Participants took part in a scenario on nuclear security of small modular reactors during Brazil's Cyber Guardian exercise. (Photo: Brazilian Nuclear Safety and Security Authority)
Brazil put computer security for critical infrastructure to the test during 'Cyber Guardian', a large-scale national exercise supported by the IAEA featuring scenarios involving nuclear power plants, cancer treatment facilities and the maritime transport of floating small modular reactors (SMRs).
Held from 21 to 25 September, the exercise aimed to enhance computer security for critical infrastructure in the nuclear sector and other key sectors, including energy, water, communications and transport. Around 4000 participants from 380 national institutions took part, including nearly 1300 who participated in person in Brasilia and at regional hubs in Belém, Curitiba, Manaus, Recife, Rio de Janeiro and São Paulo.
"The IAEA has been supporting Brazil's Cyber Guardian exercises since the very first edition in 2018, helping strengthen the country's ability to prevent, detect and respond to cyberthreats against nuclear facilities and nuclear and other radioactive material," said Elena Buglova, Director of the IAEA's Division of Nuclear Security. "Raising awareness of cyberthreats and their potential impact on nuclear security, while helping countries improve their ability to respond to them, are key parts of the IAEA's nuclear security programme."
By bringing together public and private sector stakeholders, this annual exercise uses virtual simulations and crisis management practices to foster inter-agency collaboration, improve technical skills for responding to cyber incidents, and make essential national services more resilient to complex cyber threats.
Several IAEA information and computer security training tools, such as simulated environments, were used to create realistic conditions to help participants visualize cyber-attacks targeting information and operation technology networks.
"The participating organizations who represented the nuclear sector assessed their exercise experience very positively. The diversity and novelty of scenarios engaged participants by addressing cyber risks for nuclear power plants, including SMRs and applications of artificial intelligence, for hospitals using radioactive sources and nuclear applications at sea," said Rafael de Oliveira Faria, Computer Security Coordinator at Brazil's National Nuclear Safety and Security Authority. "The IAEA support was essential, as the Agency provides the tools, methodologies and expertise needed to continuously improve the scenarios," he added.
The exercise brought together a range of national stakeholders with nuclear security responsibilities. (Photo: Brazilian Nuclear Safety and Security Authority)
Strengthening Computer Security Expertise
The IAEA supports countries in building robust and sustainable computer security capabilities for nuclear security through guidance, training, expert support and international cooperation to help them prepare for and respond to evolving cyber threats against nuclear facilities and activities.
The IAEA has developed virtual training platforms and simulators that enable practitioners to acquire practical skills and improve their readiness to address real-world cyber threats. These tools support IAEA training activities in information and computer security, including at the IAEA's Nuclear Security and Training Demonstration Centre.
Self-paced courses on the key concepts and principles of information and computer security are also available in the six official UN languages through the IAEA's Learning Management System .
In 2024, Brazil's Nuclear and Energy Research Institute became the first IAEA Collaborating Centre for nuclear security in Latin America , and one of four worldwide specializing in information and computer security. The others are in Austria, Canada and France.
