Fidelity

Marketing

Best practice

Engineering

Aerospace engineering

First responder

Computer security

Pedagogy

Critical infrastructure protection

Training (meteorology)

Telecommunications

Economics

Computer science

Performance indicator

Curriculum

Risk analysis (engineering)

Business

Critical infrastructure

Systematic review

Physics

Process management

Psychology

Management

Aviation

Political science

MEDLINE

Meteorology

Knowledge management

Engineering management

Computer Science Review

Today, cyber-security curricula are available across educational types and levels, including a vast array of programs and modules tailored to specific sectors of industry and audiences, to allow more targeted delivery of knowledge. Nonetheless, general agreement on best measures and methods for cybersecurity training has yet to be reached. In this study, we seek to establish the current state-of-the-art in cyber-security training offerings for critical infrastructure protection and the key performance indicators (KPIs) that allow evaluating their effectiveness. Particular focus is given in this study on the aviation, energy and nuclear sectors. Accordingly, the article presents the findings of a systematic literature review that collected relevant literature produced after 2000. The identified sources have been examined according to a formal data extraction form, allowing the analysis of relevant training solutions, methodologies, target groups and focus areas. The results show that solutions that provide hands-on experience, team skills development, high level of real-life fidelity are often preferred to other options, with simulation-based solutions showing the highest amount of research and development. Nonetheless, researchers have not reached agreements on optimal training delivery methods and design of cybersecurity exercises. Consequently, research on improving current cybersecurity training offerings should be conducted, to demonstrate whether integrating advantageous attributes from different delivery methods could produce more comprehensive and effective solutions.

Cyber security training for critical infrastructure protection: A literature review