A 60-hour exercise launched on October 29 brings private enterprises into the defending teams for the first time. Four tertiary institutions are among the attacking-side participants, but the announcement is not a public sign-up or a promise of jobs or qualifications.
At a glance
- The cybersecurity drill launched on October 29 and is scheduled to run for 60 hours, ending on the evening of October 31.
- There are 51 defending Blue Teams drawn from 28 government departments and 23 public organisations and private enterprises.
- The 23 Red Teams include four tertiary institutions and three teams recommended by the Cyberspace Administration of Guangdong Province.
- The named-team exercise is not an open public recruitment call; existing Education Bureau teaching resources provide a separate route to learning.
A three-day exercise, not a finished result
Hong Kong launched a 60-hour cybersecurity drill on October 29, with completion scheduled for the evening of October 31. The Digital Policy Office is organising it with public-sector, cybersecurity and training partners. At the time of this October 30 source review, the exercise is still within its announced timetable. Its launch can therefore be reported as a current development, but not as a completed assessment or proof that any participating organisation has passed a security test. The official announcement concerns a controlled exercise involving designated systems, not an invitation to test unrelated networks.
Private enterprises join the defending side
According to the government release, private enterprises are taking part in the defending side alongside government departments and public organisations for the first time. The 51 Blue Teams comprise teams from 28 government departments and 23 public organisations and private enterprises combined. That last figure must not be read as 23 private companies alone. Seventeen cybersecurity firms from Hong Kong and the Mainland are providing technical support to the defending teams, while more than 80 organisations are observing. For employers and students, the significance is the wider mix of institutions learning to coordinate a response under simulated pressure.
How students and Guangdong teams fit in
The attacking side consists of 23 Red Teams: 15 professional organisations from Hong Kong and the Mainland, four tertiary institutions, three teams recommended by the Cyberspace Administration of Guangdong Province, and one Digital Policy Office team. This describes selected institutional participation, not unrestricted student entry. In his opening remarks, Secretary for Innovation, Technology and Industry Professor Sun Dong described the exercise as the third consecutive annual drill organised by the Digital Policy Office. The Guangdong participation gives it a regional dimension, but the sources do not establish a general cross-border student recruitment scheme or a qualification awarded to all participants.
The useful skills question for young people
For students interested in cybersecurity, the practical lesson is broader than the contest between Red and Blue Teams. A controlled exercise makes room to consider how people recognise an incident, communicate with colleagues and restore services. As editorial learning guidance, those themes can help students ask course providers about supervised practical work, team roles and the boundaries of authorised testing. They are not a claim about the drill's official syllabus or its results. Any hands-on practice should remain within an explicitly permitted learning environment; participation in a newsworthy exercise does not authorise testing a real employer's or third party's systems.
A separate education route already exists
The Education Bureau's cybersecurity resource page offers an existing starting point for teachers and learners. It lists materials on online pitfalls, risks involving digital assets and emerging information technology, together with resources intended for primary and secondary education. Some linked materials are in Chinese. The page also contains presentation materials from earlier activities; their presence is not evidence that those sessions are accepting registrations now. Schools can review the resources against the age and needs of their learners, rather than assuming that the professional drill's participation arrangements apply to an ordinary classroom or a new applicant.
What remains unconfirmed
The October 29 launch announcement is not an open public recruitment call and does not set out a new general application deadline for students. It also does not promise employment, payment or a professional certification to readers. Anyone seeking a course or future exercise place should check a separately published official notice for eligibility, dates, costs and what completion actually provides. The immediate news is the expanded organisational mix in a defined three-day exercise. Its eventual findings or outcomes require later evidence, and should not be inferred from the launch, the number of teams or an illustration of a successful response.
Sources and image disclosure
Hong Kong government: cybersecurity drill launched on October 29
Innovation, Technology and Industry Bureau: opening remarks on October 29 (Chinese)
Education Bureau: cybersecurity teaching and learning resources
Sources were reviewed on 30 October 2026. Announcement, event and application dates are distinct from this article’s actual publication date. Practical interpretation is editorial analysis, not an official promise. The cover and contextual image are AI-generated editorial illustrations, not documentary photographs.