From protest to cyber crisis: that's how realistic an OZON exercise can be

And a crisis it was: the realistic scenario severely tested the cooperation, communication and decision-making of some 2,000 education and research staff. Between 25 and 28 March, each sector practised with an adapted scenario for its specific sector practice.

Scenario: a derailing student protest

The exercise began with a student protest by the fictitious action group Unity Uprising Movement (in Dutch: Eenheid Opstand Beweging, or EOB), aimed at developments that were recognisable per sector - ranging from the abolition of the maths test in mbo, to cuts in education in hbo and wo.

At the same time, rumours were circulating about a suspicious plug-in required to sign an EOB petition. Those who installed the plug-in unknowingly became part of a DDoS attack. The Revolution Reckoners - a hacker group affiliated with EOB - targeted institutions' systems. Several institutions reported (possible) data breaches containing sensitive personal data or research data.

Media in the mix

As if that was not enough, the media also picked up on the crisis. The Algemeen Vandaagblad published a media simulator article that also mentioned SURF. Institutions received calls from students, concerned parents and journalists. The journalists were acted out in lifelike fashion by Media Editing students from ROC Twente and Journalism students from Windesheim.

Switching at lightning speed

The combination of physical threats, digital attacks, media attention and the internal unrest this causes within institutions meant that institutions had to switch gears at lightning speed: who takes the lead? How do you communicate with staff, parents and the press? And what if the threat comes from within? For many participants, an OZON exercise feels like a real crisis - and that is exactly what it is meant to be.

Why it is necessary

OZON's scenarios show that a crisis extends beyond the walls of your institution; cooperation with industry associations and SURF is essential to act quickly and effectively. By participating in OZON, you can test and improve your educational or research institution's crisis approach, procedures and decision-making.

Strong together

Compared to previous editions, the OZON 2025 exercise was broader in scope. Instead of two practice days, there were four this year. Each sector - mbo, hbo, wo and umc/research - had its own practice day, and the week ended on Friday with a tabletop variant of the multi-sectoral administrative coordination meeting.

This set-up gives our members a chance to learn from colleagues within their own sector. At the same time, it underlines why cooperation and collectivity is so important: together we are stronger. "Resilience requires cooperation," says Ron Augustus, SURF's Executive Board chairman. "This exercise gives a good interpretation of that."

Relevant lessons

In the coming period, we will evaluate the results of OZON 2025, with the aim of sharing key lessons and insights. The insights are also relevant if you did not participate this year, but would like to learn from what others have experienced. Keep an eye on our website, newsletter and LinkedIn for the follow-up.