Organization:Cyber Security Challenge UK

From HandWiki
Cyber Security Challenge UK
Formation25 March 2010 (2010-03-25)
Dissolved14 October 2025 (2025-10-14)
TypeNot-for-profit company limited by guarantee
PurposeCybersecurity education, competitions and skills development
Location
  • United Kingdom
Region served
United Kingdom
Key people
Stephanie Daman, Nigel Harrison
AffiliationsCabinet Office, GCHQ, National Crime Agency, Bank of England
WebsiteArchived official website

Cyber Security Challenge UK was a British not-for-profit organisation that ran cyber security competitions and educational programmes intended to identify and encourage people with aptitude for cyber security careers. The organisation was incorporated as Cyber Security Challenge UK Limited on 25 March 2010 and was dissolved on 14 October 2025.[1]

The Challenge was supported by government, industry and academic organisations, and formed part of wider UK efforts to address cyber security skills shortages. In 2015, the UK government described it as a programme of virtual and face-to-face competitions designed to identify talented people for the cyber security industry.[2]

The organisation closed at the end of March 2025 after approximately fifteen years of activity.[3]

History

Cyber Security Challenge UK was established in 2010 to help address a shortage of cyber security professionals in the United Kingdom.[1] Its early work focused on competitions for people outside the established cyber security profession, with the aim of identifying aptitude that might otherwise be missed by conventional recruitment routes.[4]

The first Cyber Security Challenge UK final was held in 2011. Dan Summers, a postman from Wakefield, was named the first UK Cyber Security Champion after a final in Bristol.[4] In 2012, Cambridge computer science student Jonathan Millican won the competition.[5] In 2013, Stephen Miller, a chemist from Hertfordshire, was named UK Cyber Security Champion after progressing through online and face-to-face rounds.[6]

By the mid-2010s, the Challenge had expanded into a year-round programme of online competitions, face-to-face events (known as F2F), school programmes and a flagship Masterclass final. Government and press sources described the organisation as part of wider efforts to address cyber security skills shortages in the United Kingdom.[2][7]

Competitions

Cyber Security Challenge UK ran online and face-to-face competitions designed to test practical cyber security skills. Its flagship competition was the Cyber Security Challenge UK Masterclass, in which finalists were placed in simulated cyber incidents and assessed by representatives from industry and government.[2]

2011 final

The first Cyber Security Challenge UK final was held in Bristol in March 2011. Dan Summers, a postman from Wakefield, was named the first UK Cyber Security Champion.[4]

2012 final

In 2012, Jonathan Millican, a computer science student at the University of Cambridge, won the UK Cyber Security Challenge.[5]

2013 final

In 2013, Stephen Miller, a chemist from Hertfordshire, was named UK Cyber Security Champion.[6] Miller had progressed through online and face-to-face competitions before winning the final.[6]

2014 Masterclass

From this year onwards, the final round of the competition was called a "Masterclass" with competitors drawn from the top 42 ranking players in the previous rounds.

The 2014 Masterclass was supported by organisations including BT Group, Juniper, GCHQ, the National Crime Agency, Lockheed Martin and the Bank of England.[7] The competition used a scenario involving a simulated cyber attack on the UK financial system.[8]

The 2014 Masterclass was won by Will Shackleton, a University of Cambridge student, who beat more than 3,000 entrants and the 41 other finalists.[8]

2015 HMS Belfast Masterclass

In March 2015, the Masterclass final was held aboard HMS Belfast in London. The event involved a two-day cyber-war simulation designed by a group of cyber security experts led by BT.[9] The fictional scenario required contestants to regain control of the ship's gun systems after they had been taken over by a cyber-terrorist group and pointed at City Hall.[9]

The exercise was designed to test incident response, network defense and teamwork in a realistic operational setting.[9] The competition was won by Adam Tonks, a computer science student.[10]

2015 Church House Masterclass

In November 2015, a second Masterclass final following another competition that year was held Church House, Westminster, near Westminster Abbey and the Houses of Parliament. The exercise used a fictional bioterrorism scenario. The scenario focused on a chemical company, ZSB Formulas, which had been breached by a terrorist group called Black Oleander. Contestants discovered a plan to release an airborne virus through an air-conditioning system during an international summit attended by members of the Royal Family, senior government officials and foreign dignitaries.[11][12]

Press reports emphasised the realism of the Church House exercise, including actors in biohazard suits and scouting robots entering the conference hall while the 42 contestants worked to prevent the simulated attack.[13][11]

The Church House event was also reported as a talent-identification exercise with recruiters and assessors from organisations including GCHQ, QinetiQ, BT group, Bank of England and the National Crime Agency tracking participants' progress during the simulation.[13][12]

