Collaborate, Design, and Generate Cybercrime Script Tabletop Exercises for Cybersecurity Education

Abstract

Cyber incidents are frequent, urgent, and sophisticated, and there is a global shortage of cybersecurity professionals. The demand for cybersecurity graduates is high, and a key priority for universities is improving successful graduate outcomes, employability, and work readiness. This research paper proposes a novel teaching approach to develop the skills and experience of higher education students for cybersecurity roles. The approach synthesizes problem-based learning, work- integrated learning, tabletop exercises, and crime script analysis. The paper presents a theoretical model based on the National Institute of Standards and Technology (NIST) Test, Training, and Exercise (TT&E) methodology and suggests using Generative AI for the development of draft documentation. The Cybercrime Script Tabletop Exercise can be integrated into a cybersecurity curriculum or as a stand-alone workshop. Future research can be conducted to compare, interview, and observe student outcomes such as skill and experience acquisition, work-life awareness, and levels of industry professional involvement.