Digital transformation

Hai Duong further strengthens cybersecurity incident handling process

HA KIEN December 12, 2024 13:04

Hai Duong's 2024 information security drill aims to improve coordination capacity and further strengthen the cybersecurity incident handling process.

giam-doc-so-thong-tin-hai-duong.jpg
Director of the Department of Information and Communications Nguyen Cao Thang emphasized that the 2024 information security drill aims to further strengthen the process of handling cybersecurity incidents.

On the morning of December 12, at the Eastern Cultural Center, the Department of Information and Communications of Hai Duong province chaired and coordinated with Bkav Joint Stock Company to organize a practical exercise to ensure information security and respond to cyber security incidents in 2024.

The drill has three objectives: to test and evaluate the ability to detect, respond to and handle information security incidents in provincial agencies and organizations; to improve coordination skills between units, to build and further consolidate the process of handling cybersecurity incidents; and to raise awareness of cybersecurity for the entire political system, businesses and people.

bao-dam-an-toan-thong-tin.jpg
The attacking team (Red team) will attack the simulated systems protected by the defending team (Blue team).

During the drill, participants were divided into 5 teams. One of them was the Red Team (attack team) consisting of Bkav's cybersecurity experts. This team will guide the process of using some common security vulnerability scanning and attack tools; deploy the attack process on simulated systems protected by the Blue Team (defense team).

ung-cuu-su-co-an-ninh-mang.jpg
Bkav's cybersecurity expert guides defense teams through some popular vulnerability scanning tools

4 Blue teams (defense teams) include representatives of leaders, officers, and employees of the Department of Information and Communications, a number of departments, branches, localities, and information technology enterprises of the province. This team must deploy procedures and use support tools to investigate vulnerabilities in order to respond to information security and network security incidents.

thuc-chien-an-ninh-mang.jpg
Immediately after detecting a cybersecurity incident, defense teams must deploy investigation and response procedures.

This is the third consecutive year that the Department of Information and Communications has hosted the event, with the coordination of cybersecurity experts to organize the exercise.

Through cyber security drills to assess information security protection capacity, readiness to prevent, handle and respond to cyber attacks. Detect existing weaknesses and loopholes in technology, processes and personnel to promptly handle and propose improvements in the future.

dien-tap-an-ninh-mang.jpg
One member of the attack team launches an attack on the vulnerability, while on the other side, the defense team immediately investigates and handles the incident.

At the end of the practical exercise, the defense team of the IT enterprises in the province achieved the highest results.

dien-tap-an-ninh-mang(1).jpg
Director of the Department of Information and Communications Nguyen Cao Thang awarded certificates of participation in the drill to the teams.

In recent times, the Department of Information and Communications has focused on implementing many contents on information security such as strengthening the province's information security incident response team, training basic knowledge on information security for community digital technology teams; assessing the level of information security when installed at the province's Data Center (DC); connecting systems with national population data.

The Department has approved information security level profiles for 280 provincial information systems, ranking 3rd nationwide in profile approval rate.

HA KIEN
(0) Comments
Latest News
Hai Duong further strengthens cybersecurity incident handling process