GCHQ’s Post

As a former software developer and infrastructure engineer, I truly understand the points Jen Easterly from the Cybersecurity and Infrastructure Security Agency noted in her opening remarks. The more of an automated and digital society we build, the more ways we are vulnerable to a devastating cyber attack. Security and cyber safety MUST be built in foundationally. #cyberattack #cybersecurity

Protecting our nation's security isn't just a job, it's a calling. 🇺🇸 Since 2008, we've served DoD/Federal agencies and supported critical missions. With insider threats, takedowns, and espionage being the most common in this industry, cybersecurity is imperative. https://lnkd.in/eAyU9kAZ

Here’s the limited print run of our Singapore Cyber Landscape (SCL) 2022 publication, which was released online last month. Honoured to be part of its editorial team with my boss and mentor, Willis Lim, and colleagues, Grace Dong, Jia Xi (Jessie) Ang, and Charlene Zeng. SCL 2022 is personally memorable to me for three reasons. First, it marked my transition from Counter Terrorism to Cyber Threat analysis. Second, the SCL presented the challenge of writing for a wider and open audience, unlike counterterrorism and national security assessments which are typically geared towards a closed audience. Finally, beyond editorial finishes, I had the opportunity to pen my thoughts on ransomware developments and tomorrow’s digital security challenges, the latter alongside academics from CENS/RSIS/NTU. SCL 2022 is a bumper edition, totalling 108 pages, which features an expanded segment highlighting how our partner agencies work with #csa to contribute towards #cybersecurity. It emphasises that cybersecurity is not just a technical issue, but rather one that requires a whole-of-society response to protect our Digital Way of Life.

'The paper delineates five main takeaways: The blurring of boundaries between competition, crisis and war in cyberspace requires a continuity of cyber defence. National cyber security should be among a state’s top priorities in policy focus and budget allocations. Cyber security can only be achieved by proactive measures informed by the principles of ‘active defence’ and ‘defence in depth’. National cyber defence depends on effective partnerships between governments and the private sector as well as alliances with like-minded countries. Influence operations are a growing and significant challenge in cyberspace, with most of the states surveyed introducing new measures to enhance societal resilience against such operations.'

There are some essential insights here about how cyber policy and strategy (or their lack) can make or break a country throughout the spectrum of conflict. Competition is real, it's here, and it isn't going anywhere soon regardless of physical location. But to succeed at it requires not only effective cyber strategy and partnerships, but also a holistic, intentional, and whole-of-government approach to information warfare as a whole. Incidentally, as the US embarks on a major election year, attribution of influence operations by bad actors will be as important as ever.

Lots of #cyber related conversations from governments this past week - including U.S. Department of Homeland Security, United States Department of Defense, National Security Agency, and a solid six shield plan from Australia's Clare O'Neil. What does it all mean for the private sector? Let's discuss on this week's Intentional Brief from Intentional Cybersecurity.

📈 My data protection costs are sky high. How do I get this under control? Consolidating #CyberProtection solutions with trusted vendors unlocks cost benefits and efficiency for IT staff. Not relying on overstated PowerPoint promises is a critical first step. Tune in for expert tips on #CyberSecurity on February 21. Mark your calendars and register now: 📆 21 February, 9am EST / 3pm CET / 10pm SGT ➡️ https://lnkd.in/dXQvTWsh #CyberFit

It's clear we're living in special times when it comes to everyone's perception of threats - not least military threats. Can you imagine being forced to leave your day-to-day job behind and join the military to support its operations? And to make matters worse, having your assets seized for military purposes? These could soon become a reality in #Switzerland if the Swiss Military Act is finalized as per the current draft. Take a look at this insightful summary by Christian Kunz and Eric Stupp from Bär & Karrer to learn more about the potential impact of this draft on IT and Cyber experts as well as companies in the Information Security field. https://lnkd.in/eFTkztPn #SwissMilitaryAct #CyberSecurity #MilitaryThreats #ITExperts #StayInformed #ForcedRecruitment

In response to the pair of cyber security incidents involving Chinese spies and the alleged compromise of communications security by an Air Force engineer, the US government must take immediate and decisive action to safeguard crucial American computer networks and national security. By taking these proactive steps, the US government can enhance its cyber resilience and protect its critical infrastructure and national security from potential cyber threats posed by foreign actors. Leveraging the expertise and support of top cybersecurity experts in the US and who are loyal to the US can significantly strengthen the country's cybersecurity capabilities. Collaboration between the government and these experts can create a formidable force to address cyber threats effectively. A short but concise solution should include the following steps: * Cybersecurity Audit: Conduct a comprehensive cybersecurity audit of all critical American IT systems to identify potential vulnerabilities and assess the extent of the cyber threats posed by China. * Malware Detection and Removal: Employ advanced cybersecurity tools and expertise to search for and eliminate any malicious code planted by China in the computer networks controlling vital infrastructure, including water supplies, power grids, and military communications. * Strengthen Network Security: Enhance the security measures of sensitive computer networks to protect against future cyber attacks and potential espionage attempts. * Education and Training: Provide ongoing cybersecurity education and training to personnel handling sensitive equipment and data to prevent insider threats and improve overall cybersecurity awareness. * Collaborative Approach: Foster strong collaboration with cybersecurity experts from the private sector, academia, and international partners to share threat intelligence and best practices. * Incident Response Plan: Develop and implement a robust incident response plan to swiftly respond to any future cyber incidents and minimize potential damage. * Public Awareness: Raise public awareness about the importance of cybersecurity and encourage individuals and organizations to adopt best practices for protecting their networks and data. By taking these proactive steps, the US government can enhance its cyber resilience and protect its critical infrastructure and national security from potential cyber threats posed by foreign actors. We invite Government Agencies to Join us In Advancing Cybersecurity Strategies Together. Written by Linda Restrepo © 2023 #cybersecurity #US Government #Cyber Threats #Cyber Espionage #National Security #Critical Infrastructure #Cyber Defense #Collaboration #Cybersecurity Experts #Public-Private Partnerships #Cyber Incident Response #Information Sharing #Cyber Resilience #Insider Threats #Data Protection

📈 My data protection costs are sky high. How do I get this under control? Consolidating #CyberProtection solutions with trusted vendors unlocks cost benefits and efficiency for IT staff. Not relying on overstated PowerPoint promises is a critical first step. Tune in for expert tips on #CyberSecurity on February 21. Mark your calendars and register now: 📆 21 February, 9am EST / 3pm CET / 10pm SGT ➡️ https://lnkd.in/giz9xi2m #CyberFit