RSA - New Zealand's lessons learned in Cyber Storm II

Sponsored by the US DHS, Cyber Storm II gathered together about 2,500 people from NZ, Australia, Canada, the UK and the US to play out several cyber attack scenarios

Earlier this month, New Zealand completed its second Cyber Storm. Sponsored by the US Department of Homeland Security Cyber Storm II gathered together about 2,500 people from New Zealand, Australia, Canada, the United Kingdom and the US to play out several cyber attack scenarios in which critical parts of the infrastructure were disabled by computer threats. Although the results of Cyber Storm II are not expected to be made public until August, some of the participants shared their thoughts on the experience at the RSA Conference in San Francisco this week.

Paul McKitrick, manager of New Zealand's Centre for Critical Infrastructure Protection sat down with IDG News at the conference to talk about Cyber Storm II. Following is an edited transcript of the interview.

What was the extent of New Zealand's participation in Cyber Storm II?

Paul McKitrick: We had about 30 organizations from the private sector in New Zealand. We had 10 government departments participate. And we had four sectors that we focused our scenarios around: they were banking, energy -- and it was more around the power distribution companies -- government, and IT and telco.

How did that compare with last time?

McKitrick: Last time it was six private sector organizations and six government departments. Last time it was pretty much a table top exercise. Cyber Storm II was real time over three days: 72 hours live play.

How prepared is New Zealand for a cyber attack?

McKitrick: I think we're prepared, but we can always improve. This identified opportunities where we can streamline our approach to things. Even in the planning process, organizations got so much from the fact that an organization would talk to one of its teams, saying, "Right this is the scenario we're looking at, how would this affect you?" And they would say, "Oh we're not too sure, actually. We might do X, Y, or Z," And they'd say, "What standard operating procedure would you use?" and they'd hear "Well we actually don't have one."

So there were things that they were doing before the exercise internally that helped realign their processes.

What did you learn from this?

McKitrick: The benefit of exercising. In my mind it's going to be one of the key ways we meet our mandate in New Zealand. It gives people a way to shine in some respects. Your guys that are on the front lines quite often they don't get tested. They're bogged down with the day-to-day, business-as-usual things. This is a chance to really push them and give them a chance to step up.

You can plan and plan and plan, but unless you are testing these plans, you don't know if they're going to work.

New Zealand is smaller than the other countries that participated in Cyber Storm. Did that make the exercise different from your perspective?

McKitrick: We can do things differently. Having those official back-channels into an organization, we can do that very effectively and that works. In a big country like America it's very hard to do that. Here in the US people move around a lot more, so they may not last as long [at their current jobs]. Whereas in New Zealand, things are probably a bit more stationary. Or when people do move, they've gone from one critical infrastructure organization to another, so they're still in the game.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Bitdefender 2019

This Holiday Season, protect yourself and your loved ones with the best. Buy now for Holiday Savings!

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?