Lessons Learned from NATO’s Cyber Defence exercise Locked Shields 2015

The increased focus on Supervisory Control and Data Acquisition/ Industrial Control Systems
\n(SCADA/ICS) in the military domain will lead to measures for improving cyber-physical security and the
\ndevelopment of operational capabilities. For the member states of NATO exercises in the cyber-physical field
\ncontribute to this process and to the exchange of experiences and skills. A team consisting of members of the
\nGerman Bundeswehr and the Dutch Defence Computer Emergency Response Team (DefCERT), gained 10th
\nplace overall in Locked Shields 2015. In the forensic challenge, a separate part in the exercise, a 3rd place was
\nobtained. SCADA/ICS was an element of the complete exercise, unlike forensics which was a separate
\nchallenge. This team was rewarded for not only protecting their own SCADA/ICS element, but all the other
\nteams as well. However the protection for the other teams was reverted to provide the opportunity for the
\nother teams to do a meaningful exercise on SCADA/ICS. The world’s largest cyber exercise was informative
\nand generated many lessons learned.