Today's rapidly digitalising world has led to business processes becoming digitalised, which necessitates paying attention to the cybersecurity issues inherent in those digital processes. The multi-disciplinary nature of working life and the complexity of cybersecurity issues place demands on learning environments. The present study examined the requirements for optimal in-service training to ensure individual and organisational learning of the competencies that are crucial for dealing with cybersecurity incidents. Building on theories of authentic learning and qualitative research methods, the study identified three fundamental components and four elements of optimal in-service cybersecurity training. The research found that practicing organisational actions increased readiness and competence to act in the face of a real cybersecurity incident. A comprehensive cyber arena supports the implementation of optimal training and thus the efficiency of in-service training.

No abstract