RESTRICTED ed ia Hon Clare Curran Minister of Broadcasting, Communications and Digital Media D ig ita lM 27 March 2018 ns an d Chair Cabinet External Relations and Security Committee un ic at io REFRESH OF NEW ZEALAND’S CYBER SECURITY STRATEGY AND ACTION PLAN C om This paper seeks agreement to a comprehensive refresh of New Zealand’s Cyber Security Strategy and Action Plan. g, 1. m Proposal tin Executive Summary There has been good progress to improve New Zealand’s cyber security under the Cyber Security Strategy and Action Plan approved by Cabinet in 2015. 3. This includes establishment of CERT NZ, delivery of CORTEX malware detection and disruption services, cyber security awareness campaigns, the first Cyber Security Summit, Protective Security Requirements for government agencies, work to improve the cyber security of small businesses, a focus on building a cyber security workforce, developing NZ Police skills to respond to cybercrime and international engagement on cyber security issues. 4. This Government has committed to building a connected nation, promoting and protecting digital rights, and harnessing digital technology for economic growth, community benefit and innovation. Cyber security is essential to this. by th e M in is te ro fB ro ad ca s 2. R el ea se d 5. 6. There is an upwards trajectory of cyber security threats. The widespread use of connected devices and emerging technologies has expanded the attack surface for malicious threat actors. Both CERT NZ and the National Cyber Security Centre (within the Government Communications Security Bureau) have reported a growing number of incidents. Globally, it is clear that cyber threat actors are increasingly bold, brazen and disruptive. Our international partners have intensified their efforts in response to this problem. It is timely for New Zealand to step up its cyber security efforts. This would complement other initiatives underway, such as the development of a Digital 4iz7hypmdw 2018-04-04 16:36:02