Hong Kong launches 2026 cyber defence drill with private firms
The Hong Kong government launched a three-day cyber security drill on 29 October 2026, with 51 blue teams and 23 red teams. For the first time, private enterprises joined as defenders alongside government departments and public bodies.
The Hong Kong Special Administrative Region Government today launched the "Hong Kong Cyber Security Attack and Defence Drill – Build to Defend 2026", a three-day exercise running until the evening of 31 October. Organised by the Digital Policy Office, the drill is co-hosted by the Commissioner's Office for Critical Infrastructure (Computer System Security) of the Security Bureau, the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, the Hong Kong Internet Registration Corporation Limited, Cyberport, the Hong Kong Cyber Security Professional Association and the Hong Kong Institute of Information Technology.
For the first time, private enterprises have been invited to join the defending side, alongside government departments and public bodies, to conduct live-fire training aimed at strengthening Hong Kong's overall cyber security posture and resilience. Speaking at the opening ceremony, Professor Sun Dong, Secretary for Innovation, Science and Technology, said the government insists on coordinating development and security, establishing a robust cyber security defence system and deepening collaboration on cyber security. He stressed that fortifying cyber defences requires turning defence into practical action, using real personnel, real networks and real combat to test and enhance the defensive capabilities of participating departments and organisations.
The drill simulates real-world cyber threats, with red teams (attackers) attempting to identify system vulnerabilities to test the response of blue teams (defenders). The exercise not only assesses blue teams' cyber defence capabilities but also serves as a platform to unite the government, the cyber security industry and various sectors of society in building a secure cyber environment.
This year's drill has attracted broad participation and expanded in scale. A total of 51 blue teams are taking part, including 28 government departments and 23 public bodies and private enterprises, each defending designated information systems. The 23 red teams include 15 experienced cyber security organisations from Hong Kong and mainland China, four higher education institutions, three top attack teams recommended by the Guangdong Provincial Internet Information Office and one attack team from the Digital Policy Office, demonstrating cross-border collaboration between Guangdong and Hong Kong on cyber security and joint efforts to cultivate cyber security talent. The Digital Policy Office has also invited 17 Hong Kong and mainland cyber security firms with extensive attack-and-defence experience to provide technical support to the blue teams. In addition, representatives from more than 80 organisations are attending as observers to learn about the drill process for reference in future exercises.
