NSA Secures 5G Through Partnerships

NSA’s Cybersecurity mission includes working to secure future technologies. As imminently emerging technology, 5G will change the way both military and National Security Systems operate, and NSA is partnering across industry and government, along with standards bodies, to support the construction of a secure network.
5G, or fifth generation network, promises to be a major upgrade from previous generations. New 5G technologies will support many new and exciting use cases. The increase in speed will enable a new generation of innovation and business to flourish.
NSA has partnered with fellow government agencies to support the security of 5G. The Enduring Security Framework (ESF) team has been working with partners at the Department of Homeland Security, the Office of the Director of National Intelligence, the National Security Council, and more. They are partnering with industry to deep dive into threats, standards, cloud, and analytics. Each of these areas will have a dedicated public-private partnership effort to examine the risks associated with their subject matter and pursue technical solutions. The cumulative goal is to jointly improve the ability of the 5G infrastructure to identify and build threat models, detect threats in networks, recover from attacks, and securely leverage the benefits of virtualization.
To secure the full scope of 5G use cases, it is critical that strong cybersecurity practices are incorporated. The recently launched Center for Cybersecurity Standards (CCSS) looks at 5G from a viewpoint of securing NSS and contributing to working groups within standards bodies to secure 5G mobile infrastructure. Through engagements with 3GPP, ATIS, IETF and IEEE, CCSS is raising the bar for security in the 5G ecosystem and making sure secure options exist for use on NSS. As subject matter experts, NSA leverages our legacy in secure cryptography and network security to ensure 5G standards will protect NSS data by working with the carriers to ensure that they are requiring optional security settings.
The impact of 5G technologies will be felt well beyond NSS to include numerous IoT devices transforming our personal and professional lives. These devices are smarter and will use 5G to provide new edge computing capabilities, greatly impacting many parts of our society, including manufacturing (through its impact on robotics and Smart Warehouses), transportation (such as smart cars and the smart infrastructure they rely on), and healthcare (through impacts on tele-health and even remote surgery).
The full evolution to 5G will take time – time to develop the supporting standards, produce the technology, and upgrade the infrastructure across the U.S. and around the world to support the full extent of this technology. Since customers will be using 5G, strengthening U.S. infrastructure is vital to maintaining a military and economic edge.

Report on Recovery Plan for the Communications and Information Technology Sector After Hurricanes Irma and Maria

After the devastating 2017 hurricane season, the U.S. Homeland Security Operational Analysis Center supported the congressionally mandated economic and disaster recovery plan, Transformation and Innovation in the Wake of Devastation: An Economic and Disaster Recovery Plan for Puerto Rico. This report contributes to the overall plan with a focus on the communications and information technology (IT) sector.
Laying the Foundation for the Digital Transformation of Puerto Rico
Researchers provide an introduction to the sector (brief history, key assets, prestorm conditions and challenges, and governance); assess damage and needs of the sector; and present 33 courses of action (COAs) for the recovery, rebuilding, and enhancement of the sector with an emphasis on developing and sustaining a resilient, state-of-the-art communications network and furthering the vision for the digital transformation of Puerto Rico.
Developed in consultation with a wide variety of stakeholders, including governmental entities, commercial providers, citizens, and municipalities, the COAs address many different (and sometimes competing) needs and also support and benefit COAs in other critical sectors, such as health and social services. The relationships among the communications and IT COAs are outlined. The estimated cost for these COAs is $3.2 billion. Potential sources of funding are also included in the report.
Key Findings
Puerto Rico must develop and implement a state-of-the art, survivable, resilient communications infrastructure
This infrastructure is essential for continuity of essential government functions and the provision of public safety services and must be well maintained and fully resourced.
It must provide commercial telecommunication services, including voice and data services, to residents and the private sector and support affordable access to broadband internet service and emerging technologies throughout Puerto Rico.
It is crucial for furthering the economic and social vitality of Puerto Rico and should thus host applications and web services that foster government and private-sector innovation, increase economic opportunity, and improve the quality of life for the residents of Puerto Rico.
Recommendation
This report details 33 specific COAs addressing the needs for recovery of the Communications/IT sector in ways that are sustainable and resilient; describes how they build on and support one another; and explains how COAs will further the economic development of Puerto Rico and the wellbeing of its residents.
Download full report at https://www.rand.org/pubs/research_reports/RR2599.html

