UK Police Helping Business Fight Cyber Attacks

The UK Metropolitan Police Service (MPS) has unveiled an innovative new exercise that teaches business leaders how to protect their companies from cyber-attacks. 

The cyber prevent team are booked to carry out another 18 events to more than 100 people during March and April, which include a bank, and a multiple business event where ten exercises will be running simultaneously.

A number of the events are being ran in partnership with the City of London Police’s Cyber Crime Unit who have adopted the initiative and are also delivering it as part of their cyber-crime awareness offering, ensuring businesses across the capital are protected.

The exercise, which consists of two game boards with Lego pieces that represent a company with separate premises, is designed to explore the decisions that people make, in order to protect their businesses and organisations from modern day threats, such as hacking and malware attacks. 

All the scenarios in the game are based upon real-life situations and current threats.

Current National Cyber Security Centre (NCSC) and Met Police cyber security guidance is provided in the post-exercise debrief. The initiative builds on existing support for companies given by the NCSC, who have published a Small Business Guide listing top tips to shield from potential online attacks.

Background
The resource, entitled 'Decisions and Disruptions', funded by the Engineering and Physical Sciences Research Council (EPSRC), was first developed by a group of academics, currently based at the University of Bristol, in partnership with the National Cyber Security Centre.
Officers in the Met's Fraud and Linked Crime Online (Falcon) unit have adapted it to be included in their regular cyber awareness presentations given to businesses and organisations.
Since it was first demonstrated in June 2017, 13 exercises have been run with external companies, 33 have been run internally with a further eight delivered to other police forces.

Current Events
A number of the events are also being run in partnership with the City of London Police’s Cyber Crime Unit who are also delivering it as part of their cyber-crime awareness offering.

Detective Chief Superintendent Mick Gallagher, head of the Organised Crime Command, said: "We've had excellent feedback from everyone who has been shown this exercise and it is an excellent tool to promote awareness of the growing range of cyber security threats. Due to the physical representation of the game board, it makes cyber security easier to understand and the scoring system introduces a competitive and fun element, which is proven to aid learning.

"The scale and complexity of cybercrime and fraud online is constantly evolving and our officers are proactively targeting the criminals responsible. However, it is also an important part of our work to educate members of the public how to protect themselves online and reduce their chances of being a victim of crime."

Professor Awais Rashid, Professor of Cyber Security in the Department of Computer Science at the University of Bristol, added: “Decisions and Disruptions is a table top game that we developed where players can experiment with cyber security risks, learn about decision-making and its consequences, and reflect on their own perception of cyber security. 

“The research we have conducted so far using the game, including the collaborative work with the London Metropolitan Police, has uncovered a number of key insights about how different demographics in organisations, managers, IT personnel and security experts, approach security decision-making, the good practices and the pitfalls to be avoided.”

"The game requires no prior cyber security expertise from players and the details of how to build a game board are freely available on the website. Anyone interested can build their own board and learn about cyber security in a fun way with friends, family and co-workers."

Bristol University:

You Might Also Read: 

Cybercrime Costs Londoners £26m Every Month:

UK Police Introduce Cyber Security Certification:


 

 

« The Resurgent Cyber Threat From Iran
Petty Criminals Have Use Of Sophisticated Hacking Tools »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Arista Networks

Arista Networks

Arista Networks is an industry leader in data-driven, client to cloud networking for large data center, campus and routing environments.

TestFort

TestFort

TestFort QA Lab is a specialized software testing company offering independent quality assurance and software testing services.

LogicManager

LogicManager

LogicManager offer a complete set of IT governance, risk and compliance software solutions and advisory services.

Cyber Security Agency of Singapore (CSA)

Cyber Security Agency of Singapore (CSA)

The CSA is the national agency overseeing cybersecurity strategy, operation, education, outreach, and ecosystem development.

Wallarm

Wallarm

Wallarm is the only unified, best-in-class API Security and WAAP (Web App and API Protection) platform to protect your entire API and web application portfolio.

BeDefended

BeDefended

BeDefended is an Italian company operating in IT Security and specialized in Cloud and Application Security with years of experience in penetration testing, consulting, training, and research.

APT Search

APT Search

APT Search is a recruitment company specialising within the Legal Technology, Cybersecurity and Privacy sectors.

ISA Global Cybersecurity Alliance (ISAGCA)

ISA Global Cybersecurity Alliance (ISAGCA)

Objectives of the ISA Global Cybersecurity Alliance include the acceleration and expansion of standards, certification, education programs, advocacy efforts, and thought leadership.

Sixteenth Air Force (Air Forces Cyber)

Sixteenth Air Force (Air Forces Cyber)

Air Forces Cyber provides mission integration of Information Warfare at operational and tactical levels, creating dilemmas for adversaries in competition and, if necessary, future conflicts.

GoVanguard

GoVanguard

GoVanguard is an boutique information security team delivering robust, business-focused information security solutions.

Elisity

Elisity

Elisity Cognitive Trust is a new security paradigm that combines Zero Trust Network Access and an AI-enabled Software Defined Perimeter.

Prancer

Prancer

Prancer is the industry's first cloud-native, self-service SAAS platform for automated security validation and penetration testing in the cloud.

Federal Bureau of Investigation (FBI)

Federal Bureau of Investigation (FBI)

The mission of the FBI is to protect and defend against intelligence threats, uphold and enforce criminal laws, and provide criminal justice services.

Leo CybSec

Leo CybSec

Leo CybSec unites a group of Cyber Security experts with 20+ years of collective expertise to help our clients realise and mitigate the cyber challenges and risks facing their business.

Velotix

Velotix

Velotix empowers organizations to maximize the value of their data while ensuring security and compliance in a rapidly evolving regulatory landscape.

Xcede

Xcede

Xcede are global technology recruitment specialists. We connect companies with exceptional professionals who empower growth.