Manuel Domínguez-Dorado;Francisco J. Rodríguez-Pérez;David Cortés-Polo;Jesús Galeano-Brajones;Jesús Calle-Cancho
{"title":"Integration of Scenario-Based Learning in CyberTOMP With FLECO Studio: Enhancing Situational Awareness Training in Cybersecurity","authors":"Manuel Domínguez-Dorado;Francisco J. Rodríguez-Pérez;David Cortés-Polo;Jesús Galeano-Brajones;Jesús Calle-Cancho","doi":"10.1109/RITA.2025.3616004","DOIUrl":null,"url":null,"abstract":"Situational awareness is crucial in cybersecurity to identify, understand, and anticipate cyber threats, and to make effective decisions during cyber crises. This study evaluates the effectiveness of a hands-on approach based on interactive scenarios using FLECO Studio software, integrated into the holistic management model CyberTOMP, compared to a traditional lecture-based approach framed within the same model. An experiment was designed with 200 participants, divided into a treatment group (70%) and a control group (30%). Both groups received training aimed at increasing their level of situational awareness in cybersecurity, with assessments conducted before and after the training. The treatment group employed the interactive scenario-based approach modeled with FLECO Studio, while the control group received traditional lecture-based training. To mitigate potential biases, preventive measures were implemented during the design and analysis of the study. The statistically analyzed results illustrated a significant improvement (up to 54%) in the situational awareness level of the treatment group, along with a strongly positive perception of effectiveness among the participants. These findings suggest that the interactive scenario-based approach, using tools embedded within a comprehensive holistic framework, significantly enhances the acquisition of situational awareness capabilities in cybersecurity compared to a traditional lecture-based approach.","PeriodicalId":38963,"journal":{"name":"Revista Iberoamericana de Tecnologias del Aprendizaje","volume":"20 ","pages":"310-320"},"PeriodicalIF":1.0000,"publicationDate":"2025-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Revista Iberoamericana de Tecnologias del Aprendizaje","FirstCategoryId":"1085","ListUrlMain":"https://ieeexplore.ieee.org/document/11185209/","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q4","JCRName":"COMPUTER SCIENCE, INTERDISCIPLINARY APPLICATIONS","Score":null,"Total":0}
引用次数: 0
Abstract
Situational awareness is crucial in cybersecurity to identify, understand, and anticipate cyber threats, and to make effective decisions during cyber crises. This study evaluates the effectiveness of a hands-on approach based on interactive scenarios using FLECO Studio software, integrated into the holistic management model CyberTOMP, compared to a traditional lecture-based approach framed within the same model. An experiment was designed with 200 participants, divided into a treatment group (70%) and a control group (30%). Both groups received training aimed at increasing their level of situational awareness in cybersecurity, with assessments conducted before and after the training. The treatment group employed the interactive scenario-based approach modeled with FLECO Studio, while the control group received traditional lecture-based training. To mitigate potential biases, preventive measures were implemented during the design and analysis of the study. The statistically analyzed results illustrated a significant improvement (up to 54%) in the situational awareness level of the treatment group, along with a strongly positive perception of effectiveness among the participants. These findings suggest that the interactive scenario-based approach, using tools embedded within a comprehensive holistic framework, significantly enhances the acquisition of situational awareness capabilities in cybersecurity compared to a traditional lecture-based approach.