National cyber crisis exercise tests cooperation, communication and response

The question is not whether you will be the victim of a cyber attack, but when. This has become a common saying in cybersecurity circles, and not without reason, as the threat continues to grow. In 2024, the CCB received 352 reports of incidents, and this number continues to rise.

An interesting simulation: ransomware in the energy sector

During this simulated crisis, a cyber incident in the energy sector was simulated, including disruptions to the mobile data network. It started with a ransomware attack on an energy supplier, impacting a wind farm, an energy park in Drogenbos and the mobile telephone network in Brussels. Stakeholders from the CCB and the NCCN, such as the BIPT, the Federal Public Prosecutor's Office, the FCCU, ADIV/Cyber Command, ELIA and the FPS Economy came together for a tabletop exercise to test information exchange and decision-making in crisis situations. 

A tabletop exercise is a simulated crisis situation in which participants work on a hypothetical scenario in a meeting room. No IT systems are used: the focus is on decision-making, communication and coordination. It is a safe way to learn, test and improve, without disrupting networks or causing damage.

Lessons learned

The exercise provided important insights, such as the need for refined procedures for information flows and structured communication between all parties involved. These lessons learned will be incorporated into a larger-scale exercise in 2026.

By practising regularly and putting the national cyber emergency plan into practice, all partners involved can respond quickly, in a coordinated and effective manner in the event of a real cyber crisis. Cyber crisis exercises such as this are essential to increase the preparedness of organisations and governments. They help to prevent panic and strengthen cooperation between services and organisations.National cyber crisis exercise tests cooperation, communication and response.