Tabletop exercises are used to train personnel in the efficient mitigation and resolution of incidents. They are applied in practice to support the preparedness of organizations and to highlight inefficient processes. Since tabletop exercises train competencies required in the workplace, they have been introduced into computing courses at universities as an innovation, especially within cybersecurity curricula. To help computing educators adopt this innovative method, we survey academic publications that deal with tabletop exercises. From 140 papers we identified and examined, we selected 14 papers for a detailed review. The results show that the existing research deals predominantly with exercises that follow a linear format and exercises that do not systematically collect data about trainees' learning. Computing education researchers can investigate novel approaches to instruction and assessment in the context of tabletop exercises to maximize the impact of this teaching method. Due to the relatively low number of published papers, the potential for future research is immense. Our review provides researchers, tool developers, and educators with an orientation in the area, a synthesis of trends, and implications for further work.
翻译:桌面演习用于培训人员高效缓解和解决事件的能力,在实践中被用于支持组织的应急准备并暴露低效流程。由于桌面演习能训练职场所需的核心能力,该创新方法已引入高校计算机课程(尤其在网络安全课程体系中)。为帮助计算机教育工作者采纳这一创新方法,我们对涉及桌面演习的学术论文进行了系统调查。从筛选出的140篇论文中,最终选定14篇进行详细综述。结果表明,现有研究主要集中于线性化流程的演习,且缺乏对学员学习过程的系统化数据采集。计算机教育研究者可探索基于桌面演习的新型教学与评估方法,以最大化该教学方法的影响力。鉴于已发表论文数量相对较少,未来研究潜力巨大。本综述为研究者、工具开发者和教育工作者提供了该领域的全局认知、趋势提炼及未来工作启示。