Hong Kong Cybersecurity Attack and Defence Drill 2026 successfully concluded
The Hong Kong Cybersecurity Attack and Defence Drill 2026, spearheaded by the Digital Policy Office (DPO) and co-organised by the Office of the Commissioner of Critical Infrastructure (Computer-system Security) of the Security Bureau, the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, the Hong Kong Internet Registration Corporation Limited, Cyberport, the Hong Kong Cybersecurity Professional Association, and the Hong Kong Institute of Information Technology, concluded successfully last night (October 31). The drill employed practical combat scenarios to identify system vulnerabilities, and test the defence mechanism and incident response capabilities of participating departments and organisations, thereby enhancing Hong Kong’s overall cybersecurity protection and resilience.
As the drill enters its third edition, this year’s Hong Kong Cybersecurity Attack and Defence Drill has expanded further in scale. A total of 51 defending teams (also known as Blue Teams) participated, covering designated information systems across 28 government departments, 23 public organisations and newly introduced private enterprises. The 23 attacking teams (also known as Red Teams) comprised representatives from 15 Hong Kong and Mainland cybersecurity professional organisations, four local tertiary institutions, three attacking teams recommended by the Cyberspace Administration of Guangdong Province, and one attacking team deployed by the DPO. This composition fully demonstrates the exchange and collaboration between Guangdong and Hong Kong in cybersecurity, as well as their joint efforts in cultivating cybersecurity talent.
Acting Deputy Commissioner (Digital Infrastructure), Ms Cari Wu, witnessed the successful conclusion of this year’s drill at the event venue last night (October 31) alongside representatives of co-organisers. She expressed gratitude to all co-organisers, the Red Teams, the Blue Teams, the referee panel, and all supporting staff. She encouraged all participating units to continue their close exchanges in the cybersecurity field to jointly build a robust and high level cybersecurity shield for Hong Kong.
The drill, spanning three days for a total of 60 hours, commenced on October 29. The Red Teams, acting as attackers, launched simulated cyberattacks in a strictly controlled environment to examine the Blue Teams’ cybersecurity defense capabilities. The drill enabled participating teams to accumulate practical experience in handling various types of cybersecurity threats. All participating systems and services remained in normal operation during the drill. Reports of the drill will be provided to the relevant government departments, public organisations, and private enterprises for reference and follow-up actions.
In addition, representatives from over 80 different organisations attended the venue as observers to understand the process of the attack and defence drill, exchange practical experience, and prepare for participation in upcoming drills. The drill has further consolidated the strengths of the Government, the cybersecurity industry, and all sectors of the community to build together a secure cyber environment in Hong Kong.
END
Media Enquiry:
Hong Kong Internet Registration Corporation Limited
Marketing and Communication Department
Tel：(852) 2319 3835
Email：marketing@hkirc.hk
About the Hong Kong Internet Registration Corporation Limited
Hong Kong Internet Registration Corporation Limited (HKIRC) is a not-for-profit and non-statutory corporation designated by the HKSAR Government to administer the registration of Internet domain names under .hk and .香港 country-code top level domains. The HKIRC provides registration services through its registrars for domain names ending with .com.hk, .org.hk, .gov.hk, .edu.hk, .net.hk, .idv.hk, 公司.香港, .組織.香港, .政府.香港, .教育.香港, .網絡.香港, .個人.香港, .hk and .香港.