Follow-up training for Third Country Training: Blue Team Exercise in Phnom Penh (27th to 28th November 2025)
The Blue Team Exercise was conducted from 27th and 28th November 2025 in Phnom Penh, targeting Government Organizations, Critical Infrastructure Operators and Educational Institutes in Cambodia.
In this Blue Team Exercise, four officers from the Ministry of Post and Telecommunications (MPTC) who had participated in a third-country training held in Indonesia in January 2025 served as instructors. Following a similar Blue Team Exercise conducted in Siem Reap in March 2025, and based on feedback from that previous session, exercise scenarios and an exercise environment more closely aligned with the actual operations were introduced. This initiative served not only to enhance the quality of the exercise but also to contribute to the capacity building of the instructors themselves.
The Blue Team Exercise saw the participation of a total of 38 participants. This included MPTC officers from departments involved in cybersecurity, as well as representatives from other ministries such as the Ministry of Economy and Finance (General Department of Taxation), the Ministry of Commerce, and the National Bank of Cambodia. It also included Critical Information Infrastructure operators such as Electricite du Cambodge, the Phnom Penh Water Supply Authority, and commercial banks, along with educational institutions such as the Cambodia Academy of Digital Technology, the Institute of Technology of Cambodia and so on.
The Blue Team Exercise was structured into three sessions based on practical work on cybersecurity: (1) lectures on cyber defense and investigation methods, (2) conducting hands-on cyber exercise, and (3) publishing incident reports. During the cyber exercise, participants were divided into Blue Teams of five members each. Each Blue Team was assigned a virtual system and worked on defending against cyber-attacks commenced by the instructors (attackers). In the subsequent incident reporting session, each Blue Team used investigation methods to identify the cyber-attacks that occurred during the exercise and explained to the other participants how to deal with the affected virtual system.
By continuing to provide such trainings, it is expected to promote not only the enhancement of "cyber defense" skills within relevant organizations in Cambodia but also the fostering of networking among participants and the development of a sustainable cybersecurity framework.
Reference: Follow-up training for Third Country Training: Blue Team Exercise in Siem Reap (20th to 21st March 2025)
https://www.jica.go.jp/oda/project/202005894/en_news/20250527_02.html