The event also took place during public debate over the Draft Investigatory Powers Bill, which had been introduced by Home Secretary Theresa May earlier in November 2015. The draft bill proposed to consolidate and expand the legal framework for interception, communications data, equipment interference and bulk powers, including requirements for internet service providers to retain internet connection records for 12 months.[14] Contestants had to consider whether actions such as intercepting communications or accessing compromised systems would require legal authorisation, connecting the fictional exercise to contemporary debates about surveillance powers and cyber operations.[12][13]

2016 Masterclass

The 2016 Masterclass was held in Shoreditch, east London.[15] The scenario required competitors to defend a fictional energy company from live cyber attacks, repair a data breach and investigate the loss of £125 million.[16][17]

The challenge was created by PwC and supported by GCHQ, the National Crime Agency and the Bank of England.[15][17] It was won by Ben Jackson, an 18-year-old A-level student, the youngest overall winner in the Challenge's history.[15]

2017 Masterclass

The 2017 Masterclass was held at Trinity House in London and used a scenario based on a cyber attack against a fictional shipping company.[18] Contestants investigated a breach, defended against live attacks and built a courtroom case against a fictional corrupt chief operating officer.[18]

Mo Rahman, a 22-year-old computer science student, was named Champion.[18]

2018 Masterclass

The 2018 Masterclass final used a cryptocurrency-themed scenario known as "Cryptofactor".[19] The competition was supported by Barclays and involved finalists competing over three days.[19]

Charlie Hosier, a 19-year-old student at Edinburgh Napier University, was named the 2018 Cyber Security Challenge UK Champion.[20][19]

Schools and education

Cyber Security Challenge UK developed programmes for schools and younger learners as part of its wider skills mission. The programmes included teaching packs, touch-screen games, infographics and paper-based exercises to raise awareness of cyber security careers and develop practical skills.[21]

In 2017, SANS Institute, BT group, FutureLearn and Cyber Security Challenge UK were confirmed as delivery partners for the "Cyber Schools Programme", an extracurricular scheme for 14- to 18-year-olds intended to develop skills relevant to work in the cyber security sector.[22] The government said students would be selected through a pre-entry assessment and given pathways into the industry through contact with industry experts.[22] The programme formed part of the wider National Cyber Security Programme and the 2016–2021 National Cyber Security Strategy, which included measures such as CyberFirst bursaries, CyberFirst Girls, cyber apprenticeships and retraining schemes.[22] [23]

European activity

Cyber Security Challenge UK was involved in the United Kingdom's participation in the European Cybersecurity Challenge.[24] In 2017, ten UK participants represented Britain at the European Cyber Security Challenge in Málaga. The team was led by members of Cyber Security Challenge UK and coached by BAE Systems.[25]

The UK hosted the European Cyber Security Challenge in 2018. The event involved teams of under-25s from 18 countries in a Capture the flag (cybersecurity) style competition.[26]

Closure and legacy

Cyber Security Challenge UK closed at the end of March 2025 after around fifteen years[3][27], formally dissolving in October 2025.[1]

Following the closure, charity The Cyber Trust stated that much of the Challenge's content, including CybergamesUK, CyberLand and teaching and lesson plans, had been donated to them and would remain available through The Cyber Trust and CybergamesUK.[27]