OSCE and UN partners train practitioners from Central Asia on effective investigations of cybercrimes and terrorist use of Internet

A three-day online training course for over 70 practitioners from the five Central Asian states on the effective investigation of crimes committed in cyberspace and with the use of digital technologies recently concluded. The event was organized by the OSCE Secretariat’s Transnational Threats Department jointly with the UN Office of Counter-Terrorism - UN Centre for Counter-Terrorism (UNCCT- UNOCT), and the UN Regional Centre for Preventive Diplomacy in Central Asia (UNRCCA) with the support of the OSCE field operations in Central Asia.
The practitioners from Kazakhstan, Kyrgyzstan, Tajikistan, Turkmenistan and Uzbekistan work in investigating crimes committed in cyberspace and with the use of digital technologies, as well as requesting, processing and handling digital evidence, in their respective countries.
“Terrorist and violent extremist actors have learned how to harness new technologies to great effect and we have witnessed the expansion of their activities in cyberspace,” said Oguljeren Niyazberdiyeva, Chief of the Office of the Under-Secretary-General for Counter-Terrorism. “The ongoing COVID-19 environment has exacerbated vulnerabilities and conditions conducive to terrorism as the whole world increasingly lives their lives in the virtual space generating ever increasing opportunities for terrorism-related cyber-crimes.”
Ambassador Alena Kupchyna, OSCE Co-ordinator to address Transnational Threats, said: “Issues related to improving the effectiveness of the investigation of cybercrimes and cyber-enabled terrorist offences are of increasing relevance in many countries. This emphasizes the need to develop the capacity of national criminal justice systems to investigate these types of crimes while ensuring respect for the rule of law and respect for human rights and fundamental freedoms.”
Philipp Saprykin, Deputy Head of UNRCCA said: “Together with our partners, UNRCCA continues to provide capacity-building assistance to Central Asian countries in priority areas identified through our regular consultations with Member States.”
The training was conducted by representatives and experts of the OSCE, the UNCCT-UNOCT, UNRCCA, the Counter-Terrorism Committee Executive Directorate (CTED) and the UN Office on Drugs and Crime. They familiarized participants with best international practices and case studies in cybercrime investigations, as well as countering the use of the Internet for terrorist purposes, based on respect for human rights and fundamental freedoms.

ENISA Threat Landscape 2020 highlights top cyber threats for January 2019-April 2020

The European Union Agency for Cybersecurity (ENISA), with the support of the European Commission, EU Member States and the CTI Stakeholders Group, has published the 8th annual ENISA Threat Landscape (ETL) report, identifying and evaluating the top cyber threats for the period January 2019-April 2020.
This publication is divided into 22 different reports, available in pdf form and ebook form. The combined report lists the major change from the 2018 threat landscape as the COVID-19-led transformation of the digital environment. During the pandemic, cyber criminals have been seen advancing their capabilities, adapting quickly and targeting relevant victim groups more effectively Infographic - Threat Landscape Mapping during COVID-19.
The ETL report is part strategic and part technical, with information relevant to both technical and non-technical readers. The following table describes the type of audience and content for each ETL report. You can navigate through the entire collection by using the links available in each report in the section "Related". For a better understanding on how the ETL is structured, we recommend the initial reading of "The Year in Review" report. Previous, ENISA Threat Landscape reports are available on the webpage - ETL though the years and Tematic Landscapes.
The full report is available at ENISA >>

