Simulating Municipal Cybersecurity Incidents: Recommendations from Expert Interviews

Abstract

As cyberattacks on city and public infrastructures become increasingly common and harmful, it is critical that we train the professional workforce to prepare and respond appropriately. This paper supports the development of educational simulations and related experiential learning exercises that help prepare city and public infrastructure personnel to effectively respond to cybersecurity attacks. Specifically, it synthesizes the findings from 8 expert interviews including 12 cybersecurity experts from federal, state, city organizations, as well as academics with relevant expertise. We organize the findings into key learning outcomes, scenarios, roles, and issues that simulation designers should consider. The result paints a vivid picture of the complex socio-technical context of city and public infrastructure attacks and responses and the most salient skills needed to respond to them.