‫ش حُلغخعش‬٤‫ش حُظلظ‬٤٘‫حُز‬ Critical Infrastructure Critical infrastructure organisations rely hugely on interconnected industrial control systems to manage all aspects of their operation and these provide opportunities for determined attackers to interfere with these systems and devices for political or economic gain. ٠ِ‫ش ػ‬٤‫ش حُلغخعش رشٌَ ًز‬٤‫ش حُظلظ‬٤٘‫طؼظٔذ ٓئعغخص حُز‬ ‫خ حُزؼغ‬ٜ‫ش حُٔظظِش ٓغ رؼؼ‬٤‫أٗظٔش حُظلٌْ حُظ٘خػ‬ ٖٓ ‫ذ‬٣‫ض‬٣ ١‫ حألٓش حُز‬،‫خ‬ُٜ‫حٗذ أػٔخ‬ٞ‫إلدحسس ٓخظِق ؿ‬ ‫ضس‬ٜ‫حألؿ‬ٝ ‫ٖ الػظشحع طِي حألٗظٔش‬٤ٔ‫خؿ‬ُٜٔ‫كشص ح‬ .‫ش‬٣‫ حهظظخد‬ٝ‫ش أ‬٤‫خع‬٤‫ ٌٓخعذ ع‬٠ِ‫ٍ ػ‬ٞ‫ذف حُلظ‬ٜ‫ر‬ Sophisticated Phishing Campaigns Phishing emails, often used to deliver malware or to induce victims to divulge personal information, are becoming more sophisticated with the addition of specific company information regarding billing, logistics, and more ‫سس‬ٞ‫حُٔظط‬ ‫ّذ‬٤‫كٔالص حُظظ‬ ّ ّ‫ طُغظخذ‬٢‫ش حُظ‬٤ٗٝ‫ّذ حإلٌُظش‬٤‫س سعخثَ حُظظ‬ٞ‫ذ طط‬٣‫ظضح‬٣ ‫خ ُإلكظخف‬٣‫ض حُؼلخ‬٤‫ ُظلل‬ٝ‫ؼش أ‬٤‫ػخدس ُ٘شش رشحٓؾ خز‬ ‫ٓخص‬ِٞ‫ خخطش رؼذ اػخكش ٓؼ‬،‫ش‬٤‫ْ حُشخظ‬ٜ‫خٗخط‬٤‫ػٖ ر‬ ٕٝ‫حُشئ‬ٝ ‫ش‬٤‫حط‬ٞ‫ٓخص حُل‬ِٞ‫٘ش ػٖ حُششًش ٓؼَ ٓؼ‬٤‫ٓؼ‬ .‫خ‬ٛ‫ش‬٤‫ؿ‬ٝ ‫ش‬٤‫ؿغظ‬ُِٞ‫ح‬ Strategic Use of Information Operations Cyberattacks, cyberespionage and the dissemination of false information (Fake News) are growing tools used by some nation-states and other actors to achieve political and economic disruption. ‫ٓخص‬ِٞ‫خص حُٔؼ‬٤ِٔ‫ ُؼ‬٢‫ـ‬٤‫حالعظخذحّ حالعظشحط‬ ‫ٗشش‬ٝ ‫ش‬٤ٗ‫زشح‬٤‫خص حُظـغظ حُغ‬٤ِٔ‫ػ‬ٝ ‫ـٔخص‬ُٜ‫طؼظزش ح‬ ‫حص‬ٝ‫ؽش (حألخزخس حُضحثلش) ٖٓ حألد‬ِٞ‫ٓخص حُٔـ‬ِٞ‫حُٔؼ‬ ٍٝ‫ذ ٖٓ هزَ رؼغ حُذ‬٣‫حُٔغظخذٓش رشٌَ ٓظضح‬ .‫ش‬٣‫حالهظظخد‬ٝ ‫ش‬٤‫خع‬٤‫حألشخخص ُخِن حالػطشحرخص حُغ‬ٝ Cloud Computing Organisations increasingly favour cloud technologies that allow them to respond to changing business needs quickly and flexibly. The main challenge is how security and privacy concerns are managed by cloud providers. ‫ش‬٤‫عزش حُغلخر‬ٞ‫حُل‬ ‫ طغٔق‬٢‫ش حُظ‬٤‫خص حُغلخر‬٤٘‫َ حُٔئعغخص ُِظو‬٤‫ضدحد طلؼ‬٣ ‫ذس رشٌَ أًؼش‬٣‫خؿخص حألػٔخٍ حُٔظضح‬٤‫رخالعظـخرش الكظ‬ ‫ ادحسس‬٢‫٘خ ك‬ٛ ٢‫غ‬٤‫ حُشث‬١‫ٌٖٔ حُظلذ‬٣ٝ ،‫ٗش‬ٝ‫ٓش‬ٝ ‫عشػش‬ ‫ حُخذٓخص‬٢ٓ‫ش ٖٓ هزَ ٓوذ‬٤‫ط‬ٞ‫حُخظ‬ٝ ٖٓ‫ف حأل‬ٝ‫ٓخخ‬ .‫ش‬٤‫حُغلخر‬ Cyber Security Awareness The visibility and public awareness of cyber security remains limited and significantly undermines efforts to protect critical information. ٢ٗ‫زشح‬٤‫ رخألٖٓ حُغ‬٢‫ػ‬ُٞ‫ح‬ ،‫ػخ ٓخ‬ٞٗ ‫دح‬ٝ‫ ٓلذ‬٢ٗ‫زشح‬٤‫ حُؼخّ رخألٖٓ حُغ‬٢‫ػ‬ُٞ‫ضحٍ ح‬٣ ‫ال‬ ‫ش‬٣‫ُش ُلٔخ‬ٝ‫د حُٔزز‬ٜٞ‫ش حُـ‬٤‫ُؼؼق رشٌَ ًز‬٣ ‫ٓ��خ‬ .‫ٓخص حُلغخعش‬ِٞ‫حُٔؼ‬ Hacker-for-Hire Services ‫خذٓخص حُوشط٘ش ٓوخرَ أؿش‬ ‫حٗخلخع‬ٝ ‫خ‬ٜٓ‫ُش حعظخذح‬ٜٞ‫ع‬ٝ ‫حص‬ٝ‫حكش حألد‬ٞ‫رغزذ ط‬ ْ٣‫ػخص حُوشط٘ش طوذ‬ٞٔ‫ أطزق ربٌٓخٕ ٓـ‬،‫خ‬ٜ‫ل‬٤ُ‫طٌخ‬ ‫هض‬ٝ ١‫َ ٖٓ أ‬ٜ‫خذٓخص حُوشط٘ش ٓوخرَ أؿش رشٌَ أع‬ .٠‫ٓؼ‬ Easy-to-use and affordable tools have made it easier than ever for attackers to offer hacker-forhire services. Skills Shortages The critical skills shortage of cybersecurity professionals is a global problem that continues to be a major concern for public and private sectors. National Cyber Security Strategy 2018-2023 ‫خسحص‬ُٜٔ‫ٗوض ح‬ ٖٓ‫ٕ حأل‬ٝ‫ٖ رشئ‬٤٤٘‫ٖ حُٔؼ‬٤٤ُٜ٘ٔ‫خسحص ح‬ٜٓ ‫ؼظزش ٗوض‬٣ ّ‫ٖ حُؼخ‬٤‫ش ال طضحٍ ٓوِوش ُِوطخػ‬٤ُٔ‫ ٓشٌِش ػخ‬٢ٗ‫زشح‬٤‫حُغ‬ .‫حُخخص‬ٝ Page 10 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