NATO Agrees Collaboration On Cyber Security

In cyber space everyone is interconnected and defences are only as strong as the weakest link, says Antonio Missiroli (pictured), assistant secretary general for emerging security challenges at Nato.  

“Nato also recognises the scale and severity of cyber threats, and at our most recent summit, allies stated that cyber threats to the security of the alliance are becoming more frequent, complex, destructive and coercive,” he told attendees of the CyberSec Brussels Leaders’ Foresight 2019 event.

Responding to a call for the development of common principles for a secure cyber space at the event, Missiroli said the concept of “one for all and all for one” as it relates to cyber space is a “fundamentally uncontroversial” idea at Nato.

The alliance, he said, is firmly committed to continuing to adapt to the cyber threat landscape and take actions to improve cyber defence capabilities, build trust and improve cooperation among allies, partners, industry and academia.

One of Nato’s key tools for enhancing cyber defence, said Missiroli is the pledge made by allies at the 2016 summit to strengthen and enhance the cyber defences of their national networks and infrastructures as a matter of priority.

“We are now in the midst of our third cycle of assessment and reporting, and overall, the pledge has been a good news story because since 2016, almost every ally has upgraded their cyber defences,” he said.

According to Missiroli, the political impact of the pledge is also apparent through the fact that cyber security has attracted high-level political attention in allied nations, which has helped to elevate cyber defence from a technical to a strategic issue.

“It has also been useful in bringing together a variety of domestic national stakeholders that were operating separately from one another previously, and it has served as an important platform for allies to share best practices,” he said.

Throughout Nato, Missiroli said allies are working together, pooling their knowledge and experience to help each other.

“This demonstrates the pledge’s ‘multiplier effect’ across the alliance, with the results being far greater than the sum of their parts.”

In 2018, senior officials and cyber defence experts from Nato members met in Paris for the first annual conference on the pledge to discuss key elements of the pledge, with the second annual conference scheduled to take place in the UK later this year.

“These events demonstrate the ongoing commitment to this important tool, which is supported at the highest levels of government,” he said.

More work to be done

However, Missiroli said there is still more work to be done because the threat continues to grow and evolve, adding that the pledge has been a useful mechanism to galvanise and catalyse improvement.

In addition to the work by allies, he said Nato has undertaken “significant” policy and organisational adaptation in response to the recognition of cyber space as a domain of operations at the 2016 summit.

“Milestones include the setting up of the cyber space operations centre in Mons, Belgium, which will provide situational awareness and coordination of Nato activity in cyber space; the approval of a military vision and strategy for the cyber space domain; and the agreement on how to integrate cyber effects, provided voluntarily by allies, into alliance operations and missions,” said Missiroli.

However, he noted that the recognition of cyber space as a domain of operations does not change Nato’s defensive mandate, adding that Nato has explicitly affirmed the applicability of international law to cyber space.

“We support work to maintain international peace and security in cyber space and to promote stability and reduce the risk of conflict. We recognise that we all stand to benefit from a norms-based, predictable and secure cyber space.

“Our goal in recognising cyber space as a domain of operations is simply to ensure that we can operate as effectively as we do on land, at sea and in the air. In short, our goal is to make cyber space a daily and normal part of our business.”

Cyber Defence a Team Sport

Although a cliché, Missiroli said it remains true that cyber defence is a team sport. “Nato cannot and should not go it alone. We are only made better by sharing more information and the more we can pool best practices and interoperate with partners,” he said, adding that Nato currently engages with more than 40 partner countries based on shared values and common approaches.

Nato also helps to foster dialogue and practical cooperation in partner countries through the Science for Peace and Security Programme, taking steps, for example, to intensify cooperation with the European Union, particularly in the areas of information exchange, training, research and exercises.

However, Missiroli said Nato must continue to look beyond Europe in light of the fact that partner nations such as Australia, New Zealand, Japan and South Korea have all invested heavily in cyber defence. “And it will serve us well to continue to build these relationships.”

Nato also recognises the importance of the private sector, he said. “It is the private sector, after all, that develops and operates the vast majority of networks worldwide and our continuous interactions with industry partners helps provide advance notice and rapid mitigation for many activities that have been detected against systems in allied nations and against Nato itself.

“Information sharing goes both ways. Industry shares with us and we also share with industry. In the WannaCry  and NotPetya attacks, for example, we quickly reached out to our industry partners and the information exchange was critical for getting the most up-to-date picture of a rapidly-evolving and complex situation.”

Nato needs to do More

Moving forward, Missiroli said that given the cutting-edge developments in the cyber domain, such as artificial intelligence, Nato will need to do more to capitalise on the power of industry and academia.

“I hope it is clear that Nato has made significant progress in the cyber space domain as individual allies, as Nato and as partners,” he said.

“While affirming Nato’s defensive mandate, we have expressed our determination to employ the full range of capabilities, including cyber, to deter, to defend against and counter the full spectrum of cyber threats, including those conducted as part of a hybrid campaign.

“The threats of cyber space are real, and they are certainly not going away any time soon, so Nato will continue to adapt and evolve to meet these threats, and we do so not alone, but with all our partners,” concluded Missiroli.

Computer Weekly:

You Might Also Read:

NATO Defense Spending Should Privilege Cyber:

 

« China Gives Police New Powers To Spy On Foreign Firms
National Security & Surveillance In The Age Of AI »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Help Net Security

Help Net Security

Help Net Security has been a prime resource for information security news and insight since 1998.

HelseCERT

HelseCERT

HelseCERT is the health and care sector's national information security center for Norway.

TruNarrative

TruNarrative

TruNarrative provides a unified solution for Identity Verification, Fraud Detection, eKYC, Risk Assessment, AML Compliance and Account Monitoring.

Digital Law

Digital Law

Digital Law is the only UK law firm to specialise solely in online, data and cyber law.

Blancco Technology Group

Blancco Technology Group

Blancco Technology Group is a leading global provider of mobile device diagnostics and secure data erasure solutions.

Stage2Data

Stage2Data

Stage2Data is one of Canada’s most trusted cloud solution providers offering hosted Backup and Disaster Recovery Services.

Garner Products

Garner Products

Garner design, manufacture, and sell equipment that delivers complete, permanent, and verifiable data elimination.

Strike Graph

Strike Graph

The Strike Graph GRC platform enables Security Audits & Certifications.

Motorola Solutions

Motorola Solutions

Motorola Solutions build mission-critical services, software, video and analytics, backed by secure, resilient land mobile radio communications.

ECHO Project

ECHO Project

The main objective of ECHO is to strengthen the cyber defence of the European Union, enhancing Europe’s technological sovereignty through effective and efficient multi-sector collaboration.

Pristine InfoSolutions

Pristine InfoSolutions

Pristine InfoSolutions is a global IT services and Information Security Company focused on delivering smart, next-generation business solutions.

Kompleye

Kompleye

Kompleye is a recognized cybersecurity and compliance audit organization that offer a comprehensive solution for different industries.

BAE Systems

BAE Systems

BAE Systems develop, engineer, manufacture, and support products and systems to deliver military capability, protect national security, and keep critical information and infrastructure secure.

NormCyber

NormCyber

NormCyber provide award-winning cyber security and data protection as a service for midsize organisations.

Clarity

Clarity

Clarity is an AI cybersecurity startup that protects against deepfakes and new social engineering and phishing attack vectors accelerated by the rapid adoption of Generative AI.

Career Smarter

Career Smarter

Career Smarter offers accredited online courses in cybersecurity and other sectors, helping learners gain industry-recognised certifications.