The Digital Policy Office of the Government of the Hong Kong Special Administrative Region, as the coordinating organiser, together with the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, Hong Kong Internet Registration Corporation Limited, Cyberport, and the Hong Kong Institute of Information Technology as co-organisers, officially launched the Second Hong Kong Reality-Based Hong Kong Cybersecurity Attack and Defence Drill 2025
With the increasing the digitization of Hong Kong’s society and economy, importance of cybersecurity has become ever more prominent. In recent years, faced with an increasingly complex and evolving landscape of cyberattacks, both public institutions and commercial enterprises have encountered severe challenges, including ransomware attacks, data breaches, phishing scams, and supply chain attacks, among diverse threats. As an international financial center and technological hub, Hong Kong’s cybersecurity is not only crucial for protecting citizens’ personal data and assets but also serves as a vital foundation for maintaining social stability and sustainable economic development. In response to this situation, the Digital Policy Office (DPO) actively promotes collaboration between public and private sectors to enhance overall defensive capabilities and strengthen cybersecurity awareness and technical proficiency.
Professor Dong Sun, Secretary for Innovation, Technology and Industry, attended the launching ceremony of the “Hong Kong Cybersecurity Attack and Defence Drill 2025” (10 Oct). The photo shows Professor Dong Sun (fourth from right), Digital Policy Commissioner Ir Tony Wong (fourth from left), Dr Rocky Cheng, CEO of Cyberport (first from left), Ir Wilson Wong, CEO of HKIRC (second from left), Mr Raymond Lam, Chief Superintendent of the Hong Kong Police Force Cyber Security and Technology Crime Bureau (third from left), Mr Daniel Cheung, Deputy Commissioner for Digital Policy (Digital Infrastructure) (third from right), Mr Donald Tong, Executive Director of Vocational Training Council (second from right), and Dr John Hui, Principal of Hong Kong Institute of Information Technology (first from right).
To further strengthen the local cybersecurity defense, the Digital Policy Office, as the coordinating organizer, together with the Cyber Security and Technology Crime Bureau (CSTCB) of the Hong Kong Police Force, and co-organized by the Hong Kong Internet Registration Corporation Limited (HKIRC), Cyberport, and the Hong Kong Institute of Information Technology (HKIIT), officially launched the Second Hong Kong Reality-Based Cybersecurity Attack and Defense drill, “Hong Kong Cybersecurity Attack and Defence Drill 2025,” on 10th October. This drill centers on simulating real-world cyber attack and defense scenarios, allowing participants from government departments and public and private sectors to test and optimize their defense strategies in an environment close to actual combat. The goal is to enhance practical capabilities in responding to various attacks and thereby build a more resilient cybersecurity ecosystem.
The government launched the “Hong Kong Cybersecurity Attack and Defence Drill 2025” (10 October). The photo shows the organizers and platform providers giving a briefing to the participants.
“Hong Kong Cybersecurity Attack and Defence Drill 2025” includes various attack methods, such as penetration testing targeting infrastructure, databases, and network systems, helping participating teams identify vulnerabilities and defense gaps, and develop immediate response plans. The drill features designated attacker and defender roles to simulate real-time confrontations between hacker attacks and defense strategies, enhancing participants’ judgment and decision-making abilities under pressure. This event not only focuses on technical aspects but also emphasizes improving comprehensive cybersecurity management and emergency response processes, promoting the development of an overall security culture.
Professor Dong Sun, Secretary for Innovation, Technology and Industry, in his speech at the opening ceremony, highlighted the importance of a stable and secure cyber environment in driving Hong Kong’s development as an international innovation and technology hub by saying, “Security is the premise of development, and development is the guarantee of security.” He stated that the Hong Kong Cybersecurity Attack and Defence Drill employs “real personnel,” “real networks,” and “real combat” to thoroughly test the security protection capabilities of participating government departments and public institutions. Through attacking to build defense, the drill aims to comprehensively enhance Hong Kong’s cybersecurity protection and resilience.
Professor Dong Sun, Secretary for Innovation, Technology and Industry, delivered a speech today (10 October) at the launching ceremony of the “Hong Kong Cybersecurity Attack and Defence Drill 2025.”
