CPPJ

Cybersecurity Pedagogy and Practice Journal

Volume 4

V4 N2 Pages 4-35

Oct 2025

Strengthening Incident Response: Lessons from Cybersecurity Tabletop Exercises for Rural Critical Infrastructure

Reda Haddouch
University of Montana
Missoula, MT USA

Shawn Clouse
University of Montana
Missoula, MT USA

Ryan Wright
University of Virginia
Charlottesville, VA USA

Theresa Floyd
University of Montana
Missoula, MT USA

Victor Valgenti
University of Montana
Missoula, MT USA

Patricia Perry
University of Montana
Missoula, MT USA

Tom Gallagher
University of Montana
Missoula, MT USA

Abstract: This case study evaluates the effectiveness of three tabletop exercises (TTXs) that focus on cybersecurity attacks on rural critical infrastructure. By analyzing three distinct TTXs, the researchers identified strengths, weaknesses, and best practices for the three different approaches utilized. This case analysis is categorized based on three inputs (engagement, technology, and facilitation) and two outcomes (collaboration and knowledge gains). The findings highlight the importance of active participation, skilled facilitation, robust technology solutions, and collaboration among state and federal agencies. Further research should expand on participant feedback, involve diverse geographic areas, and explore the human element in cybersecurity to enhance the resilience and security of critical infrastructure systems.

Download this article: CPPJ - V4 N2 Page 4.pdf

Recommended Citation: Haddouch, R., Clouse, S.F., Wright, R., Floyd, T., Valgenti, V., Perry, P., Gallagher, T., (2025). Strengthening Incident Response: Lessons from Cybersecurity Tabletop Exercises for Rural Critical Infrastructure. Cybersecurity Pedagogy and Practice Journal 4(2) pp 4-35. https://doi.org/10.62273/SACF5628