Hong Kong Concludes First Cybersecurity Attack and Defence Drill to Strengthen Public Sector Security Capabilities

Hong Kong Cybersecurity Attack and Defence Drill 2024 successfully concludes

The first Hong Kong Cybersecurity Attack and Defence Drill, spearheaded by the Digital Policy Office (DPO) in collaboration with the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force, the Hong Kong Internet Registration Corporation Limited, and the Hong Kong Institute of Information Technology, concluded today (November 17).

Various government departments and public organisations have been invited to participate in the exercise, which examines the defence capabilities of government departments and public organisations through practical combat scenarios on Internet-facing information systems, while carrying out in-depth security assessments and vulnerability detection activities of the relevant systems at the same time.

The "Red Teams", formed by five teams of cybersecurity professionals and academics acting as the attackers, launched simulated cyberattacks in a strictly controlled environment on participating organisations' designated information systems and electronic service platforms which are already in operation with a view to identifying potential security risks and vulnerabilities. Meanwhile, 12 defensive "Blue Teams", comprising government departments and public organisations, fended off these attacks in daily system operation scenarios, thereby strengthening their detection and incident response skills and tactics, and enhancing their experience.

The drill, which was launched on November 15, spanned three days for a total of 60 hours and was conducted in a controlled manner with the goal of enhancing the technical skills, strategy, experience, and overall defense capabilities of the participating government departments and public organisations. All participating systems and services have been in normal operation. Findings and reports of the drill will be provided to the respective departments or organisations responsible for operating the systems for necessary reference and follow-up.

In addition, the DPO invited other government departments and public organisations which did not participate in the drill to join as observers. More than 400 representatives from over 50 government departments and public organisations attended guided tours arranged by DPO which explained the objectives, arrangements, and preparations of the drill, so as to help them prepare for participation in future drills. The Under Secretary for Innovation, Technology and Industry, Ms Lillian Cheong, and the Commissioner for Digital Policy, Mr Tony Wong, visited the venue during the drill to engage in exchanges on the exercise's progress with the participating teams, judging panels and staff. The Deputy Commissioner (Digital Infrastructure), Mr Daniel Cheung, visited the venue today to witness the successful completion of the first Hong Kong Cybersecurity Attack and Defence Drill.

The DPO will continue to collaborate with the industry to prepare a series of cyber security promotion activities, including the Cybersecurity Symposium 2024 to be held in December, with a view to raising the community's awareness of cyber security. This symposium will bring together public and private sector organisations, businesses, and industry experts from the Mainland to discuss how the industry can work together to strengthen cybersecurity. The important outcomes and experience from this drill will also be shared in depth at the symposium.

Hong Kong Cybersecurity Attack and Defence Drill 2024 successfully concludes Source: HKSAR Government Press Releases

Hong Kong Cybersecurity Attack and Defence Drill 2024 successfully concludes Source: HKSAR Government Press Releases

Hong Kong Cybersecurity Attack and Defence Drill 2024 successfully concludes Source: HKSAR Government Press Releases

Hong Kong Customs detects case of non-registered precious metals and stones dealer carrying out specified transactions

Hong Kong Customs yesterday (December 18) detected a case involving a local company that conducted transactions of watches valued at over HK$120,000, without registration under the Dealers in Precious Metals and Stones Regulatory Regime. The company director was arrested.

An investigation is ongoing. The arrested person has been released on bail.

According to the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615), unless exempted, any person who is seeking to carry on a business of dealing in precious metals and stones and engage in any transaction(s) (whether making or receiving a payment) with a total value at or above HK$120,000 in Hong Kong is required to register with Hong Kong Customs. Any dealer, other than a registrant, who claims to be a registrant, claims to be authorised to carry out, or carries out any cash or non-cash transaction(s) with a total value at or above HK$120,000 is liable to a maximum fine of HK$100,000 and imprisonment for six months upon conviction.

Customs reminds dealers in precious metals and stones that they must obtain the relevant registration before they can carry out any cash or non-cash transaction(s) with a total value at or above HK$120,000.

For the forms, procedures and guidelines to submit applications for registration, please visit the website for Dealers in Precious Metals and Stones Registration System (www.drs.customs.gov.hk) or Customs' webpage (www.customs.gov.hk/en/service-enforcement-information/anti-money-laundering/supervision-of-dealers-in-precious-metals-and-ston/index.html).

Members of the public may report any suspected transactions involving precious metals and stones with a total value at or above HK$120,000 conducted without the required registration to Customs' 24-hour hotline 182 8080 or its dedicated crime-reporting email account (crimereport@customs.gov.hk) or online form (eform.cefs.gov.hk/form/ced002/).

Source: AI-found images