Our Orange Cyberdefense team reached a significant milestone with our first-ever participation in the renowned NATO exercise "Locked Shields." Since its launch in 2010, this world's largest live-fire cyber defense exercise has been organized by the “Cooperative Cyber Defense Center of Excellence” (CCDCOE). This impressive exercise brings together over 4,000 experts from 41 nations to hone their skills in dealing with cyber threats.
The particular strength of the exercise lies in its holistic approach: It combines technical expertise with strategic, legal, and communications expertise to develop a comprehensive defense strategy. Participants are not only able to contribute their individual skills but also leverage their collective strengths to create an environment where teamwork and international cooperation are key to addressing complex cyber threats. Locked Shields impressively underscores how essential this collaboration is for security in the digital space.
Jörn Tillmanns, CyberSOC Tech Lead and Senior Security Analyst, reports: "Detection & Response was our tool for detecting and responding to attacks in real time. We used the combination of the complete SOC triad, Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) to quickly identify and isolate suspicious activity and take proactive countermeasures. The real-time analysis and automated processes made it possible to effectively combat threats without wasting valuable time."
"The invitation from the "Bundeswehr Cyber Security Center" was a special honor for us and gave us the opportunity to participate in this international collaboration. We not only gained valuable insights but also a deeper understanding of the immense importance of joint efforts in the field of cybersecurity. This experience has shown us once again that the key to defending against hackers lies in cooperation and knowledge transfer between nations and organizations," adds Markus Neumaier, Head of CyberSOC Central EU.
Michael Kovalenko, CyberSOC Tech Lead and Consultant: "The complexity of the attacks was enormous - they were designed to simulate real threats. It was particularly difficult to act with technical precision and make strategic decisions at the same time as the systems to be defended were attacked in real time. The intensive collaboration with experts from different countries helped us to find solutions that could be tailored to protect a wide variety of systems from further attacks."
The Locked Shields exercise is gaining increasing importance in the international context, serving as a platform for nations to cooperate in defending against increasingly complex cyber threats. It not only promotes knowledge transfer and exchange processes, but also the development of proven strategies to strengthen global cybersecurity. With its ability to simulate real-world scenarios, Locked Shields is becoming a central element of international cooperation in the digital space.
To find out more about the state of the cyber threat around the world and how Orange Cyberdefense teams can address it, check out our Security Navigator 2025 report!