Manila rolls out its La Niña Implementation Plan

The Manila Disaster Risk Reduction and Management Office (MDRRMO) rolled out the first phase of the city's La Niña Implementation Plan to ensure proper coordination and the safety of the general public.
In a statement, the MDRRMO said, its objectives include the conduct of risk assessment and analysis in all affected areas, determine vulnerabilities and provide continuous advisories and warnings to constituents on passable routes, evacuation centers, danger and safe zones as well as other pertinent information.
Under its implementation, MDRRMO will lead and organize teams to conduct emergency preparedness response and management operations. This includes support and close coordination with the department's Emergency Operations Center (EOC).
In line with this, MDRRMO will also conduct inspections for early warning systems to provide redundancy and avoid false alarms. This will pave way to the evaluation of the city's capabilities, inventory of its assets and available vehicles for response operations.
As a preventive measure, the Barangays together with the Department of Public Services (DPS) Department of Engineering and Public Works (DEPW) and other agencies shall continue to conduct declogging operations and sewage maintenance activities to help control and minimize flooding in communities and main roads.
Earlier this year, the Manila City government purchased about 80 polyvinyl chloride (PVC) rescue boats which can effectively aid rescue operations and can be strategically deployed in low-lying areas.
According to the Metropolitan Manila Development Association (MMDA) Flood Control Division, there are 31 major creeks across the six districts, wherein 11 are in the first and second district; 9 in the third and fourth districts; and 11 in the fifth and sixth districts.
MDRRMO shall also be responsible in providing situational reports to the Office of the Civil Defense, Department of the Interior and Local Government and the Metro Manila Disaster Risk Reduction & Management Council.
Meanwhile, the Manila Barangay Bureau shall provide manpower augmentation and maintain the peace and order within communities.
To assist in search and rescue operations and to lead fire emergency situations during La Niña, MDRRMO coordinated with the Bureau of Fire Protection.
Furthermore, DEPW shall assist in restoration of power lines to avoid accidents and cases of electrocution. The department shall also be in charge of construction of additional evacuation centers if deemed necessary.
Moreover, DPS shall deploy its personnel to conduct clean-up operations and maintenance activities in evacuation and rescue centers.
To ensure safe, secure and accessible evacuation sites, the Manila Department of Social Welfare (MDSW) shall provide temporary shelters for the evacuees. MDSW shall also be in charge of relief distribution and camp management.
The Manila Health Department (MHD) shall play a vital role in the provision of medical treatment and control procedures to ensure safety especially if the situation occurs during the pandemic outbreak.
Overall, MDRRMO shall coordinate, monitor and establish guidelines and measures to effectively prevent drastic effects, publish early forecasts to allow the local government to provide multi-sectoral support and mitigate environmental and economic risks.

New Report: Cities at risk – Building a resilient future for the world’s urban centres

A new report has been published by Lloyds, focusing on cities trends.
Cities are now the most important entities in society. More than half the world’s population now lives in urban areas and this is projected to reach two-thirds by 2050, and they are the engines of the global economy.
Yet cities all over the world are facing multiple challenges, such as climate change, cyber risks and pandemics, and are looking to strengthen their resilience.
This new Lloyd’s report, commissioned before COVID-19 and published in collaboration with Urban Foresight and Newcastle University, provides a comprehensive analysis of the risks’ cities are facing and will face in the future. It looks at their impacts and how urban areas can protect themselves from these threats.
It also suggests ways in which insurers and the relevant authorities could work together to build resilience, reduce risks and develop new insurance products and services that meet cities’ risk needs. This study helps city administrators and risk managers, as well as Lloyd’s market insurers and brokers, understand the risks that will influence the design and function of cities in the coming decade, and how insurance product development could respond to these changes.

