The National Cyber Security Centre (NCSC), a division of New Zealand’s Government Communications Security Bureau (GCSB), has updated current and former New Zealand members of the Inter-Parliamentary Alliance on China (IPAC) about cyber incidents reported in 2021 targeting the organisation.
Lisa Fong, the deputy director-general of the GCSB and head of the NCSC, said New Zealand IPAC members were informed of the measures the NCSC took after receiving initial reports. She further detailed an internal review initiated to evaluate how the NCSC handles cases of suspected state-sponsored cyberattacks against specific individuals.
“We recognise the concerns expressed by these individuals, and the wider public interest in these matters,” she said. “NCSC officials have reached out to the affected individuals to acknowledge their concerns, share the actions the NCSC took to respond to reports of possible targeting, and outline the range of cyber threats and activity the NCSC monitors. We offered practical cybersecurity advice to these individuals.”
The review's findings will be shared with those impacted and released publicly. It aims to identify potential improvements in current procedures, with a target completion date of June 30, 2024. An unclassified version of the findings will be made available to the public.
The minister responsible for the GCSB and the inspector-general of Intelligence and Security have been informed of the review and have received its finalised terms of reference.
According to Fong, the NCSC Cyber Threat Report showed that state-backed cyber activity targeting New Zealand comprises about a third of the cases the NCSC has historically detected and managed.
Another report, released last month, highlighted the rising number of cyber threats in Australia and New Zealand.
For additional guidance on online safety, New Zealanders are encouraged to visit the “Own Your Online” website for advice, including “five quick steps to online security.”
