Here's a useful take on designing #cybersecurity exercises, from the European Union Agency for Cybersecurity.
https://op.europa.eu/en/publication-detail/-/publication/38d1878b-0ed3-11f1-8870-01aa75ed71a1/

The ENISA Cybersecurity Exercise Methodology - Publications Office of the EU
In today’s digital landscape, organisations face increasing cyber threats. Cybersecurity exercises are essential for preparing, testing and enhancing team and system capabilities to respond to these threats. A well-structured cybersecurity exercise methodology ensures a comprehensive approach to simulation and training, building resilience and agility in mitigating cyber risks.