The Joint Cyberspace Command is hosting and co-organising the CSIRT.es CTF event

• The competition, in Capture The Flag (CTF) mode, saw the participation of up to 22 companies and public bodies

The Joint Cyberspace Command, as the representative of ESPDEF-CERT in the CSIRT.es forum, has hosted and co-organised the CSIRT.es CTF, in close collaboration with the company Fortinet.

The CSIRT.es Forum (Computer Security Incident Response Team) is an independent, trusted and non-profit platform, comprising IT security incident response teams from public organisations or private companies whose scope of action or user community is located within Spanish territory.

Alongside the MCCE, companies and organisations such as INDRA, S2 Grupo, CSIRT-CV, the National Police, CSIRT-SATEC, DSN, Guardia Civil, Repsol and RENFE have collaborated; a total of 55 people from 22 companies and organisations. Furthermore, Fortinet has provided two mock-ups for the exercise to enable the visualisation of the effects of cyberattacks.

The exercise consisted of a blue team-red team competition targeting critical infrastructure. Its implementation has led to an improvement in the incident response capabilities of national companies and organisations, both at a technical and management level, as well as enhancing integration, trust and coordination capacity amongst all participants.

The members of the CSIRT.es forum provide their user communities with various services, depending on the resources and needs of those communities.

To join the Forum, CSIRTs must provide some form of service related to the management of cybersecurity incidents (incident analysis, response, coordination, etc.), and their missions and objectives must be mandated by law or organisational policy to improve the security of the technologies and communications of the community they serve.

Through initiatives such as this, ESPDEF-CERT continues to fulfil its mission within CSIRT.es by revitalising the forum and facilitating improvements to national cybersecurity.