<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors></contributors><titles><title><style face="normal" font="default" size="100%">Best Practice for Cybersecurity Capacity Building in Bulgaria’s Public Sector</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2017</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2017</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">38</style></volume><pages><style face="normal" font="default" size="100%">79-92</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">This paper summarizes six years of experience (2011-2016) at the Ministry of Transport, Information Technology and Communications and the National Revenue Agency to develop capacity and cybersecurity readiness. It is based on a number of projects, which adopt a consistent approach for change management and restructuring in public administration in view of cyber security standards. In addition, this paper outlines how digital technologies and simulation tools have been employed in the process of cyber security deployment and capacity development as an example of good practices in the public sector transformation. Using Computer assisted exercises, a special technical platform, training and exercise management system provides an integrated framework across the Public Sector for enhancing the effectiveness and achieving interoperability and analytical capability.</style></abstract><section><style face="normal" font="default" size="100%">79</style></section></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>32</ref-type><contributors></contributors><titles><title><style face="normal" font="default" size="100%">Computer Assisted Exercise Management Environment for Civil Security</style></title></titles><dates><year><style  face="normal" font="default" size="100%">2011</style></year></dates><publisher><style face="normal" font="default" size="100%">Institute of ICT</style></publisher><pub-location><style face="normal" font="default" size="100%">Sofia</style></pub-location><volume><style face="normal" font="default" size="100%">PhD Thesis</style></volume><language><style face="normal" font="default" size="100%">eng</style></language></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>27</ref-type><contributors></contributors><titles><title><style face="normal" font="default" size="100%">COMPUTER ASSISTED EXERCISES MANAGEMENT ENVIRONMENT FOR CIVIL SECURITY</style></title><secondary-title><style face="normal" font="default" size="100%">IT4Sec Reports</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2011</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2011</style></date></pub-dates></dates><number><style face="normal" font="default" size="100%">76</style></number><publisher><style face="normal" font="default" size="100%">Institute of Information and Communication Technologies</style></publisher><pub-location><style face="normal" font="default" size="100%">Sofia</style></pub-location><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">Up to the beginning of the 90-s “security” was a synonym of “defense”. While today in most European countries security is firstly associated to risks like: illegal migration, ethnic and religious conflicts, the proliferation of weapons of mass destruction and, of course, terrorism. These may also include effective prevention, mitigation and management of the consequences of natural disasters and industrial accidents. That is why security is no longer a purely military concern. Nowadays it is also related to the social-economic development and all elements of the society are involved. In accordance the new demands towards security impose fundamental reforms of the national structures, investment models, systems for management, adoption and mass application of contemporary methods of operations research, system analysis and risk management. Without such approach the conclusions and decisions based on them cannot be fully substantiated. Without such approach the conclusions and decisions based on them cannot be fully substantiated.
The necessity to perceive the security sector in comprehensive manner involving all types of authorities, has been imposed by the complexity of the current security issue. The national security, as wellthe individual’s security has to be ensured within all dimensions – military, political, economic, social,societal and environmental. The more complex understanding of the term “security sector” also reflects such crucial topics of the current political and scientific discourses as is the good governance, eventually transition or integration in a better way.
Important part of the good governance is the crises management. In this area military and civilian actors need to plan together, operate in complementary ways and support each other. Such a comprehensive approach is an essential part of NATO’s transformation in the  crisis management domain.
The need to promote a Comprehensive Approach applies not only to operations but more broadly to many of NATO's efforts to deal with 21st century security challenges such as fighting terrorism, improving energy security, preventing proliferation of weapons and dangerous materials, protecting against cyber attacks, and confronting the threat of piracy. NATO's contribution to a Comprehensive Approach is a key feature in the new Strategic Concept.
Main goal in that direction is development of professional forces, flexible enough to execute tasks in broad spectrum. . These forces must be effective, multifunctional, modulized mobile and professionally trained. 
Current technologies bridge the training needs and improvement of capabilities. The information technologies provide optimal way for resolving key issues on national and global level and are appropriate for enhancing the preparedness and trainings.   
