Industry, government cooperation vital to critical infrastructure protection: Analysts
- 11 October, 2010 09:52
More cooperation is needed between government and industry on critical infrastructure protection (CPI), according to analysts.
“I don’t think government and industry have learnt to share information," Gartner research director, Rob McMillian, told Computerworld Australia. "Ninety per cent of critical infrastructure is held in commercial hands. That means it is up to industry to decide how to protect that infrastructure. It’s your own commercial requirements that lead you to protect your kit.”
He said if government wants to work with industry, there needs to be a joint understanding of the economics behind this in terms of risk.
A recent Symantec survey found 93 per cent of Australian industry respondents were engaged with CPI programmes and were willing to work with government on them.
“Industry will be looking for some guarantees about information sharing and where that information goes to," McMillian said. "We’ve got some scope there but we still have to figure out a way forward.”
McMillian also said he was surprised to see comments from the Attorney-General department assistant secretary, Mike Rothery, in the Sydney Morning Herald that businesses would have to defend themselves if a cyber attack hit Australia.
Rothery was quoted as saying the government struggles to defend its own systems, despite the opening of a Cyber Security Operations Centre in Canberra. The government has also created a Computer Emergency Response Team (CERT) to help with cyber attacks.
“If it’s in private hands, than the ball is in the government's court to outline what they can bring to the table. CERT Australia will need to make sure it offers a value proposition when an incident takes place.”
The Symantec survey, which drew responses from industries such as finance and IT, also revealed that 79 per cent of local respondents said they had started engaging on CPI less than a year ago.
A recent report from the Victorian auditor-general also found the Supervisory Control and Data Acquisition (SCADA) systems at key Victorian infrastructure remained vulnerable to attack and subversion.
Asia Pacific vice president and managing director Craig Scroggie said this is because there have been more reports of cyber terrorism.
“We’ve observed the Stuxnet worm attack on an Iranian nuclear power plant in September," he said. "The potential for significant and large scale harm by taking control of a power plant is quite scary.”
McMillian said although these types of attacks are not new, they are likely to increase in the future.
"That's why critical industries such as water and power companies need to start CPI programmes."
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- HTC unveils new Butterfly s phone that packs more battery life
- Google Glass apps for enterprises coming by early 2014
- iPad 5 rumour rollup for the week ending June 18
- Say 'cheese', Earthlings! Spacecraft to snap home planet pic from deep space
- Social media adds spice to financial services, say banks
Solving the skills conundrum – part 1
Samsung Galaxy S4 vs. HTC One: 5 Reasons to Choose the GS4
High school students still see ICT as ‘sitting at a computer all day’: survey
Does encryption really shield you from government's prying eyes?
Solving the skills conundrum – part 1
Securing the Road to Virtualization and Beyond
Traditional security controls for enterprise don’t necessarily translate into the new world of virtualisation and cloud environments. When mapping out a secure virtualisation roadmap, click to find out about pave a more secure, risk free path.
Staying Ahead of the Data Explosion
The total volume of data being processed and stored by businesses is rising exponentially. IDC has estimated that the size of the "digital universe" will increase 29 fold between 2010 and 2020. Data storage technology has undergone a steady increase in capacity, along with a steady decline in the cost per unit to store information. Unfortunately, data storage capacity is not keeping pace with data growth and necessitating greater intelligence in the storage infrastructure. Read more.
Data Centre Physical Infrastructure: Optimising Business Value
To stay competitive in today’s rapidly changing business world, companies must update the way they view the value of their investment in data centre physical infrastructure (DCPI). This whitepaper discusses how companies can succeed in a changing global market. Read now.