What are you looking for?

Most searched:

Most searched:

Improved accessibility mode

SURF strives for a website that is accessible to everyone. We are working on a full accessibility mode.

OZON and NOZON

Practice how to respond in the event of a cyber crisis

OZON is the sector-wide cyber crisis exercise for education and research that takes place every two years. During OZON, you practice how to respond in the event of a cyber crisis and find out whether, as an institution, you are already well prepared for a cyber crisis.The next edition of OZON will take place in 2027.
View the NOZON manual
Watch video
Een vrouw houdteen tablet vast met daarop de tekst 'Warning cyber attack'

Advantages

Practising a cyber crisis with your institution and the industry

You will practice not only how your institution responds during a crisis, but also how the cooperation between other institutions, the sector organisations and SURF works.

Practice with current and relevant threats

You practice with a scenario at the managerial and/or tactical and/or operational level based on current threats to our sector.

In addition to sector-wide exercise, also tabletop exercise by institution: NOZON

At NOZON, each institution organises its own short table-top exercise at IT or strategic level in the same fortnight.

Have a question about OZON or NOZON? Get in touch.

Charlie van Genuchten

Charlie van Genuchten

+31 6 10 10 43 26
charlie.vangenuchten@surf.nl

What are OZON and NOZON?

Organisations often pay attention to fire safety, first aid and other emergency preparedness. As we become increasingly dependent on digital systems, it is important to be well prepared for a cyber crisis. That's why every two years you can participate in the sector-wide cyber crisis exercise for our member institutions called OZON. And in the year that OZON does not take place, you can participate in NOZON, a tabletop cyber crisis exercise.

OZON 2027

During the biannual sector-wide cyber crisis exercise OZON, you practice the various aspects of a cyber attack. Consider infections in the institution network, (social) media coverage, contact with the hacker, questions from students and staff and messages from service providers. IT staff, administrators, communications staff and other participants within your institution should respond to these to repair or mitigate the damage. This allows you to practise and check how prepared you are as an institution for a cyber crisis.

Register now

Registration for OZON 2027 is now open. Register your institution via My SURF. When registering, you must also specify who your institution’s exercise coordinator and observer are. Any questions? Please email ozon@surf.nl.

NOZON

To support institutions in this tabletop exercise at IT or strategic level, SURF, in collaboration with MBO Digitaal and Kennisnet, is organising training courses on setting up, observing and evaluating cyber crisis exercises and offering central exercise material. After the exercise weeks, we hold a return day to exchange experiences and lessons learned. The next edition of NOZON will take place in 2028. Using the NOZON manual, you can also organise your own tabletop exercises.

Overview of exercise materials and meetings

An overview of the exercise materials and documents can be found on the NOZON wiki. If you do not have access to the wiki, please contact Charlie van Genuchten.

To the NOZON wiki

Costs

Apart from the hours you put into preparation, implementation and evaluation, participation costs nothing.

Report
Rapportage OZON 2023
Download Dutch, pdf (184 kB)
Whitepaper cyber crisis exercise ozone: a gap bridging exercise
Whitepaper cyber crisis exercise ozone: a gap bridging exercise
Download English, pdf (2 MB)

More about OZON and NOZON

  • OZON 2025: what have we learned?

    News

    It is clear that practice pays off: with every exercise, organisations improve their crisis escalation processes. More than 90 organisations took part in this year’s sector-wide crisis exercise, OZON…

    News

  • Team building for cyber crises

    Magazine

    You cannot escape it: sooner or later you will be attacked by hackers. What can you do as an institution, and as an administrator, to prepare for such an emergency?

    Magazine