Simulation based education system for cyber incident response

Typically, two types of exercises are used to train computer incident response teams, simulation exercises for the technical level and table top style for the management level. This work summaries our findings and best practices. Following the results of the study, the simulator is in the process of being implemented in teaching processes of Croatian Defense Academy.