stock.adobe.com
Nato supports collaboration on cyber security
Nato supports collaboration and cooperation on cyber security as an organisation founded on the principle of collective defence, says representative
In cyber space everyone is interconnected and defences are only as strong as the weakest link, says Antonio Missiroli, assistant secretary general for emerging security challenges at Nato.
“Nato also recognises the scale and severity of cyber threats, and at our most recent summit, allies stated that cyber threats to the security of the alliance are becoming more frequent, complex, destructive and coercive,” he told attendees of the CyberSec Brussels Leaders’ Foresight 2019 event.
Responding to a call for the development of common principles for a secure cyber space at the event, Missiroli said the concept of “one for all and all for one” as it relates to cyber space is a “fundamentally uncontroversial” idea at Nato.
The alliance, he said, is firmly committed to continuing to adapt to the cyber threat landscape and take actions to improve cyber defence capabilities, build trust and improve cooperation among allies, partners, industry and academia.
One of Nato’s key tools for enhancing cyber defence, said Missiroli is the cyber defence pledge made by allies at the 2016 summit to strengthen and enhance the cyber defences of their national networks and infrastructures as a matter of priority.
“We are now in the midst of our third cycle of assessment and reporting, and overall, the pledge has been a good news story because since 2016, almost every ally has upgraded their cyber defences,” he said.
Read more about Nato and cyber defence
- Nato to be fully operational in cyber space by 2023.
- Cyber attacks must avoid civilian targets, says Nato manual.
- Nato gears up for cyber warfare with latest exercise.
- Nato assembles cyber task force to bolster defence capabilities against online attacks.
According to Missiroli, the political impact of the pledge is also apparent through the fact that cyber security has attracted high-level political attention in allied nations, which has helped to elevate cyber defence from a technical to a strategic issue.
“It has also been useful in bringing together a variety of domestic national stakeholders that were operating separately from one another previously, and it has served as an important platform for allies to share best practices,” he said.
Throughout Nato, Missiroli said allies are working together, pooling their knowledge and experience to help each other.
“This demonstrates the pledge’s ‘multiplier effect’ across the alliance, with the results being far greater than the sum of their parts.”
In 2018, senior officials and cyber defence experts from Nato members met in Paris for the first annual conference on the pledge to discuss key elements of the pledge, with the second annual conference scheduled to take place in the UK later this year.
“These events demonstrate the ongoing commitment to this important tool, which is supported at the highest levels of government,” he said.
More work to be done
However, Missiroli said there is still more work to be done because the threat continues to grow and evolve, adding that the pledge has been a useful mechanism to galvanise and catalyse improvement.
In addition to the work by allies, he said Nato has undertaken “significant” policy and organisational adaptation in response to the recognition of cyber space as a domain of operations at the 2016 summit.
“Milestones include the setting up of the cyber space operations centre in Mons, Belgium, which will provide situational awareness and coordination of Nato activity in cyber space; the approval of a military vision and strategy for the cyber space domain; and the agreement on how to integrate cyber effects, provided voluntarily by allies, into alliance operations and missions,” said Missiroli.
However, he noted that the recognition of cyber space as a domain of operations does not change Nato’s defensive mandate, adding that Nato has explicitly affirmed the applicability of international law to cyber space.
“We support work to maintain international peace and security in cyber space and to promote stability and reduce the risk of conflict. We recognise that we all stand to benefit from a norms-based, predictable and secure cyber space.
“Our goal in recognising cyber space as a domain of operations is simply to ensure that we can operate as effectively as we do on land, at sea and in the air. In short, our goal is to make cyber space a daily and normal part of our business.”
Cyber defence a team sport
Although a cliché, Missiroli said it remains true that cyber defence is a team sport. “Nato cannot and should not go it alone. We are only made better by sharing more information and the more we can pool best practices and interoperate with partners,” he said, adding that Nato currently engages with more than 40 partner countries based on shared values and common approaches.
Nato also helps to foster dialogue and practical cooperation in partner countries through the Science for Peace and Security Programme, taking steps, for example, to intensify cooperation with the European Union, particularly in the areas of information exchange, training, research and exercises.
However, Missiroli said Nato must continue to look beyond Europe in light of the fact that partner nations such as Australia, New Zealand, Japan and South Korea have all invested heavily in cyber defence. “And it will serve us well to continue to build these relationships.”
Nato also recognises the importance of the private sector, he said. “It is the private sector, after all, that develops and operates the vast majority of networks worldwide and our continuous interactions with industry partners helps provide advance notice and rapid mitigation for many activities that have been detected against systems in allied nations and against Nato itself.
“Information sharing goes both ways. Industry shares with us and we also share with industry. In the WannaCry and NotPetya attacks, for example, we quickly reached out to our industry partners and the information exchange was critical for getting the most up-to-date picture of a rapidly-evolving and complex situation.”
Nato needs to do more
Moving forward, Missiroli said that given the cutting-edge developments in the cyber domain, such as artificial intelligence, Nato will need to do more to capitalise on the power of industry and academia.
“I hope it is clear that Nato has made significant progress in the cyber space domain as individual allies, as Nato and as partners,” he said.
“While affirming Nato’s defensive mandate, we have expressed our determination to employ the full range of capabilities, including cyber, to deter, to defend against and counter the full spectrum of cyber threats, including those conducted as part of a hybrid campaign.
“The threats of cyber space are real, and they are certainly not going away any time soon, so Nato will continue to adapt and evolve to meet these threats, and we do so not alone, but with all our partners,” concluded Missiroli.
