STANAG 6001 Level 3 – Writing Task (Memo): Simulated Cyber Attack During Training Exercise

STANAG 6001 Level 3 – Writing Task (Memo): Simulated Cyber Attack During Training Exercise

Examination task

Write a minimum of 120 words on the topic below.

During a recent training exercise, your unit took part in a simulated cyber defence operation involving a cyber attack on a critical infrastructure facility. The simulated threat actor conducted reconnaissance, gained unauthorised access through credential harvesting, and deployed ransomware to disrupt key systems.

You have been asked to write a memo to your Commanding Officer in which you:

1. describe the nature and course of the cyber attack,
2. explain how the unit responded to the incident,
3. provide recommendations to improve cyber defence capabilities in the future.

Sample Answer

Memo

Subject: Simulated Cyber Attack During Training Exercise

1. The purpose of this memorandum is to report on a simulated cyber attack conducted during a recent training exercise. The scenario involved a threat actor targeting a critical infrastructure facility. The attack began with reconnaissance activities aimed at identifying vulnerabilities in the network. This was followed by credential harvesting, which allowed the attacker to gain unauthorised access to the system. Subsequently, ransomware was deployed, resulting in the disruption of key operational systems.
2. The unit responded by analysing the method of intrusion and isolating affected systems. Cyber defence personnel successfully identified and removed the malware. At the same time, alternative procedures were implemented to maintain operational continuity. The response was generally effective; however, delays in detecting the initial phishing attempts indicated gaps in user awareness and early warning capabilities.
3. It is recommended to enhance cybersecurity training, particularly in recognising phishing and social engineering techniques. Regular vulnerability assessments should be conducted to identify weaknesses in the system. Furthermore, the implementation of advanced intrusion detection tools and improved coordination between cyber defence teams and operational units would significantly increase overall resilience.