See also

References

  1. 1.0 1.1 1.2 "Cyber Security Challenge UK Limited". https://find-and-update.company-information.service.gov.uk/company/07202469. 
  2. 2.0 2.1 2.2 "New pathways for the UK's future cyber security experts". Cabinet Office. 9 March 2015. https://www.gov.uk/government/news/new-pathways-for-the-uks-future-cyber-security-experts. 
  3. 3.0 3.1 "Cyber Security Challenge Announces Plans for Closure". SC Magazine UK. 7 February 2025. https://insight.scmagazineuk.com/cyber-security-challenge-announces-closure. 
  4. 4.0 4.1 4.2 Brewster, Tom (7 March 2011). "Postman crowned first UK Cyber Security Champion". IT Pro. https://www.itpro.com/631663/postman-crowned-first-uk-cyber-security-champion. 
  5. 5.0 5.1 "Jonathan Millican wins UK Cyber Security Challenge". BBC News. 12 March 2012. https://www.bbc.com/news/technology-17333601. 
  6. 6.0 6.1 6.2 "Cyber winner". Professional Security Magazine. 11 March 2013. https://professionalsecurity.co.uk/news/interviews/cyber-winner/. 
  7. 7.0 7.1 Francis Maude (14 March 2014). "Francis Maude speech at Cyber Security Challenge Masterclass". https://www.gov.uk/government/speeches/francis-maude-speech-at-cyber-security-challenge-masterclass. 
  8. 8.0 8.1 Leyden, John (17 March 2014). "Soon-to-be Facebook intern wins UK Cyber Security Challenge". The Register. https://www.theregister.com/2014/03/17/cyber_security_challenge_final_winner_cambridge_student/. 
  9. 9.0 9.1 9.2 "A cyber war is being staged in central London". Wired UK. 13 March 2015. https://www.wired.com/story/cyber-war-game-hms-belfast. 
  10. "Adam Tonks crowned as Cyber Security Challenge winner". IT Security Guru. 16 March 2015. https://www.itsecurityguru.org/2015/03/16/adam-tonks-crowned-as-cyber-security-challenge-winner/. 
  11. 11.0 11.1 Cooper, Daniel (3 December 2015). "Watching amateur coders foil a 'bioterrorist plot'". Engadget. https://www.engadget.com/2015-12-03-cyber-security-challenge-uk-masterclass-final.html. 
  12. 12.0 12.1 12.2 Turk, Victoria (20 November 2015). "Why the UK Is Simulating a Cyber Terrorist Attack in London". Motherboard (Vice). https://www.vice.com/en/article/why-the-uk-is-simulating-a-cyber-terrorist-attack-on-london/. 
  13. 13.0 13.1 13.2 McGoogan, Cara (26 November 2015). "We watched a simulated bio-chemical attack on London". Wired UK. https://www.wired.com/story/cyber-security-challenge-2015-gchq/. 
  14. "Investigatory Powers Bill: what's in it, and what does it mean?". Wired UK. 4 November 2015. https://www.wired.com/story/surveillance-bill-government-internet-history. 
  15. 15.0 15.1 15.2 "Cyber Security Challenge UK crowns youngest ever champion". SC Media. 7 November 2016. https://www.scworld.com/news/cyber-security-challenge-uk-crowns-youngest-ever-champion. 
  16. Davies, Rob (5 November 2016). "New generation of ethical hackers aims to impress recruiters". The Guardian. https://www.theguardian.com/technology/2016/nov/05/new-generation-of-ethical-hackers-aims-to-impress-recruiters. 
  17. 17.0 17.1 Palmer, Danny (3 November 2016). "Cyber Security Challenge UK Tasks Hackers With Energy Defence". Silicon UK. https://www.silicon.co.uk/security/cyberwar/cyber-security-challenge-energy-defence-200045. 
  18. 18.0 18.1 18.2 "Cyber enthusiasts compete to thwart attack on fictional shipping company". SME Magazine. 16 November 2017. https://www.smeweb.com/cyber-enthusiasts-compete-thwart-attack-fictional-shipping-company/. 
  19. 19.0 19.1 19.2 "Top young British cyber talent crowned champion of the 'Cryptofactor' in national competition" (Press release). Barclays. 27 November 2018. Retrieved 9 May 2026.
  20. "Student Named 2018 Cyber Security Challenge Champion". Infosecurity Magazine. 27 November 2018. https://www.infosecurity-magazine.com/news/student-2018-challenge-champion/. 
  21. "Cyber Security: A Guide to Programmes and Resources for Schools and Further Education". HM Government. 2015. https://dera.ioe.ac.uk/id/eprint/22255/2/bis-15-77-Guide-to-cyber-security-schools-programmes-and-resources_Redacted.pdf. 
  22. 22.0 22.1 22.2 "Students urged to apply for pioneering Cyber Schools Programme". Department for Digital, Culture, Media & Sport. 23 July 2017. https://www.gov.uk/government/news/students-urged-to-apply-for-pioneering-cyber-schools-programme. 
  23. "New online challenge will test teenagers' cyber security skills". Department for Digital, Culture, Media & Sport. 14 November 2017. https://www.gov.uk/government/news/new-online-challenge-will-test-teenagers-cyber-security-skills. 
  24. "UK Cyber Team". https://ukcyberteam.com/. 
  25. "UK's young cyber talent head for 2017 European Cyber Security Challenge". 31 October 2017. https://www.adsgroup.org.uk/knowledge/industry-member-news/uk-s-young-cyber-talent-head-for-2017-european-cyber-security-challenge/. 
  26. "Initial National Cyber Security Skills Strategy: increasing the UK's cyber security capability". Department for Digital, Culture, Media & Sport. 3 May 2019. https://www.gov.uk/government/publications/cyber-security-skills-strategy/initial-national-cyber-security-skills-strategy-increasing-the-uks-cyber-security-capability-a-call-for-views. 
  27. 27.0 27.1 "CybergamesUK, CyberLand and CSCUK Ltd". 10 February 2025. https://www.thecybertrust.org/cybergamesuk-cyberland-and-cscuk-ltd/.