Follow-up training for Third Country Training: Blue Team Exercise in Siem Reap (20th to 21st March 2025)
The Blue Team Exercise was conducted from 20th to 21st March 2025 in Siem Reap, targeting Government Organizations and Critical Information Infrastructure Operators in Cambodia.
In this Blue Team Exercise, four officers from the Ministry of Post and Telecommunications (MPTC) who had participated in a third-country training held in Indonesia in January served as instructors. These four officers operated as Red Team for the Blue Team Exercise, taking on roles such as designing attack scenarios, building exercise systems in a virtual environment （Cyber Range）, and acting as cyber attackers for the exercises.
The Blue Team Exercise saw the participation of a total of 19 participants. This included seven MPTC officers from departments involved in cybersecurity, along with 12 participants from other ministries such as the Ministry of Economy and Finance (General Department of Taxation), the Ministry of Industry, Science, Technology and Innovation, the Ministry of Commerce, and the National Bank of Cambodia, as well as Critical Information Infrastructure Operators such as Electricite du Cambodge and the Phnom Penh Water Supply Authority.
The Blue Team Exercise was structured into three sessions based on practical work on cybersecurity: (1) lectures on cyber defense and investigation methods, (2) conducting hands-on cyber exercise, and (3) publishing incident reports. During the cyber exercise, participants were divided into Blue Teams of five members each. Each Blue Team was assigned a virtual system and worked on defending against cyber-attacks commenced by the instructors (attackers). In the subsequent incident reporting session, each Blue Team used investigation methods to identify the cyber-attacks that occurred during the exercise and explained to the other participants how to deal with the affected virtual system.
Through to provide this training, it is expected to promote the enhancement of "cyber defense" skills and the development of a sustainable cybersecurity framework in relevant organizations in Cambodia.
