Over two days, from October 9–12, 2024, in Hanoi, the Vietnam Oil and Gas Group (Petrovietnam), in collaboration with Vietnam Cyberspace Security Technology Joint Stock Company (VNCS), organized the live-fire cybersecurity drill "Incident Response for Information Security and Cybersecurity 2024." This significant event aimed to test and enhance incident response capabilities while strengthening the information security system across the Group.

The program witnessed the participation of Petrovietnam's leadership representatives, subsidiary units, and cybersecurity experts from VNCS/VNCS Global. Together, they created a practical and effective platform to address cybersecurity challenges amidst an increasingly complex threat landscape.

1. VNCS’s Role in the Program

As a strategic partner in cybersecurity, VNCS/VNCS Global played a vital role in designing realistic drill scenarios, deploying advanced monitoring tools, and providing data analysis support throughout the exercise.

(Mr. Ngo Quoc Vinh - Technical Division Director, VNCS; Vice General Director, VNCS Global)

Speaking at the program, Mr. Ngo Quoc Vinh, representing VNCS, emphasized:

"Through this program, VNCS aims to assist Petrovietnam not only in enhancing incident response capabilities but also in building a professional cybersecurity team ready to tackle increasingly sophisticated threats. This is a crucial step toward ensuring the safety of the Group’s information systems, contributing to the stable and efficient operation of the organization."

2. Program Highlights and Key Activities

During the program, participants engaged in simulated scenarios involving:

• Website defacement attacks.
• Privilege escalation attacks.
• Ransomware encryption attacks.
• Email phishing attacks.

The participants were divided into eight incident response teams, tasked with handling scenarios of varying complexity. Activities ranged from detection and prevention to post-incident remediation. This provided an opportunity to test teamwork, leverage modern tools, and derive practical lessons.

(Dedicated cybersecurity officers from Petrovietnam and its subsidiaries participate in the drills.)

(The participants actively and diligently engaged in the drills, adhering to regulations with guidance and support from VNCS.)

(Mr. Dang Minh Tuan - Deputy Head of IT, Binh Son Refining and Petrochemical Company (BSR))

Mr. Dang Minh Tuan, Deputy Head of IT at Binh Son Refining and Petrochemical Company (BSR), shared:

"To prevent and mitigate attacks, we utilized monitoring tools through SIEM solutions such as Splunk (IBM), QRadar, and MS Sentinel. Additionally, the best defense against attacks is early detection and swift response during targeted attack attempts," Mr. Tuan noted.

(Explore how Splunk SIEM protects your information security systems here.)
(Learn more about Splunk SIEM's 10th consecutive leadership in Gartner’s 2024 rankings.)

Mr. Dang Minh Tuan added that the drill provided valuable experiences and lessons in incident response and cybersecurity that could be applied within his organization.

(Mr. Nguyen Anh Duc - Head of Science, Technology, and Digital Transformation, Petrovietnam)

Mr. Nguyen Anh Duc, Head of Science, Technology, and Digital Transformation at Petrovietnam, affirmed that through the program, participants evaluated coordination capabilities and identified existing weaknesses related to personnel, processes, and technology. This enhanced their practical skills and readiness to address real-world cybersecurity incidents.

The program allowed participants to apply knowledge and techniques in practice, improving their professional skills to meet the growing challenges of information security. Mr. Duc expressed hope that participants would advise their leadership to organize additional drills, improving incident response capabilities and ensuring readiness across IT and cybersecurity personnel who could not attend this drill.

(Mr. Bui Dinh Giang - Deputy Office Chief, Head of IT and Digital Transformation, PTSC)

Sharing at the event, Mr. Bui Dinh Giang, Deputy Office Chief and Head of IT and Digital Transformation at PTSC, emphasized that in the digital era, cybersecurity is critical to sustainable business development. Particularly for strategic organizations like Petrovietnam, ensuring cybersecurity is not just a responsibility but a vital factor in safeguarding information, maintaining business continuity, and upholding national reputation.

Mr. Giang noted the importance of the drill in raising awareness among leaders, officers, and employees about the risks posed by cyberattacks. The simulated emergency situations tested inter-departmental coordination, improving incident recognition and mitigation while minimizing disruptions to business operations. Moreover, the drill helped Petrovietnam and its subsidiaries identify vulnerabilities in their cybersecurity systems to promptly address them.

3. VNCS/VNCS Global Cybersecurity Drill Services

The success of this drill further reinforces VNCS/VNCS Global's Cybersecurity Drill Services as a comprehensive solution. These services enable organizations and enterprises to quickly identify weaknesses in personnel, processes, and technology amidst evolving cyber threats. They also enhance defense and response capabilities.

With a team of experienced professionals who have participated in numerous national-level cybersecurity drills, VNCS/VNCS Global confidently delivers live-fire cybersecurity exercises tailored to organizations of all scales. These drills ensure that businesses remain prepared for any challenge in cyberspace.

Committed to delivering internationally certified quality services, VNCS/VNCS Global remains a trusted partner for organizations in safeguarding their digital assets and achieving sustainable growth in the digital era.

(Learn more about VNCS's quality services here.)

Contact VNCS today for prompt consultation:

📧 Email: sales@vncs.vn
📞 Hotline: (+84) 924 37 37 37