Ref: Submission ID 58c52d63-f031-440c-8251-a34dfa16e4c7

Decision: minor revision

Dear Dr Leonidou,
Your manuscript, "Cybersecurity Training and Healthcare: the AERAS Approach", has now been assessed.

We invite you to revise your paper. When your revision is ready, please submit the updated manuscript and a point-to-point response if applicable.

https://submission.springernature.com/submit-revision/58c52d63-f031-440c-8251-a34dfa16e4c7

To support the continuity of the peer review process, we recommend returning your manuscript to us within 14 days. If you think you will need additional time, please let us know by replying to this email.

Kind regards,

Sokratis Katsikas
Editor
International Journal of Information Security

SUBMISSION INSTRUCTIONS FOR REVISED PAPERS
Once you have revised your paper, the submitter Pantelitsa Leonidou can use the following link to submit it:

https://submission.springernature.com/submit-revision/58c52d63-f031-440c-8251-a34dfa16e4c7

In order to process your paper (please note if there are review reports these will be included below), we require:

• A point-by-point response to the comments, including a description of any additional experiments that were carried out and a detailed rebuttal of any criticisms or requested revisions that you disagreed with.

This must be uploaded as a 'Point-by-point response' file. All changes to the manuscript must be highlighted or indicated by using tracked changes.

At this stage, please also ensure that you have replaced your initial-submission image files with production quality figures. These should be supplied at 300 dpi resolution for .jpeg and .tiff or as .eps files. Figures should not include Figure number labels in the image.

Please ensure you conform to our authorship policies, also outlined here: https://www.springer.com/journal/10207/submission-guidelines

If you have been asked to improve the language or presentation of your manuscript and would like the assistance of paid editing services, then our expert help at Springer Nature Author Services can help you improve your manuscript through services including English language editing, developmental comments, manuscript formatting, figure preparation, translation, and more.

To find out more and get 15% off your order then click the link below.

https://authorservices.springernature.com/go/sn/?utm_source=SNAPP&utm_medium=Revision+Email&utm_campaign=SNAS+Referrals+2022&utm_id=ref2022

Please note that use of an editing service is neither a requirement nor a guarantee of publication. Free assistance is available from our resources page: https://www.springernature.com/gp/researchers/campaigns/english-language-forauthors

REVIEWER REPORTS

Reviewer Comments:

Reviewer 1
++++

Thorough needs analysis: The paper conducts a comprehensive needs analysis in the healthcare sector by using surveys and interviews. This approach provides a rich and insightful dataset, which serves as a solid foundation for the development of the AERAS project.
Clear and well-structured presentation: The paper is well-organized and effectively conveys its content. The architecture of the AERAS platform is presented logically, making it easy for readers to understand the proposed approach.
Adherence to ethical standards: The paper explicitly addresses ethical considerations, such as obtaining participants' consent and ensuring data privacy. This demonstrates a commitment to conducting research with integrity.
Implications for cybersecurity training: The study's findings have significant implications for the development of effective cybersecurity training programs in the healthcare sector. It highlights the need for tailored training that is practical and adaptable to individual organizations' requirements.

----

Platform implementation: The paper presents a comprehensive architecture for the AERAS platform, but it lacks discussion about the actual implementation of this platform. Readers might be interested in understanding the technical challenges, practical considerations, and potential barriers to implementing such a complex system. Some insights into the technical feasibility of the proposed architecture would be valuable.

Attachments:
• https://reviewer-feedback.springernature.com/download/attachment/ba5b89c0-7e41-4e79-bfc6-a9d01a9f06a5

Reviewer 2
Overall, the paper is well written and the components comprising the overall architecture are described.

The paper requires some language fixes and some figures could be improved (e.g., Fig5)

While the authors describe the proposed architecture, they could emphasize more on the novelties provided for the Healthcare sector specifically (i.e., the key points that render this cyber range architecture superior to the existing ones for this application).