Operation Raven: Design of a Cyber Security Incident Response Game

Envisioning a major ransomware incident with its potential consequences might be unpleasant, and preparing for such an incident takes quite an effort. Operation Raven is a serious game designed to facilitate discussion about processes and decisions to detect, contain, and eradicate ransomware. This paper presents the game idea and game material of Operation Raven and the results after two game events. The article reflects on the next steps.