Feeds

Meet the man who'll TAKE OVER if UK faces CYBER ATTACK

Chris Gibson to head up UK’s national Computer Emergency Response Team

Reducing security risks from open source software

The delayed launch of the national Computer Emergency Response Team (CERT) is getting back on track with the appointment of its new director, Chris Gibson. This comes after the project was delayed until next year.

The organisation was due to be up and running this year but recruitment and other issues meant its launch was put back until early 2014.<

CERT-UK, a pillar of the government's £650m National Cyber Security Strategy, is designed to co-ordinate responses to online attacks on a national level.

However things are finally moving along with the announcement of Gibson's appointment as the director CERT-UK. Gibson joins the government having previously been director of e-Crime at Citigroup and after serving for the last two years as chair of the international Forum of Incident Response and Security Teams.

In a statement, Francis Maude, the minister for Cabinet Office, said: “Chris Gibson brings with him a wealth of experience in cyber incident response in the private sector, both in the UK and internationally. His first-hand knowledge and understanding of cyber security will be invaluable as he leads the national CERT.

“We set out in our national Cyber Security Strategy the importance of strengthening our response to cyber incidents. By establishing CERT-UK we will build on and complement our existing CERT structures. This will help improve national co-ordination of cyber incidents and act as a focus point for international sharing of technical information on cyber security. CERT-UK will be the expert single point of contact for other national CERTs around the globe," he added.

Gibson said: “I am delighted to join CERT-UK as we enter this exciting phase, with implementation underway and the leadership team now being appointed I am looking forward to the task of bringing together Government, industry, law enforcement and academia to establish the CERT as a team of professionals forming a world-class response to cyber threats to the UK.”

Idea from industry

The UK has had industry-specific CERTs for years (such as Janet CSIRT for university networks, and comparable organisations within government and for the UK defence forces) but has been slow to set up a national CERT, designed to co-ordinate response across all public and private sectors. CERT-UK will provide a comparable function to US-CERT, which has been operating for 10 years since 2003.

A Cabinet Office spokesperson explained that it is hoped that CERT-UK will be up and running early next year, once suitable accommodation is secured and a team is recruited. “In December 2012 HMG announced its intention to move towards a National Computer Emergency Response Team. This decision followed lessons learned from the Olympics which have informed our Cyber Security National Incident Management policy," it said.

“The new CERT will build on and complement existing structures within government, extending beyond government to industry and academia to provide a core incident management response for the benefit of the UK as a whole. Currently, the design of the new national CERT is complete and the implementation is underway with a particular focus on securing appropriate accommodation, technology and staff. We are continuing to consult with a wide range of stakeholders and are working to ensure CERT-UK is operational early next year.”

Mobile application security vulnerability report

More from The Register

next story
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
NUDE SNAPS AGENCY: NSA bods love 'showing off your saucy selfies'
Swapping other people's sexts is a fringe benefit, says Snowden
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
British data cops: We need greater powers and more money
You want data butt kicking, we need bigger boots - ICO
Crooks fling banking Trojan at Japanese smut site fans
Wait - they're doing online banking with an unpatched Windows PC?
NIST told to grow a pair and kick NSA to the curb
Lrn2crypto, oversight panel tells US govt's algorithm bods
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Mobile application security vulnerability report
The alarming realities regarding the sheer number of applications vulnerable to attack, and the most common and easily addressable vulnerability errors.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.