Yesterday, a new security agency began work to protect Britain from state-sponsored terrorist threats.
The National Protection and Security Agency (NPSA) was created as part of a major new review of the government’s defense spending known as the Consolidated Review Update.
The NPSA operates out of Security Service MI5 and absorbs and extends the responsibilities of the National Infrastructure Protection Center. It recognizes that nation-state and terrorist threats are not just for critical infrastructure (CNI) providers.
Working with existing agencies, the National Cyber Security Center (NCSC) and the National Counter-Terrorism Security Office (NaCTSO), to provide defensive advice to UK organizations targeted by cyber and other threats. In the digital realm, this can range from cyber espionage and IP theft to disruptive or devastating cyber attacks.
Security Minister Tom Tugendhat has argued that science, technology and academia are under the same state-sponsored attacks as CNI providers.
“We know that hostile actors are trying to steal intellectual property from UK institutions and cause harm to our country,” he added. “NPSA plays a key role in helping businesses and universities better protect themselves and maintain their competitive advantage.”
For more information on state-sponsored cyberthreats, see: Increased ‘disruption’ in state activity, Microsoft report
NPSA’s “Training, Guidance, and Advice” to these organizations is informed not only by world-class research, but also confidential information from security services.
According to the government:
- Raise awareness of national threats to UK businesses, research institutions and institutions
- Working with police and other organizations to help combat terrorist attacks
- Providing online training and in-person industry engagements
- Develop tools and guidance for security novices, as well as customized resources for techies and security professionals
- Provide advice designed specifically for individual industries
Guidance currently featured on the NSPA site includes information on data center security, securing supply chains, identifying state actors using fake social media profiles, and managing insider risk.
