Exercises on the cyber range: How the Polish military builds state resilience

Cyber security is becoming one of the key elements of national security, the economy and critical infrastructure. It is no longer just about reacting to incidents, but about systematically building competencies, resilience and the ability to operate in cyberspace. Poland’s Expert Center for Cybersecurity Training (ECSC), a military unit directly subordinate to the Minister of National Defense, has been at the forefront of this effort since its creation in November 2020.

The center’s mission is to build the expert capital of the armed forces – preparing specialists capable of operating in an environment where digital threats are increasingly complex and closely tied to state security. As Col. Michał Majewski, deputy director of ECSC, explained, training is not conducted in the form of academic lectures but as technical laboratory sessions using specific technologies and tools employed by the defense ministry.

Practical training on the cyber range

ECSC operates 18 fully equipped computer laboratories and a cyber range – a virtual platform that allows fragments of cyberspace to be replicated. This environment can simulate networks consisting of numerous systems, servers, networking devices and various operating systems. Trainees practice defending these simulated networks against realistic attacks, gaining hands-on experience that is directly transferable to real-world operations.

– The foundation of cyber security is not only knowledge and vigilance, but also the ability to act through appropriate structures, tools and procedures – said Col. Michał Majewski. – It is these elements that determine the effectiveness of the state and its institutions in cyberspace.

Engaging critical infrastructure operators

One of ECSC’s flagship projects is CyberExpert Game, a cybersecurity workshop held in a competitive format. The exercise is primarily aimed at entities outside the military, including operators of critical infrastructure. Participants come from sectors such as fuel, energy, telecommunications, banking and finance. Teams defend a designated segment of cyberspace against attacks conducted by a so-called red team. The winner is the team that keeps the largest number of services running for the longest time.

These exercises are not just about testing technical skills – they also help build trust and cooperation between the military and civilian operators of vital national assets. The practical scenarios mirror real threats and allow participants to validate their incident response plans under pressure.

Building a talent pipeline

ECSC also runs programs aimed at young talents, including Akademia_CYBER.MIL for students of technical universities. This initiative seeks to identify and nurture future cyber specialists, offering them access to cutting-edge training and mentorship. Additionally, the center organizes the CyberExpert conference, which brings together military, academic and industry professionals to share knowledge and best practices.

– Our goal is to create a continuous pipeline of experts who can think ahead of adversaries – added Majewski. The center’s comprehensive approach – from hands-on lab training to large-scale exercises with critical infrastructure operators and academic outreach – is designed to build a resilient cyber ecosystem for the entire country.

Źródło: WNP.PL, Fot. WNP.PL

Categories:

Tags: