The ICL Financial Cup accepts teams of two to four cyber defenders from FS-ISAC member institutions.
During round one of the tournament, teams will be required to complete four one-hour cyber labs in a virtual network.
The top teams, based on time and accuracy, will be promoted to the finals, where they will collaborate as a team in the final three-hour live-fire challenge simulating a complete cyber-attack in a virtual security operations center (SOC).
Before the tournament begins, participants will receive login details to a cloud-based cyber range.
Communication between team members, support, and moderation will take place over Zoom.
You will receive a Zoom link to the opening ceremony and credentials for the Cyberbit platform. You will also receive a connectivity test link so you can check your connectivity before the opening ceremony and let us know if there are connection issues. In addition, you will receive instructions on how to book your timeslot for round one of the ICL.
The ICL opening ceremony and orientation session will take place on 19 October 2023. We will introduce our trainers, demo the Cyberbit platform, and open the floor up to a Q&A session.
Round one of ICL will take place between 26 October - 3 November 2023. We will send you a calendar invite accordingly.
During round one you will have access to the labs for two days, which you have scheduled in advance. During this time, you will be expected to complete your round-one lab. Your team has a total of four labs to complete and you only need one hour to complete each one. Once begun, the lab runs on one computer. You may complete your lab as an individual, or you can solve it together with your teammates by teaming up in the same room or by sharing your screen using your preferred screen share application. If your team runs the same lab several times, the first time will count for your team score. You will be scored based on performance and quiz responses. Your total team score for round one will be the average score of the four labs.
If you are one of the top teams to make it to the finals round, you will receive an invitation where you will be asked to book your time slot. In the finals, you will run a three-hour live-fire team exercise.
In the finals round, your team will participate in one live-fire team exercise for three hours. Exercises will run between 7 - 14 November 2023 and you will have the opportunity to schedule your exercise at a convenient time during this week. This is a team exercise. Your team will face off against a simulated cyber-attack scenario, immersed in an emulated SOC. You will use commercial security tools to respond to the simulated attack. Teams will be scored based on their investigation goals, eradication goals, and response time.