Through a series of case studies, participants examined how cyberattacks against OT environments unfold in practice and what lessons can be drawn from past incidents to improve prevention and preparedness. 

Sessions also explored common operational technology attack vectors, highlighting how adversaries exploit vulnerabilities across IT-OT boundaries, legacy systems and remote access points. Particular attention was given to supply chain vulnerabilities and the growing importance of third-party risk management processes as dependencies on external vendors and service providers continue to expand the attack surface of critical infrastructure operators. 

Day concluded with an interactive table-top exercise simulating a ransomware attack on industrial control systems (ICS). Working in groups, participants practiced organisational-level response , focusing on technical measures, decision-making, communication and escalation during energy infrastructure-focused cyber incident. The exercise reinforced the importance of preparedness, cooperation across IT and OT staff and clear response procedures when managing complex OT cyber crises. 

Training is delivered in collaboration between the European Union (facilitated by the EU Delegation to Japan and the EU Delegation to Thailand and implemented by the EU-funded project EU CyberNet), the ASEAN-Japan Cybersecurity Capacity Building Centre (AJCCBC), the National Cyber Security Agency of Thailand (NCSA) and the Japan International Cooperation Agency (JICA).     

Photos: https://flic.kr/s/aHBqjCHAqE