CONTENT INTRODUCTION CONTEXT Crisis/full-scale management exercises and military exercises are among the pillars in ensuring security. They have been conducted for many years as a means to train readiness for military operations and emergency management procedures in cases of natural disasters. The merit (and success) of these exercises lies in their ability to adapt to real environments/reality. Given the increase in recent years in the importance of IT dependencies, hybrid threats involving cyber warfare, and the proliferation of IT technology within the daily lives of citizens, businesses, and governments alike, cyber security and cyber defense have received more attention in the education and exercise area. Consequently, many institutions and businesses participate in cyber exercises that are increasingly recognized as the perfect learning tool. PURPOSE The purpose of this handbook is to provide context and guidance for planning, developing, organizing and improving cyber security table-top exercises. It has been written not only to introduce the topic, but also to give practical advice on how to plan, design, run, and evaluate exercises. It is however neither a detailed step-by-step plan nor a technical guide. AUDIENCE This handbook is intended for those responsible for protecting and operating critical information infrastructure, important information systems, or any kind of high-value assets. The primary goal is to help the less experienced to carry out their own exercises by showing how these can be developed, and to help those who are already conducting exercises to get the best possible results. The handbook also serves as a reference framework to compare possible approaches of conducting exercises. SCOPE The handbook describes how cyber exercises might be designed, in order to effectively educate and train different target groups, ranging from technical personnel to executives and political leaders. Based on the experience of the Czech Republic since 2014, when the first national cyber security tabletop exercise was held, the handbook offers a framework and methodology for designing exercises. In addition, it integrates key lessons learned and recommends best practices. 4/29