Danish Central Bank to Continue Cyber Testing With TIBER-DK Program

The Central Bank of Denmark and the financial sector have together established the TIBER-DK program. Since January 2019, threat-based red team tests have been conducted in close collaboration with the systemically most important banks and the critical parts of the Danish financial infrastructure, including the Central Bank of Denmark. In a TIBER test, ethical hackers simulate cyber attacks from, for example, organized criminal hacker groups to test cyber resilience and the response to cyber attacks. The test provides learning about how the individual organizations and groups can better defend themselves against their attacks. In April, TIBER-DK experiences were shared with senior management representatives from the TIBER-DK participants.

A TIBER-DK test includes a number of teams in addition to TIBER Cyber Team of the Central Bank of Denmark. The White Team consists of the persons in the tested organization who know about the test and coordinate it. The White Team procures threat intelligence, which examines the threat landscape for the organization in question. The White Team also procures a Red Team, which conducts the actual Red Team attack and consists of the "ethical hackers." There are special requirements in the framework for the experience and competencies of these suppliers to ensure that they are skilled enough to be able to imitate advanced cyber groups—without harming the critical systems. The Blue Team consists of the persons in the organization in question who are attacked and defend themselves. They have no advance knowledge of the test and act as if it were a real attack.

Keywords: Europe, Denmark, Banking, TIBER-EU, TIBER DK, Cyber Resilience, Cyber Risk, Operational Resilience, Central Bank of Ireland