ICD Brief 106.
22.10.2018.-28.10.2018.
The sun may be setting on cyber’s wild west. During my recent two weeks in Europe and on my return, I see progress to nascent signs of order, accountability and stability. It’s been the brightest part of a terrible week of news.
USA
The US Needs a Cybersecurity Civilian Corps
by: Natasha Cohen and Peter W. Singer
“Like the auxiliaries that arose during WWII, a new volunteer organization will help face today’s threats.”
Investigative Report Offers Insights on Internal Controls in the Context of Cybersecurity
“Last week, the Securities and Exchange Commission published an investigative report. The report discusses the Commission’s investigation of nine public companies that were subject to cyber breaches. The breaches involved email compromises that directed the companies to send money to third parties.”
“Facebook has uncovered a covert Iranian disinformation campaign which attempted to sow political discord in the U.S. over such hot-button issues as race, immigration, police brutality and President Trump ahead of the November midterm elections.”
“Equifax Inc., Experian Inc., and TransUnion will have to comply with New York’s financial sector cybersecurity rules as of Nov. 1, after the state moved to police the credit reporting companies’ data security woes.”
“The Department of Homeland Security is looking to refine its system of cybersecurity sensors to adapt to the needs of more complex cloud platforms, Nextgov reported Wednesday.”
“The Homeland Security Department is directing additional Election Day cybersecurity resources, in some cases, to states with tight electoral races, the Homeland Security Department’s top cybersecurity official Chris Krebs said Tuesday.”
“The Department of Homeland Security should push federal agencies to implement stronger encryption practices for government websites visited by federal workers and everyday citizens alike, Sen. Ron Wyden says.”
Australia
“For decades, the government didn’t even acknowledge the existence of the organisation that eventually became the Australian Signals Directorate. But while much of its work remains classified, the ASD’s profile is higher than it ever has been before because of the growing importance of information security and the ASD’s custodianship of the Australian Cyber Security Centre (ACSC).”
China
“The Regulation on the Internet Security Supervision and Inspection by Public Security Organs (the “Regulation”;《公安机关互联网安全监督检查规定》
EU
“Cyber experts and European policy makers have gathered in the Europol headquarters in The Hague to share their experiences and knowledge on the Internet of Things (IoT) at the Europol-ENISA IoT Security Conference.”
“This cutting-edge article on Cybersecurity was exclusively written for The Sting by the European Commissioner for Digital Economy and Society, Ms Mariya Gabriel.”
“Anjos Nijk of the European Network of Cyber Security explains the importance of having more energy sector cybersecurity professionals.”
India
“Despite the growth in data breaches, security managers at Indian firms are incredibly confident in their cybersecurity preparedness, according to a new survey conducted by research and consultancy firm Ovum for Silicon Valley analytics firm FICO. Eighty-eight percent of executives from Indian firms said their firm was better prepared than their competitors in their industry.”
Iran
“On Friday, Facebook shut down another network of 82 accounts, pages, and groups that have been posing as US and UK citizens since 2016. The network, which Facebook says originated in Iran, has spread memes, articles, and other posts about political topics including race relations, the upcoming midterm election in the US, and the recent confirmation hearings for Supreme Court Justice Brett Kavanaugh. It also hosted seven events.”
Japan
“The cryptocurrency scene is evolving too quickly for policymakers to keep up. That’s the rationale behind a move by Japan—already arguably the most advanced nation in the world when it comes to cryptocurrency regulation—to officially let industry create and enforce its own rules. If the approach works, expect other nations to try it too.”
NATO
“Indra has signed an industrial collaboration agreement with the Nato Communications and Information Agency (NCIA) to join its cyber defence coalition.”
UK
“Royal Navy, US Navy, and tech industry leaders ready to commit to ‘a framework for dialogue and cooperation’ at inaugural meeting of the Atlantic Future Forum.”