Study considers Computer Security Incident Response
Study considers options for Computer Security Incident
Response in New Zealand
InternetNZ has today released a report looking into options for the creation of a New Zealand Computer Security Incident Response Team (NZ CSIRT), prepared by independent consultant Chris Horsley of CSIRT Foundry.
A CSIRT is a team focused on supporting the community deal with computer security issues. Formed initially to deal with malware such as computer worms and other viruses, CSIRTS these days work to stay one step ahead of those who would use Internet technology to do harm.
Recently, the National Cyber Policy Office (a department of the DPMC) started an update of the NZ Cyber Security Strategy which was published in 2011. Part of this review includes an evaluation of different possibilities for the creation of a NZ Computer Security Incident Response Team.
The NCPO provided a number of options for review.
InternetNZ commissioned research into the various models proposed in August, and releases the report today. The motivation for the research and for the selection of an independent expert was to help ensure that any option the NCPO chooses will stand up to rigour.
"New Zealand needs the best CSIRT model we can get, to do the most to improve Internet security," says Jordan Carter, InternetNZ Chief Executive.
The report sets out a number of ways that New Zealand could embark on this next step in its cyber security policy and is a piece of work that Mr Carter calls very important in New Zealand's online landscape.
"Cyber security is an area that New Zealanders don't think about enough. The absence of a CSIRT is a notable gap, and the question is not whether we need one, but how to do it right.
"I am pleased to see Government departments start thinking analytically about what to do with the increasing number of online threats, and I know that this report will contribute to that work," Jordan Carter says.