New Report: Saint Lucia's national infrastructure assessment

Infrastructure forms the backbone of Saint Lucia’s society, delivering services that provide for the daily needs of its citizens while supporting a strong tourism-based economy that brings hundreds of thousands of visitors to the island each year. However, the island faces economic vulnerabilities due to its small size and reliance on imports, while its geography leaves it exposed to natural hazards such as flooding and landslides that threaten lives and livelihoods. As a result of climate change, the intensity of tropical storms and hurricanes affecting the island is likely to increase. Human-caused disasters, as exemplified by the current COVID-19 pandemic, can have also have devastating impacts on development and economic outcomes.
At the same time, Saint Lucia possesses a wealth of resources that can be harnessed to support sustainable growth and increase the country’s resilience to extreme weather events. The island’s natural beauty, favourable renewable energy conditions, and agricultural potential provide it with opportunities to develop a sustainable and self-sufficient economy. Recognising this, decisionmakers in government and the private sector have a responsibility to deepen the understanding of these challenges and opportunities, and to best position infrastructure as a driver of sustainable development. For example, by modelling future energy and water needs, policy-makers can take appropriate long-term actions to counter fossil fuel dependency and minimise water shortages. Utilising a range of available spatial data on natural hazards can help prioritise risk-reduction initiatives across physical and natural assets and inform the building of new development projects. An understanding of the interactions and impacts between infrastructure sectors can help identify efficient and cost-effective actions to achieve strategic national targets and objectives.
This report establishes the first milestone in a partnership between the Government of Saint Lucia (GoSL), the United Nations Office for Project Services (UNOPS), and the University of Oxford-led Infrastructure Transitions Research Consortium (ITRC). The purpose of the report is to establish a vision for the island’s future infrastructure aligned with the Sustainable Development Goals and the Paris Agreement on climate change. Long-term demand for infrastructure services in Saint Lucia is projected to increase as it pursues economic ambitions to grow its tourism and agriculture sectors.

New Dates for Critical Infrastructure Protection & Resilience North America

Critical Infrastructure Protection and Resilience North America (CIPRNA) has announced its rescheduled dates of 19th-21st October 2021 in New Orleans, USA, with the support of Infragard Louisiana.

Postponed due to the Covid-19 pandemic CIPRNA will reconvene in New Orleans in October 2021 to continue the important discussions for governments, agencies, operator/owners and stakeholders for collaboration in securing and protecting America's critical infrastructure, and are currently inviting abstracts for consideration for presentation in the programme.

CIPRNA is the premier conference discussion for securing North America's critical infrastructure.

Presidential Policy Directive 21 (PPD-21): Critical Infrastructure Security and Resilience advances a national policy to strengthen and maintain secure, functioning, and resilient critical infrastructure.
The Nation’s critical infrastructure provides the essential services that underpin American society. Proactive and coordinated efforts are necessary to strengthen and maintain secure, functioning, and resilient critical infrastructure – including assets, networks, and systems – that are vital to public confidence and the Nation’s safety, prosperity, and well-being.
Critical infrastructure must be secure and able to withstand and rapidly recover from all hazards. Achieving this will require integration with the national preparedness system across prevention, protection, mitigation, response, and recovery.

