May 11. After last year’s SDSR, MOD’s contribution to cyber security is progressing apace. Report by Tristan Kelly.
As part of last year’s Strategic Defence and Security Review (SDSR) the Prime Minister announced that our ability to detect and defend against cyber attacks would be crucial to our national security, so important in fact that it was elevated to a ‘Tier 1’ threat alongside issues such as terrorism and international military crises.
Since then, work to embed the culture of operating in cyberspace across the defence community has been taking place in earnest with the Defence Cyber Security Programme being set up to drive the necessary changes.
Now, under the leadership of Major General Jonathan Shaw, Assistant Chief of the Defence Staff (Global Issues), work on the programme is moving ahead quickly and the Cyber Security Policy Team was stood up on 1 April 2011 to develop a unified and integrated response to the threat of cyber attack.
The timeliness of the initiative is not lost on David Ferbrache, the senior civil servant heading the policy team:
“We were seeing a major increase in the threats to our national security through cyberspace,” he said.
He cited cyber crime, cyber espionage, and growing concerns about broader issues like dependency on information systems, terrorist use or cyber attack downstream as the main drivers for increased focus on the area.
Indeed, in a speech last year Armed Forces Minister Nick Harvey observed that the cyber threat is not only a risk area emanating from traditional state organised forces, but also lends itself perfectly to the ‘asymmetric’ methods of warfare favoured by terrorist groups and insurgencies.
The question of particular resonance to Defence is how would these developments in cyberspace shape the nature of future defence operations – both the opportunities and also potential threats of disruption?
However, countering this relatively new threat also entails new resources and £650m was allocated for the national strategy with some £90m of that earmarked for Defence.
This will be used for the mainstreaming of cyber into Defence business, improved cyber education and awareness in the Department, and the development of aspects of cyber capability for Defence purposes:
“What CDS [Chief of the Defence Staff] is driving for is to get cyber into the mainstream of how we do operations and planning for the future,” said Mr Ferbrache. “So in the past you would have had air, land and maritime but what he is trying to get to is a point where commanders actually think about cyberspace as an operating domain in a similar way.
“For example, they may say ‘what might people be doing to us through cyberspace as this military action unfolds and what are the opportunities for us to also influence and in some cases disrupt their systems and capabilities as well?'”
That is seen as quite a fundamental shift as in the past, for example, contingency planning would be focused mostly around one particular joint operational area and those contingency plans would emphasise the use of physical forces – aircraft, ships etc.
Increasingly commanders must now assume people will do things to us through cyberspace as that operation unfolds.
Of course, the MOD does not have sole responsibility for national security. There is a desire to further link up with other agencies such as GCHQ (Government Communications Headquarters) so their capabilities are fed into military operational planning, both in the defence of our own systems and sometimes to be able to influence external systems through cyberspace in future as well:
“The intent is not to grow a large cyber capability inside the MOD, but is to make a defence contribution to the national capability,” Mr Ferbrache explained.
However, the MOD does have a critical part to play and the funding announced in the SDSR will see the creation of a large number of new posts in Defence, drawn from all three Services