Applying the modeling and simulation methodologies and tools in the commanding staff trainings is a new form for capabilities development, which is well accepted in NATO members    
Establishment of centers for modeling and simulations, development of new training models in accordance to NATO standards, execution of computer assisted exercises and usage of lessons learned from the practice, contribute for the improvement of individual’s and team trainings. The computer assisted exercises (CAX) are one of the valuable tools for enhancing the effectiveness in trainings and achieving interoperability at low price and decreased risk level, in comparison to field exercises.  CAX is a tool for testing doctrinal documents implementing the gained experience and lessons learned in past military missions. Despite the important role of CAX for enhancing training capabilities in the integrated security sector, unified CAX management environment practically is missing. This environment have to form organizational system of concepts, approaches, methodologies, tools and means for effective realization of processes and its improvement.    
Design, development and utilization of unified CAX environment is a new multidiscipline systematic approach for CAX management and affords opportunity for planning, execution and results assessment of CAX projects in the civil security domain.    
Adding a structured framework for project management assures monitoring and control on finances, tasks, resources, information, quality, risks and guarantees successful accomplishment of the projects. The specific benefits are as follows: 
1.	Project implementation in scope, in time and in budget;
2.	 Transparency, distinct distribution of responsibilities and assessment of deliverables and achieved results at each project stage;
3.	More effective and efficient resource management; Storing data and knowledge bases.
Considering the CAX specific features and the best practices, the model has been developed on the conceptual basis for project management. The applied methodology follows the five phases of the project management lifecycle: initiation, planning, execution, control and monitoring and finalization.   
Project management tries to see the CAX a whole, and systematically challenge the difficulties encountered with new re-thinking processes in order to increase the CAX management.
In addition, the portfolio project management cycle proposed, allows the creation of an excellent base of information that, with some extension and analysis may be transformed into knowledge, facilitating the post-mortem analysis of the decisions taken and of the scenarios in a specific period of time. This ability can enhance the CAX learning, gathering valuable lessons in order to avoid the repetition of past errors.
So it is of great importance to develop a flexible and expandable еnvironment for CAX management, which considers concepts, methods, approaches and tools and combine the different criteria in the most suitable selection of the project portfolio, involving the full participation of the decision makers and providing the users with a quick feedback impact, in certain parameters, with the consequences of the changes produced.
</style></abstract></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>17</ref-type><contributors></contributors><titles><title><style face="normal" font="default" size="100%">Computer Assisted Exercises Management Environment for Civil Security</style></title><secondary-title><style face="normal" font="default" size="100%">Information &amp; Security: An International Journal</style></secondary-title></titles><dates><year><style  face="normal" font="default" size="100%">2011</style></year><pub-dates><date><style  face="normal" font="default" size="100%">2011</style></date></pub-dates></dates><volume><style face="normal" font="default" size="100%">27</style></volume><pages><style face="normal" font="default" size="100%">147-159</style></pages><language><style face="normal" font="default" size="100%">eng</style></language><abstract><style face="normal" font="default" size="100%">&lt;p&gt;Developing new training models along NATO and EU priorities, conducting computer assisted exercises and applying lessons learned from practical experience contribute to the strengthening the individual and team readiness for crises management. However, no matter how important CAX are for the enhancement of training in the integrated security sector, practically a unified CAX management environment in civil security area is still missing. This environment would form an organizational system comprising concepts, approaches, methodologies, tools and means for effective process implementation and their improvement. A model of unified CAX management environment for concept development, selection of methodology, application of tools, detailed analyses, prognosis, evaluations and scientifically based solutions is presented here. This model is based on the most accepted method for the enhancement of effectiveness, result-oriented management, ensuring transparency and oversight &amp;ndash; the application of project management methodology for the entire management of CAX in civil security&lt;/p&gt;</style></abstract><issue><style face="normal" font="default" size="100%">2</style></issue></record><record><source-app name="Biblio" version="7.x">Drupal-Biblio</source-app><ref-type>27</ref-type><contributors></contributors><titles><title><style face="normal" font="default" size="100%">Joint Training Simulation and Analyses Center as Computer Assisted Exercises Environment for Crises Management</style></title></titles><dates><year><style  face="normal" font="default" size="100%">2006</style></year></dates><language><style face="normal" font="default" size="100%">eng</style></language></record></records></xml>