Further details at www.ciprna-expo.com

The Call to Work Towards Better Governance

Disaster risk governance is entering a critical period. Not only has it been suddenly and overwhelmingly put to the test by the COVID-19 pandemic, but this is also the cutoff year for Target E of the Sendai Framework for Disaster Risk Reduction (2015-2030), the first target to complete its action plan, which calls for a “substantial increase in the number of national and local strategies for disaster risk reduction by 2020.”
It could not be otherwise, therefore, that the focus this year on October 13, the International Day for Disaster Risk Reduction (IDDRR), will be on good governance as a pathway to effective risk reduction. “COVID-19 and the climate emergency are telling us that we need clear vision, plans and competent, empowered institutions acting on scientific evidence for the public good,” says Mami Mizutori, the United Nations Secretary-General’s Special Representative for Disaster Risk Reduction.
The robustness of the COVID-19 pandemic in all sectors has also sent a loud and clear message concerning governance: the risk is systemic, and some risks are increasingly acting in cohort with others to create a cascading impact on the entire system. Beyond the evident undermining of health systems, it is estimated that the GDP for Latin America and the Caribbean could fall by 9.1% in 2020, according to the United Nations report ‘The Impact of COVID-19 on Latin America and the Caribbean’. Moreover, the document foresees a rise of 5.4% in unemployment, 7% in poverty and 4.5% in extreme poverty as well as an increase of 4 million people experiencing a situation of acute food insecurity.
“It is fundamental that each country develop a strategy for analyzing and systematizing the response to COVID-19. Many countries surely need to update key risk governance aspects to foster a clear analysis of the systemic risk confronted by each country, but above all to enable a response to any sort of threat regardless of its source, duration or impact,” declares Ciro Ugarte, Director for Health Emergencies at the Regional Office of the Pan American Health Organization.
Governance leads the way
Extensive evidence indicates that good disaster risk governance springs from the collaboration and alliances among mechanisms and institutions to reduce disaster risk and pave the way toward sustainable development.
As an example, Uruguay’s response to the COVID-19 pandemic resonated throughout the entire region. Through the formation of a comprehensive body that brought together decision makers, scientists and academics, it became possible to apply strategies and plans that shaped the management of the health crisis - only 1500 infections - and reduced the risk of the socio-economic threats that have shaken so many other countries. “The pandemic led to the establishment of various agreements and the beginning of a more holistic focus on risk. It also enhanced and deepened a culture of risk management and awareness,” asserts Sergio Rico, Director of Uruguay’s National Emergency System.
Science and technology have become key allies of good risk governance. The gathering of data and information allows for the construction of threat projections and risk scenarios intended to reduce the impact of disasters, especially in populations afflicted by poverty, exclusion, and inequality.
The Coordinating Center for Disaster Prevention in Central America and the Dominican Republic (CEPREDENAC) has taken advantage of the benefits of technology to strengthen disaster risk management in the region. Through the Information and Coordination Platform for the COVID-19 Emergency, a resource available through the web portal of the Central American Integration System (SICA), these countries consolidated information to complement national efforts, enhancing strategic focuses in the region.
“The digital platform focused on taking steps to characterize the three dimensions of disaster risk (exposure, vulnerability and resilience) in an effort to prevent the creation of new risks, reduce existing risks, increase resilience and create mechanisms that allow us to understand the pandemic’s impact on a regional level,” explains Claudia Herrera, CEPREDENAC Executive Secretary.
Herrera adds that comprehensive efforts are essential to the promotion of good governance to “move the region forward through a combination of work, ideas and experiences across governments and the private sector.”
The private sector in particular has been among the systems with the greatest need to rely on resilience during the pandemic. “The crisis affected demand and supply, increased cost of doing business, reduced working capital and human resource and caused a disruption in logistics and high cost of transportation,” stresses Lizra Fabien, Executive Director of the Dominica Association of Industry & Commerce (DAIC) and former President of the Network of Caribbean Chambers of Commerce (CARICHAM).
In this sense, the Private Sector Alliance for Disaster Resilient Societies (ARISE) has become the preferred platform for a robust private sector that can work hand-in-hand with the public sector in creating good governance. “This process of recuperation will also develop regional collaboration and implement the good practices we learn from one another to ensure that we come out of this crisis as a stronger region,” Fabien adds.
Working toward good governance
In this way, the COVID-19 pandemic and Target E of the Sendai Framework are together creating a favorable environment to improve governance in the region. As Ugarte says: “In times of crisis, it is necessary to continue to strengthen good governance in disaster risk reduction strategies at national, regional and world levels.”
“The most significant driver of disaster risk is weak governance. It is necessary to have clear objectives, plans, directives, and coordination across all sectors. All of us are responsible for reducing disaster risk, which is key to the success of the Sustainable Development Goals. We must build good governance to guarantee a prosperous and safe future,” emphasizes Raúl Salazar, Chief of the Americas/Caribbean Regional Office of the United Nations Office for Disaster Risk Reduction (UNDRR).
Governance must take a broad and deep view of risks and their impact, taking into account their social construction. In its most basic and fundamental justification, it is on a par with life itself, concludes Mami Mizutori: “Good disaster risk governance can be measured by lives saved, fewer people affected and reduced economic losses.”

