One Step Ahead of Threats: VDP Program Launched for MIA Agencies

On Monday, July 21, cyber training under the Vulnerability Disclosure Program (VDP) started for 50 specialists from institutions, agencies and enterprises under the jurisdiction of the Ministry of Internal Affairs of Ukraine.

The event was organized by the National Coordination Center for Cybersecurity at the National Security and Defense Council of Ukraine with the support of the U.S. Civilian Research and Development Foundation in Ukraine (CRDF Global).

The program was opened by Natalia Tkachuk, Head of the Information and Cybersecurity Service of the NSDC Secretariat, Secretary of the NCCC, and Leonid Tymchenko, Deputy Minister of Internal Affairs. In his opening remarks, Mr. Tymchenko emphasized the importance of strengthening the cyber defense capabilities of the Ministry of Internal Affairs, given the scale and complexity of modern cyber threats. Natalia Tkachuk emphasized:

"Successful detection and elimination of vulnerabilities before they are exploited by attackers is not only about cyber defense, but also about trust in state institutions. We have to be one step ahead."

VDP is a training program aimed at improving the skills of professionals who ensure the digital security of critical infrastructure. It is a continuation of the Bug Bounty initiative and has been adapted to the needs of the Ukrainian public sector. The training covers vulnerability management, incident response, technical security testing, infrastructure protection, use of threat intelligence platforms, OSINT methods, etc.

The program lasts for two months and is divided into two parts - theoretical and practical. The first part includes 7 training modules, homework, workshops, and CTF competitions (Capture the Flag) that simulate real-life cyberattack scenarios. The second part deepens the skills through workshops on web and Active Directory infrastructure attacks, the final CTF competition, and final certification.

Since the program's launch in 2021, 489 specialists from 305 organizations from the critical infrastructure sectors: energy, transportation, healthcare, finance, defense, telecommunications, etc. have participated in the VDP.

The VDP is not just a course, but a systematic program for developing human capital in the field of cybersecurity, which allows not only to identify weaknesses in digital infrastructure but also to systematically improve its security. The participation of MIA specialists in the VDP is another step towards building a sustainable digital state.