An organization’s crisis readiness is best tested when a crisis actually hits – but by then, it is too late for training. Tabletop exercises are a proven method for bridging this gap. However, traditional formats often rely on pen and paper, which limit both realism and scalability.

 In this talk, I will introduce INJECT, an open-source platform developed by Masaryk University in collaboration with the Czech National Cyber and Information Security Agency (NÚKIB). The platform digitizes the entire exercise life cycle. Featuring interactive scenarios that respond to participants' decisions in real-time and simulations of real tools, the platform significantly enhances the scope and efficiency of preparation.

I will demonstrate how INJECT can be utilized for the preparation, execution, and evaluation of tabletop exercises. I will focus on the exercise design process and share insights gained from conducting various types of exercises. The talk is complemented by a practical workshop, offering participants a hands-on opportunity to work with the platform and experience an exercise firsthand.

Jan Vykopal teaches cybersecurity and researches how to teach it better. He is an associate professor at the Faculty of Informatics, Masaryk University, co-founder of the Cybersecurity Laboratory, and the head of the Cybersecurity Bachelor's degree program. His research and development focus on interactive learning environments and innovations in practical training. He brings extensive experience from the certified incident response team CSIRT-MU, which he founded and led. Jan was a key member of the team behind the KYPO Cyber Range Platform. Currently, he is innovating tabletop exercises within the INJECT project. In 2023, he was a finalist for the Czech Cyber Award in the Cyber Teacher of the Year category.