Nepal’s ‘bottom-up’ approach to disaster risk governance

Since the tragedy of the 2015 earthquakes, Nepal has undergone a political and structural transformation in how it approaches disaster risk governance. This has resulted in the decentralization of authority to the lowest levels of government in an effort to build resilience from the ground up.
Disaster risk reduction (DRR) is most effective when the people who are most impacted by disasters have a say in setting policy priorities. Not only does this help ensure buy-in at the local level, but strategies and plans become informed by the realities on the ground.
In the case of Nepal, the devastating earthquakes of 2015, coupled with the country’s transition to a federal system of government under a new constitution, created the conditions for a disaster risk governance system that is responsive to local needs.
The constitution devolved power and resources to local governments and mandated the mainstreaming of disaster risk reduction and climate change adaptation across the three tiers of governments in Nepal: local, provincial, and federal.
At the 2019 Global Platform for Disaster Risk Reduction, the Government of Nepal announced that the disaster management funds are being allocated to all the 753 local governments in the country.
Two examples of a “bottom-up” approach to disaster risk governance at the local level can be found in the municipality of Palungtar in the Gorkha district and Indrawati in the Sindhupalchowk district. In both municipalities, local governments took the lead in developing their own multi-hazard disaster risk reduction plans. With the support of UN agencies, Nepal’s local leaders, who are democratically elected, have also made disaster prevention a focus of their time in office.
“Palungtar municipality is currently leading the development and implementation of DRR mechanisms while strengthening ward offices as frontline institutions. UNDP has supported us in creating an enabling environment through a DRR strategic action plan. I, as the Mayor of this municipality, will exercise my administrative and political authority in reducing disaster risk, benefiting our people,” said Mr. Deepak Babu Kandel, Mayor of Palungtar municipality.
At the provincial level, the government of the Sudurpashchim Pradesh province recently developed and endorsed its own DRR Policy and Strategic Action Plan following an inclusive consultative process.
Led by the Provincial Disaster Risk Reduction and Management Executive Committee, and aided by the UN and international NGOs, the consultations stretched for over a year and included district governments, provincial ministries, humanitarian partners, and stakeholders. Efforts were also made to bring the consultations to various locations to ensure the participation of a wide range of stakeholders from across the province.
The new plan is currently in being implemented and the provincial government just completed a resource mobilization analysis to fund the plan from various sectors.
The progress at the municipality and provincial levels was made possible by overarching guidance and support from the federal level. Specifically, this was done under the umbrella of Nepal’s National Policy and Strategic Action Plan for Disaster Risk Reduction and Management 2018-2030, which in turn was developed in response to the Disaster Risk Reduction and Management Act of 2017.
While the Ministry of Home Affairs remains the DRR policy hub in Nepal, another outcome of the Act of 2017 has been the establishment of the new National Disaster Risk Reduction and Management Authority (NDRRMA) in 2019 to operationalize disaster risk management.
“One of our key functions is to coordinate all three levels of governance for ensuring a whole-of-government approach to effectively reduce disaster risk, build resilience and manage complex response,” said Mr. Anil Pokhrel, Chief Executive of NDRRMA.
Indeed, strengthening coordination among the various levels of government, sectors, and stakeholders is a challenge that many countries face, especially in light of concurrent disasters with cascading impacts. As a Least Developed Country, Nepal has made several progressive steps in pursuit of a 25-year long-term development vision to transform the country into a developed nation by the year 2043. However, disasters like the Gorkha earthquake, recurrent floods and the emergence of new disasters like windstorms have the potential to roll back the country’s development gains.
1 49 50 51 52 53 60