Cyber Weather - Situational Awareness Product For Our Non-technical Constituents

No ratings

Presented at FirstConferenceKualaLumpur 2018 by

Tomi Kinnari

Problem: How to present cyber situational awareness in an understandable way to our non-technical and semi-technical constituents, such as management, CTO’s, risk officers, citizens etc.?Solution: We developed a new situational awareness product that we call cyber weather. It covers topics such as DDoS, malware, vulnerabilities, APT, IoT and network failures. It is written in a language that also semi-technical and non-technical audiences can follow.How we did this: The information is gathered and distilled monthly by six groups, each immersed in one of the focus areas of the cyber weather. These groups gather information from several internal and external sources, such as incidents from ticketing system, ISACs, other government agencies and news. The new developments from each focus area are discussed and written down on a monthly basis.Results: We have collected and made cyber weather for over a year, and the results have been encouraging. Our constituents have considered it a very good and easy to follow summary of the key events. Some use it to follow key trends and events in cyberspace while others have been using it as a source in their risk assessments. Furthermore, it has also enabled NCSC-FI to better follow trends, because creation of cyber weather is forcing us to summarize key events monthly. Cyber weather has also made preparing presentations to speaker gigs much easier, which helps a great deal because NCSC-FI is speaking in over 100 events per year. It has also made the quality of the presentations more homogenous among NCSC-FI employees, because everyone is using the same base for the presentations.