The APCERT Cyber Drill is an annual exercise of the Asia Pacific Computer Emergency Response Team (APCERT). In Vietnam, the Vietnam Cybersecurity Emergency Response Teams/Coordination Center (VNCERT) under the Authority of Information Security (Ministry of Information and Communications) is the event coordinator at the Vietnam endpoint and facilitates the participation of Vietnamese businesses in the drill together with the international community
EVN participated in the drill via an online connection to the APCERT system, from the endpoints at EVN headquarters, corporations and member units. The Department of Information and Communication Technology of EVN took the leading role and directly directed the drill; the EVN Information and Communication Technology Company was the focal point to propose team members for the main drill, coordinating the drill according to the scenario of the organizer.
Endpoint at EVN headquarters connecting online with APCERT Cyber Drill 2023 system
Cyberattacks via digital supply chain redemption is a first-hand, complicated, and unpredictable situation. Regarding the drill theme, the Authority of Information Security said that the security breach stems from the attacker successfully breaching the cloud service provider's storage server, making unauthorized interference and modification to the software package provided by the digital provider to the customer. An organization unknowingly installs an update to a server without their knowledge that the update contains malware, creating an opportunity for an attacker to establish a connection and compromise the organization's systems.
The drill aims to create real-life scenarios for the management and information technology security personnel to learn, improve practical experience, proactively identify risks, enhance prevention capabilities, and respond to cybersecurity incidents.
This helps assess the maturity of incident response and contributes to creating a unified understanding, strengthening collaboration between the incident response teams of various member units under EVN; conducting the drill on the Cybersecurity Emergency Response Procedure in the Vietnam National Electricity Group, which has been issued by EVN in Decision No. 1828/QD-EVN dated December 30, 2022.