The Cyber Guardian exercise, organized by the Brazilian Ministry of Defense, is the main annual cyber warfare training exercise in the southern hemisphere. In it, the objective is to simulate cyber threats to critical structures – hydroelectric power plants, banks and airports, for example – in order to stimulate collaborative actions to protect the computer systems of these structures.
The fourth edition brought together 110 civil and military organizations and companies, which participated in the exercise with some 450 representatives. The activities took place between August 16 and 19 in Brasilia. The number of participants in 2022 was almost double the 2021 edition, and included Brazilians and foreigners; among them the New York Army National Guard (NYARNG), Brazil’s partner in the framework of the United States Department of Defense State Partnership Program, which participated with two members of its cyber protection team. It was the first time that the American institution was present at the exercise, in which professionals from Germany, Argentina, Austria, Chile, Colombia, Estonia, France, Guatemala, Peru, the United Kingdom, Romania and South Africa also participated.
“As we become more dependent on technology, we are more exposed to cyber threats. This is a security challenge shared by all our partners in Latin America. Strengthening cybersecurity partnerships will make us safer,” he told Dialogue Maj. David M. Myones, director of the New York National Guard State Partnership Program.
collaborative work
The Cyber Guardian exercise divided the activities into three phases: virtual simulation, constructive simulation, and study group. In the first phase, participants performed an activity known as capture the flag, which challenges contestants to identify and fix vulnerabilities in computer systems.
The second phase of the exercise was the constructive simulation, in which groups were formed from the information technology, social communication, legal and senior management areas. These groups functioned as crisis cabinets and had to provide solutions to cyber events that affected organizations. “Discussions in crisis cabinets demand actions at the decision-making and managerial (crisis management) and technical (incident response) levels,” he told Dialogue the Department of Science and Technology (DCT) of the Brazilian Army (EB).
The third phase began before the exercise started. “During the preparation phase of the exercise, study groups are formed within critical infrastructures, to develop strategies that contribute to the country’s cyber resilience. The conclusions and results are presented in the analysis following the Cyber Guardian 4.0 exercise”, explained the DCT, adding that the collaborative work simulated during the exercise between the participating institutions is not limited only to the days of the event. “The Cyber Guardian provides the creation of a great forum for the exchange of information and experiences between all sectors beyond the days of execution.”
The foreign participants also discussed possible joint cyber exercises in the future, in addition to learning regarding the main Brazilian cyber defense structures and teams, located in Brasilia.
For May. Myones, it was a surprise to see “so many similarities between the Brazilian and NYARNG cyber efforts. Each speaker represented his organizations with excellence. The main lesson learned is that our cyber efforts are very similar, as well as the fact that we use software y hardware very similar. This will allow our forces to be more interoperable through participation in these exercises and other events. Future joint exercises, soldier exchanges, and cyber training will be perfect for planning because of these similarities,” he said.
