Information Security award entry

On 11 April this year, the tour bus of German football team Borussia Dortmund was attacked with roadside bombs in Dortmund, Germany. Three bombs exploded as the bus ferried the team to the Westfalenstadion for the first leg of their quarter-final against Monaco in the UEFA Champions League.

The initial line of inquiry assumed that it was an Islamist terrorist attack, due to letters found at the scene, which claimed the attack was an act of retaliation for Muslims killed in the German military intervention against Islamic State; it threatened further attacks, unless Germany withdrew and the US military base in Ramstein was shut down.


Significant concerns were raised by another major club playing in Europe two days later. The club’s security manager, working alongside his retained security provider responsible for the physical security and travel risk management of the team, wanted to know if the club was a potential target and whether threats to their travelling players and coaching staff had increased.

Due to the heighten state of security across Europe and the initial confusion surrounding the event, the security manager was keen to understand if terrorism was playing a part in the attack against the Dortmund Team or if other factors were responsible.


Working with the club’s retained security team, the Cyjax Threat Intelligence Platform, backed by its incident response analysts, was tasked with producing live intelligence reports targeted at the Dortmund incident and its relevance to the client.

As a first step, Cyjax immediately deployed its resources towards the incident, providing up-to-the-second coverage of information propagation surrounding the event from a wide array of sources; this enabled a holistic view across all the standard internet mediums and allowed the support teams to quickly explore any potential intelligence leads as they were emerging.

Making use of the real-time cross-referencing capabilities of the technology and its vast coverage capacity, the support teams were also able to fuse together both the physical and cyber security aspects of the incident, linking known terrorist channels with organised crime, petty crime, and social and political activism.

“Attribution is a critical part of the intelligence cycle,” states Cyax. “With the knowledge and understanding which we gained from our research through the use of the tools available to us on the Cyjax platform, we were very quickly able to ascertain that the Dortmund bus bombing was not an IS-related terrorist attack, as was being widely reported, but was, in fact, an action perpetrated by an individual operating a financial scam.”


We were then able to advise the retained security teams and, in turn, the client club on their responsive strategy to this particular event, and reported ahead of the news agencies and local authorities. The resulting intelligence and its application to the physical security requirements led to the client continuing with their travel plans safe and unhindered.

The efficient and highly credible use of Cyber Threat Intelligence and human intellect overlaid in this way demonstrated just how the application of technology can really influence incidents outside of the conventional sphere of cybersecurity.

An entry for you to assess

2017 Submission: Heading
This is the main picture that will appear at the top of your entry. At least 1200 pixels wide is recommended.
Maximum upload size: 2.1MB
Please use the internet address of a picture (it should end in .png or .jpg or similar) that will be visible to people outside your organisation until after the awards end.
No more than 10 words please.
No more than 25 words please

Save this tab if you have made any changes

Another organisation

Please provide the internet address of the organisation's logo
For inclusion in our publicity about this entry if nominated
Information will be required about the start and end date of, size of investment in and geographical scope of your initiative where appropriate

About your Entry

The information you provide here will help determine the suitability of your submission and the best shortlist for your entry if nominated

The investment on this initiative from its initial conception to now, excluding elements that would have been required for other reasons anyway, and excluding aspects that do not impact this entry. We may use this when finalising the shortlists to split a popular category into two categories by project size. Also judges take this into account when assessing Impact, and so if you can disclose this information it can only be helpful for both of these processes.
initiative's focus
Which region(s)?
Which nation?
Covering which countries?


Let us know here if you would like some aspects of your entry kept confidential
We may wish to include your entry in publicity about shortlisted entries.
If you would like the candidate's organisation's name to not be mentioned by us then please ensure that it is also not mentioned in your text, images, videos or PDFs included in your entry.

Save this tab if you have made any changes

Your Entry

Here you describe your initiative or strategy; what you did and why you did it, how it was successful and what your fellow professionals could learn from your experience. You can use a mix of text, pictures, video and PDFs etc. to convey your ideas and engage the interest of judges. We recommend that you include a concise overview for judges spending less time reviewing entries, with greater depth also provided for those that wish to know more. You will be able to fine-tune (edit) your materials up until the time that judging starts.

Any background or confidential information that you would like the organisers to take into account when considering this entry for nomination. This will not be published.
Your entry in full.
If you have a video you would like included with your entry description, upload it to YouTube and paste the link here
Maximum upload size: 2.1MB
If you have a PDF you would like included with your entry description, upload it here

About the following

These input blocks for Impact, Innovation and Inspiration are provided in case you would wish to provide additional information for the judges, to help them understand the strength of your submission in terms of each of our three judging criteria.

The difference made in target communities and benefits to the organisation - good anecdotal or metric evidence of real outcomes rather than reams of stats.
If you have a video you would like included with your impact statement, upload it to YouTube and paste the link here
What's distinctive about this entry and how being creative has helped you overcome challenges - a good idea that your fellow professionals might not have thought of.
If you have a video you would like included with your innovation statement, upload it to YouTube and paste the link here
Hints and tips from your real experience to help your fellow professionals (the judges) adopt your good ideas and apply them to suit their circumstances.
If you have a video you would like included with your inspiration statement, upload it to YouTube and paste the link here

Save this tab if you have made any changes