Objective: Given the increasing cyber threats and the increasing complexity in this area, organizations and critical infrastructures need to prepare themselves against these threats. One of the main methods in this regard is to hold cyber exercises that simulate practical situations in controlled environments. Therefore, the aim of this article is to present a cyber exercise model to evaluate and strengthen this critical cyber infrastructure of the Islamic Republic of Iran.

Methodology: The current research is applied and is carry out with descriptive-case study method and mixed approach(qualitative and quantitative).

Findings: The proposed model for a cyber defense exercise has been developed based on cybersecurity principles, extensive library studies, in-depth interviews with experts, and data analysis. This model comprises various components, including inputs, processes, elements, outputs, results, and feedback. Furthermore, to assess the efficiency and effectiveness of the proposed model, a specialized questionnaire was designed and presented, and the opinions of cybersecurity experts and professionals were gathered.

Conclusion: The results of the questionnaire analysis indicate that using this model in cyber exercises can improve the efficiency of cyber exercises and enhance the cybersecurity level of the critical infrastructure of the Islamic Republic of Iran.