

Abstract

Industrial control organizations need to perform IT security preparedness exercises more frequently than today. However, limited support material currently exists. This paper presents a board game, Play2Prepare, which simulates a large scale attack on the electric power grid. The game consists of a number of scenarios and questions that are meant to trigger discussions and knowledge exchange. The intention with this board game is to support organizations in strengthening their incident response capabilities. Initial feedback from the electric power industry indicates that this board game is indeed a relevant tool for preparedness exercises for IT security incidents.