Energy
Safespy team members have led advanced cyber exercises for critical national infrastructure operators. These live, adversarial simulations tested both IT and OT resilience, giving leadership a clear view of how their defences perform under pressure.
The challenge
A critical infrastructure operator needed a realistic, adversarial test to validate resilience across IT and OT systems that were essential to safety and business continuity.
Cyber range exercise
Members of our team created a dedicated virtual environment on a cyber range, mirroring the client's core systems and processes.
-
A red team of ethical hackers attempted to breach defences.
-
The client’s blue team defended in real time, across IT and OT domains.
-
An immediate hotwash debrief captured lessons while fresh.
-
A detailed After Action Report benchmarked performance and set out a clear roadmap for improvement.
Lessons learned
The exercise demonstrated that:
-
IT and OT defences must be tested together, not in isolation.
-
Live adversary simulations uncover detection and communication gaps sometimes overlooked in tabletop exercises.
-
Leadership and technical teams gain confidence by making decisions under real attack conditions.
This engagement showed how live adversarial exercises can transform cyber resilience from assumed readiness into tested assurance.
