With the increased risk of exposure to cyber threats in recent times, many countries across the globe are beginning to understand that proactive measures are highly efficient and necessary in dealing with advanced cyber attacks. The Guam Homeland Security Agency (GHSA) is one of the few agencies in the world spearheading high-octane preemptive measures against cyber threats through a simulation that mimics real-world scenarios of cyber attacks.
Understanding the exercise Black Hydra and its strategic importance
The Guam Homeland Security and Office of Civil Defense (GHS-OCD) and Joint Task Force Micronesia found that taking emergency actions against cyber attacks was not the most optimal approach to eliminating digital threats. In a bid to curb risks that could arise if the United States and Guam were compromised, Exercise Black Hydra was initiated on the island.
The exercise centered on a tabletop discussion among participants to simulate scenarios in the cybersecurity landscape. These scenarios included:
- Unauthorized access: In the scenario, participants were placed in a real situation to examine the steps to take when access is compromised. Access compromise is the first breach that typically occurs. This enables hackers to bypass security protocols, steal data, install malware, and make away with critical information that could disorganize operations on a national scale.
- Ransomware: Participants were placed in a situation to respond to ransomware. Ransomware is the bargaining chip for the hacker on the other end of the screen. Here, a virus is implanted into the system and locks the organization’s crucial data with strong encryption, rendering it momentarily useless unless the organization bows to the needs of the extortionist.
- Service disruption: Here, participants were placed in a scenario where critical infrastructure was sabotaged. The deliberate sabotage of important national infrastructure, especially in areas like finances, where hackers impede the flow of operations, always leads to derailed investor confidence, which further translates into losses for the victims.
- Testing application of incident response frameworks like (NIST and CISA): The agency utilized the opportunity to test the efficacy of CISA in coordinating effectively against major cyberattacks.
Excerpts from the exercise that was conducted on Guam Island
From Exercise Black Hydra, the United States and crucial agencies can understand the entire scope of existing infrastructure in combating cyber attacks that could lead to a domino effect of devastating losses across the board. For several agencies across several locations around the globe, Exercise Black Hydra is the key to understanding how cyber attacks ensue in real-time, as the cybersecurity agency accelerates post-quantum encryption adoption.
Participants who took part in exercise Black Hydra’s real-time cybersecurity simulation pre-emption
Guam’s public sector was all in on the exercise. Sectors included in the simulation include:
- Law enforcement
- Fire and emergency services
- Public Health
- Airport authorities
The overall involvement of Guam’s public service established the island’s keen interest in representing all facets of the government and consonance between local agencies and public services.
The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) were also involved in the simulation by contributing helpful expertise in ensuring that the government is ready and that crucial infrastructure is operational in protecting against cyber attacks, as the CISA sunsets emergency cyber directives signal.
Hurdles and lessons learned for the future of cybersecurity
All targets for the simulation were met in several areas, including communication protocols and response time. With lessons learned, agencies can now re-strategize and handle weaknesses that were prominent in the simulation to protect national interests across the board.
For GHSA, the goal was simple: Test the readiness and effectiveness of already existing countermeasures against cyber espionage in real time. Through Exercise Black Hydra’s initiative, joint forces between the U.S and Guam have a redefined perspective on how to tackle and eliminate cyberattacks before they cause catastrophic disruption in national infrastructure, just as ISE expands its agenda with a dedicated cybersecurity summit.