As a key stakeholder of the Hong Kong Internet, HKIRC is responsible for managing the local domain name system and promoting the stable operation of internet infrastructure. HKIRC has been actively participating in cybersecurity projects, offering a range of free cybersecurity programs to enhance the defense capabilities of small and medium-sized enterprises (SMEs), ensuring Hong Kong remains a safe and reliable digital city, and supporting stakeholders in maintaining a healthy and sustainable internet ecosystem. Ir Wilson Wong, CEO of HKIRC, said, “Facing increasingly complex cyber threats, HKIRC is committed to supporting local SMEs in their cybersecurity efforts. We believe that through collaboration with stakeholders across sectors, we can strengthen Hong Kong’s cyber resilience to protect societal and business interests. This drill is a crucial step in enhancing practical capabilities and building a stronger digital defense for Hong Kong.”
Cyberport has been closely working with the HKSAR Government and the industry, dedicated to building an advanced cybersecurity ecosystem in Hong Kong and enhancing the cybersecurity capabilities within the industry. Currently, Cyberport hosts over 30 leading cybersecurity technology companies, providing a wide range of distinctive products and services, including AI-driven detection and analysis of cybersecurity vulnerabilities, risk assessment of AI large models, auditing blockchain and digital asset security, tracking virtual currency attacks, and threat intelligence large models. Additionally, Cyberport and its community companies regularly organize attack-defense drills, cybersecurity vulnerability testing, and industry forums with the Government and the industry to share the latest cybersecurity protection technologies. Dr Rocky Cheng, CEO of Cyberport, said, “Cybersecurity is the foundational cornerstone of the digital economy and innovation technology development. This cybersecurity drill enables various sectors to ‘train troops’ through real combat, optimizing response mechanisms and operational procedures for addressing cybersecurity risks, pragmatically enhancing defense capabilities. As Hong Kong’s digital technology hub and AI accelerator, Cyberport will continue to work hand in hand with the Government and industry partners to nurture cybersecurity talent, promote cross-sector collaboration, actively build a vibrant cybersecurity ecosystem, and drive innovative breakthroughs through AI to support Hong Kong’s development into a smart city with high-level cybersecurity.”
As Hong Kong’s first dedicated IT tertiary institute, HKIIT is committed to nurturing talents in IT and cybersecurity-related fields. It provides innovative technology programmes covering Artificial Intelligence, Cybersecurity, Data Science, the Internet of Things, Robotics Applications, and Automotive Intelligence Technology. Among them is the Higher Diploma in Cybersecurity programme designed for secondary school graduates, covering professional knowledge such as Information Systems Security Audit, Servers and Services Security Management, and Web Application Security. HKIIT also offers “SkillsUP” in-service training for industry practitioners, corporate professionals and working individuals to enhance their workplace competitiveness. And HKIIT collaborates with the DPO to provide cybersecurity training for staff of government departments. Dr John Hui, Principal of HKIIT, said, “For the second consecutive year, HKIIT is co-organizing the Cybersecurity Attack and Defence Drill with HKIIT’s teaching staff and students forming the red team participating in simulated hacker attacks in a real environment. Through this drill, students can apply their learning in class in System Administration and Security, Internet Programming, and Enterprise Networking Technologies, and other skills to real scenarios, gaining understanding and response capabilities to the latest cybersecurity threats and defence strategies. HKIIT will continue to align with the Government’s policies on innovation technology and digital transformation, cultivating outstanding cybersecurity and IT talents to meet industry needs and promote Hong Kong’s economic development.”
The organizers and co-organizers stated that this attack and defense drill is an important step towards establishing Hong Kong as a cybersecurity benchmark in the Asia-Pacific region. Through reality-based drills, it improves the practical experience of local professionals and promotes technical exchanges and standards development, helping to build a more closed-loop and effective protection system. Moving forward, Hong Kong will continue to strengthen cybersecurity legislation and training, raise public and business awareness of protection, and create a reliable and secure digital environment to support the city’s long-term economic development and social prosperity.
— End —
Media Contact Hong Kong Internet Registration Corporation Limited Tel：+852 2319 3835 Email：marketing@hkirc.hk
About Hong Kong Internet Registration Corporation Limited
Hong Kong Internet Registration Corporation Limited (HKIRC) is a not-for-profit and non-statutory corporation designated by the HKSAR Government to administer the registration of Internet domain names under .hk and .香港 country-code top level domains. HKIRC provides registration services through its registrars for domain names ending with .com.hk, .org.hk, .gov.hk, .edu.hk, .net.hk, .idv.hk, 公司.香港, .組織.香港, .政府.香港, .教育.香港, .網絡.香港, .個人.香港, .hk and .香港..