01936nas a2200217 4500000000100000008004100001653002000042653001600062653001800078653002000096653001500116653003400131100001900165700002300184700001800207700002000225245010500245300001300350490000700363520134800370 2021 d10aCrisis Response10acyber range10aCybersecurity10aHybrid Security10aresilience10aStandard Operating Procedures1 aGeorge Sharkov1 aChristina Todorova1 aGeorgi Koykov1 aGeorgi Zahariev00aA System-of-Systems Approach for the Creation of a Composite Cyber Range for Cyber/Hybrid Exercising a129-148 0 v503 a

The current cybersecurity landscape is conducive to the enhancement of the traditional cyber-exercising paradigm and instruments. Considering the complex nature of the cyberattacks and their cascading impact, moving away from purely technical or entirely decision-making exercises is becoming paramount for realistic exercising of emergency response. Complex cyber-hybrid scenarios, exercising effective collaboration at the technical, operational, and higher decision-making levels, are increasingly employed to prepare to face emerging hybrid threats. Such scenarios simulate seemingly independent incidents in different locations, businesses, or systems that may quickly escalate to a sectoral or a national crisis. Unfortunately, such diverse scenarios remain inaccessible due to the lack of proper simulation infrastructure and expertise to adapt them to various contexts. The current contribution presents the authors’ experience in designing a Composite Cyber Range, following a Systems-of-Systems approach for the dynamic activation or incorporation of playgrounds and on-the-run integration of custom-made emulation or overlay ranges to support an “exercise-as-a-service” model for the provision of adequate and accessible cyber-hybrid mechanisms for crisis response training and preparation.