Holistic View on Decision-making in Cyber Defense Exercises: A Case Study Based in Amber Mist

Abstract

Decision-making in cyber defense exercises (CDX) is a complex process that extends beyond technical proficiency, incorporating cognitive, strategic, and behavioral elements. This study presents a holistic view approach to decision-making in CDX, emphasizing technical expertise, situational awareness, teamwork, and emotional resilience using the Amber Mist cyber defense exercises as a case study. A multidimensional assessment framework was proposed and analyzed. It evaluates the decision-making aspects of the CDX participants. Findings highlight the importance of incorporating behavioral and collaborative dimensions alongside traditional decision-making frameworks. By analyzing data from Amber Mist 2024 cyber defense exercises, key factors were identified that influence decision quality. Findings suggest that a holistic assessment of decision-making, integrating both human factors and technical aspects, provides a more accurate measure of the cybersecurity competence of the participants. This research contributes to the improvement of training methodologies and the enhancement of cybersecurity training programs.