From April 10-11, in Dong Ha City, the Information and Communications Technology Center, Department of Information and Communications coordinated with the Vietnam Cyberspace Emergency Response Center (VNCERT) Branch in Da Nang to organize a practical exercise on responding to and handling cyber security incidents in 2024.
Nearly 60 officers participated in a live-action drill on information security incident response and handling - Photo: NT
The exercise was attended by nearly 60 officers who are penetration testing experts; technical staff of the provincial electronic information portal, administrators of the official email system, service providers, representatives of a number of agencies and units of the provincial armed forces; members of the network information security incident response team; officers in charge of information technology/network security at departments, branches, sectors, district and commune People's Committees; experts from units providing network security monitoring and surveillance services serving the province.
The scope of the exercise is carried out on the provincial electronic information portal https://www.quangtri.gov.vn; email system https://mail.quangtri.gov.vn (+*@quangtri.gov.vn); direct exercise form.
The drill was well organized, helping to promptly handle information security incidents - Photo: NT
During the exercise, the participating officers were divided into 5 attack teams (Red team) and 1 defense team (Blue team). The attack teams included security officers from agencies and units and deployed attack methods in compliance with the exercise regulations issued by the Organizing Committee. The defense teams included technical officers and the province's security incident response team.
During the exercise, teams were trained on how to exploit common security vulnerabilities on electronic portals and official email systems.
Attack teams will deploy attack methods against selected system models and defense teams will organize response solutions to attacks on the province's information systems.
Teams are trained on how to exploit common security vulnerabilities on electronic portals and official email systems - Photo: NT
Through the drills, incident response teams have the opportunity to practice known tools and solutions in real-life attacks and defenses, protecting the province's operating information systems.
Timely detect weaknesses and vulnerabilities of technical systems and processes being applied, as well as errors and limitations of technologies being used, and prepare proactive response plans when attacks occur.
In addition to investing in technology, drills need to be maintained regularly, through which the incident handling experience of the incident response team is rubbed, trained and improved, ready to respond to real attacks; helping to improve the capacity of the team of specialized information technology/information security officers at agencies, units and localities in the province.
Ngoc Trang
Source
Comment (0)