Cybersecurity Tabletop Exercises expand beyond Ukraine’s capital to the regions
Following a successful pilot in Kyiv, the Cybersecurity Tabletop Exercise (TTX) programme, a series of practical cyber crisis simulation trainings, has expanded to Ukraine’s regions as part of the European Union-supported EU4CyberUA project. The first regional exercise took place in Vinnytsia on 3 July, bringing together 60 cybersecurity professionals from public institutions, local governments and critical infrastructure operators.
The exercise in Vinnytsia is one of ten Tabletop Exercises that will be delivered across Ukraine’s regions over the next three years.
The training was organised by the e-Governance Academy (eGA) in cooperation with the State Service of Special Communications and Information Protection of Ukraine (SSSCIP) in collaboration with CISO Campus. Throughout the exercise, participants practised coordinated responses to large-scale cyberattacks – skills that can prove critical in a real crisis, where rapid decision-making and effective cooperation leave little room for error.
For many participants, the practical nature of the exercise was its greatest value. “The practical aspect of this exercise has been the most valuable for me. My job is to deal with the consequences of cyber incidents, so it is extremely useful to learn more about preventive approaches. Equally important is the opportunity to meet representatives of different organisations and institutions, whose expertise and cooperation can significantly improve the effectiveness of my own work,” said Oleksandr Halai, Chief Programmer at “Metastudiia”, whose team has been developing digital solutions for public authorities and local governments for more than two decades.
Vitalii Kataiev, an information security specialist at Vinnytsia National Technical University, also highlighted the importance of exchanging experience with fellow professionals. “Information security has become more important than ever. Over the past year alone, there have been numerous changes in legislation and regulatory requirements. It is not always clear how secure automated systems should now be designed. I learned a great deal during the training, but the opportunity to exchange experience with colleagues was especially valuable. Even for someone working in this field, it is extremely difficult to keep up with all these changes without continuous professional dialogue,” said Vitalii Kataiev.
The importance of strengthening cooperation at the regional level was also highlighted by Andrii Kavunets, Deputy Head of the Vinnytsia Regional Military Administration for Digital Development, Digital Transformation and Digitalisation (CDTO). “In today’s cyber environment, no organisation can effectively respond to complex threats on its own. Only through information sharing, coordinated action and mutual support can we ensure an appropriate level of cyber resilience for the country. I am grateful to our colleagues from the State Service of Special Communications and Information Protection of Ukraine, its Vinnytsia regional office, and the e-Governance Academy for their partnership,” Andrii Kavunets said.
The growing demand for practical, collaborative learning is also reshaping the way cybersecurity professionals are trained across Ukraine. According to Dmytro Pakholchenko, Director of the Cybersecurity Department at the State Service of Special Communications and Information Protection of Ukraine, the focus is increasingly shifting from theory to hands-on, practice-oriented learning. “Our goal is to make cybersecurity training as effective as possible. Together with our partners, we are developing a modern learning environment and transforming regulatory documents into interactive learning materials, including lectures and video content. All of this will be available through a single platform, enabling cybersecurity professionals to acquire the practical knowledge they need more easily,” said Dmytro Pakholchenko.
When responding to a cyber incident, success often depends on how quickly different organisations can coordinate their actions and work as one team. “Cyber resilience is first and foremost about people being ready to act together. Even the most advanced technologies cannot replace effective cooperation between experts, teams and institutions. That is why we invest in practical exercises that help professionals prepare for real-life challenges before they happen,” said Dmytro Savranchuk, Deputy Project Manager of the Continued EU Support to Cybersecurity (EU4CyberUA) project at the e-Governance Academy.
Over the next three years, Cybersecurity Tabletop Exercises will continue to take place across different regions of Ukraine, helping local teams strengthen cooperation, exchange practical experience and improve their preparedness to respond to large-scale cyber incidents.
The Tabletop Exercises are part of the European Union-funded project EU4CyberUA that supports Ukraine in strengthening its national cyber resilience and aligning with European cybersecurity standards. Implemented by the e-Governance Academy (eGA) and FIAP in partnership with the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), the project runs from 2026 to 2029. With a total budget of €10 million, it supports stronger cybersecurity institutions, improved preparedness for cyber threats, and more secure digital governance.