Hong Kong Cybersecurity Attack and Defence Drill 2025 successfully concludes (with photos)
******************************************************************************************
To conduct a thorough and in-depth evaluation of the defence capabilities of participating government departments and public organisations by inspecting their Internet-facing information systems and identifying security vulnerabilities, the drill employed practical combat scenarios. The drill also aimed to prepare the cybersecurity readiness capabilities for the upcoming 15th National Games and the Legislative Council General Election, which will be held in November and December this year respectively.
Following the success of the first Hong Kong Cybersecurity Attack and Defence Drill organised by the DPO last year, the overall scale of the drill this year was significantly expanded to cover more public services. A total of 34 government departments and public organisations participated as defenders (Blue Teams), while the number of Red Teams acting as attackers increased to 15. They comprised experienced Hong Kong and Mainland cybersecurity professional practitioners, higher education institutions and three leading attacking teams recommended by the Cyberspace Administration of Guangdong Province, fully reflecting the collaboration and exchanges in cybersecurity between Guangdong and Hong Kong.
The Commissioner for Digital Policy, Mr Tony Wong, witnessed the successful conclusion of this year's Hong Kong Cybersecurity Attack and Defence Drill at the event's venue last night (October 12), alongside representatives from the co-organisers. He expressed gratitude to all co-organisers, the Red and Blue Teams, referees and support staff, and encouraged all parties to continue joining forces to strengthen Hong Kong's cybersecurity defence capability.
The drill, which was launched on October 10 and spanned three days for a total of 60 hours, was conducted in a controlled manner. The Red Teams, acting as attackers, launched simulated cyberattacks in a strictly controlled environment on designated information systems and electronic service platforms of participating government departments and public organisations which are already in operation to identify potential security risks and vulnerabilities. Meanwhile, the Blue Teams tried their best to fend off these attacks in daily system operation scenarios. All participating systems and services remained in normal operation during the drill. Reports of the drill will be provided to the relevant participating government departments or public organisations for reference and follow ups.
In addition, over 250 representatives from more than 60 government departments and organisations took part in the drill on-site as observers to monitor the operation and progress of the exercise and learn more about the latest trends in cybersecurity threats. The Deputy Commissioner (Digital Infrastructure), Mr Daniel Cheung, also visited the drill venue and communicated with the Red Teams, referees, and support staff to understand the progress of the drill.
Ends/Monday, October 13, 2025
Issued at HKT 15:30
Issued at HKT 15:30
NNNN
Photo
