On-premises
Within your organisation.
Infrastructure is installed at the client’s premises and configured around the agreed systems, requirements and objectives.
Physical Cyber Arena Dedicated capability
CyberUP solutions
YOUR INFRASTRUCTURE.YOUR ARENA.
A dedicated on-premises cyber range, built around emulation of the IT and OT / ICS systems defined in the project. People, procedures and technology train together in an environment segregated from the client’s production network.
- Environment
- Emulation of the client’s systems
- Installation
- Dedicated infrastructure at your premises
- Autonomy
- Internal capability development and Train-the-Trainer
Dedicated by design
A CAPABILITY YOU OWN.
BUILT AROUND YOUR REALITY.
Physical Cyber Arena brings exercising into your organisation: dedicated infrastructure, scenarios grounded in your operating environment and growing autonomy to test people, systems and procedures.
IT + OT / ICS
A converged environment.
Enterprise IT, networks, OT / ICS systems and industrial components can be emulated within the same exercise environment.
Segregation
Separate from production.
The exercise environment is isolated from the client’s production network. This separation concerns production, not every network connection.
Ownership
The capability stays with you.
A dedicated solution supports ongoing use, internal capability development and Train-the-Trainer programmes.
Controlled connectivity. Remote access, support and updates require connections managed according to the project. Separation from production does not mean immunity from external threats.
The five-layer model
YOUR SYSTEMS.
UNDER CONTROLLED ATTACK.
The exercise environment connects infrastructure, integration and control with content and programmes. These five layers describe the solution architecture, not the phases of incident response.
From content to programmeLayer 4 develops content and scenarios. Layer 5 turns them into Training Programmes / Training Solutions.
Physical Cyber Arena architecture
05Training Programmes / Training SolutionsProgrammes built on layer 4 content.
Content and scenarios developed at layer 4 become training and exercise programmes, organised by objectives and participants. This layer defines how that content develops organisational capabilities.
04Threat & Scenario EngineeringTailored, updatable content and scenarios.
Content and scenarios are designed around the client's systems, dependencies and priorities. They provide the foundation for the programmes at layer 5.
03Exercise ControlOrchestration, observation and debrief.
Exercise coordination and observation of actions. The White Team maintains control throughout, gathering evidence for the debrief.
02IT / OT IntegrationEmulation of client systems and processes.
Integration of IT and OT / ICS environments and the dependencies defined in the project. The scope of emulation is agreed with the organisation.
01Dedicated InfrastructureDedicated infrastructure at the client's premises.
The Arena's infrastructure, installed at the client's premises and segregated from its production network, with controlled connectivity for agreed access and services.
Environment and components
Where the response takes shape.
Operational areas support simulation, preparation and exercise control. They are components of the environment, distinct from the five-layer architecture.
- Blue Team IT / OT
- Workstations for testing the response across the systems and processes represented.
- Red Team
- An environment for conducting the planned adversarial actions within simulated or emulated infrastructure.
- White Team
- Coordination and observation throughout the exercise.
- Training Room
- A space for concepts and preparatory activities ahead of simulations.
- Data Centre
- Servers and systems supporting simulation and emulation of the Arena network.
Sizing: indicative references
Overall environment: 300–500 m². The actual configuration depends on the systems to emulate and the layout of the facilities.
- Blue Team IT
- approximately 35 m²
- Blue Team OT
- approximately 35 m²
- Red Team
- approximately 8 m²
- White Team
- approximately 20 m²
- Training Room
- approximately 60 m²
- Data Centre
- approximately 12 m²
Indicative design references. The areas listed are neither the total floor area nor a final implementation specification.
Operational autonomy
OWN THE CAPABILITY.
BUILD THE READINESS.
More than a one-off exercise: a capability that can support ongoing readiness, with specialist guidance and growing internal autonomy.
- Customer-owned
- Infrastructure dedicated to the organisation and available at its premises for the agreed programmes.
- Train-the-Trainer
- Knowledge transfer to build autonomy in running exercises and programmes. The level of enablement is defined within the project.
- Repeatable exercises
- The same capability can support new scenarios, teams and priorities while keeping actions and decisions observable.
- Specialist support
- Design, integration, commissioning, technical support and scenario updates support continued use.
Test before production
TEST CHANGES HERE FIRST.
VALIDATE THEM HERE FIRST.
The emulated environment lets you test configurations, procedures and implementations before introducing them into the client’s operations.
Software
New implementations.
Observe software behaviour and compatibility in the emulated environment.
Hardware
Components and integrations.
Test configurations within the Arena’s defined scope.
Procedures
Playbooks under pressure.
Test roles, escalation and coordination between functions.
Recovery
Containment and recovery.
Exercise the decisions and actions needed to contain an incident and restore services.
Findings apply to the environment and test conditions. They do not replace the checks and authorisations required for deployment into production.
Ongoing exercising
THE CAPABILITY EVOLVES.
RESPONSE TAKES PRACTICE.
New scenarios, technologies and priorities can be incorporated into programmes. Infrastructure design remains distinct from the exercise lifecycle.
Every exercise follows the same CyberUP reference lifecycle:
Design
Define the exerciseObjectives, scope, participants and observation criteria.
Attack
Activate the scenarioThe Red Team introduces the events defined for the exercise.
Respond
Put the response into practiceThe Blue Team tests its analysis, actions and coordination.
Control
Observe and coordinateThe White Team manages the exercise and gathers evidence.
Improve
Turn experience into improvementDebrief, observed gaps and actions for subsequent exercises.
Control throughout the exercise. The White Team oversees every phase; its work does not begin at the fourth step. Duration, intensity and events depend on the scenario.
When to choose it
WHERE CONTINUITY
DEPENDS ON PREPARATION.
For critical infrastructure, institutions, defence and large organisations that need a dedicated environment at their own premises.
- Dedicated infrastructure and a defined scope of emulation.
- Ongoing programmes for systems, people and procedures.
- Objectives for internal autonomy and capability development.
The next step
Bring your infrastructure into the Arena.
Define the systems, dependencies, readiness objectives and level of autonomy you need.
Email us directly or fill in the form below: we’ll get back to you.
Write to us
Email us directly or fill in the form below: we’ll get back to you.
Email us: info@cyberupinstitute.com
Your current interest: Physical Cyber Arena