The SANS institute is taking “desktop exercise” from virtual to real. I now realize that my desktop exercises have been lacking something- a model. A real model. The kind that sits on a desk that you can touch.

The SANS institute has built CyberCity. A model town that links cyberspace to real world infrastructure. In one desktop exercise, participants must turn a power plant back online after it is shut down by terrorists. As the article points out, there is an element of security theatre, but there is something to touching and feeling a cyberattack- even if it is just a model.