Enabling cyber incident collaboration in UK local government through fast-time communication
This paper brings together concepts and ideas to support organisations in implementing cyber incident response and coordination, especially focusing on the need for fast-time communications. Normal business operations are slow-time communication, with the shift to fast-time communication occurring d...
| Main Author: | |
|---|---|
| Format: | Article |
| Published: |
Henry Stewart Publications
2022
|
| Subjects: |
| _version_ | 1824446476210667520 |
|---|---|
| author | Brett, Mark |
| author_facet | Brett, Mark |
| author_sort | Brett, Mark |
| collection | LMU |
| description | This paper brings together concepts and ideas to support organisations in implementing cyber incident response and coordination, especially focusing on the need for fast-time communications. Normal business operations are slow-time communication, with the shift to fast-time communication occurring during an operational incident. A good example of fast-time communication is instant messaging as opposed to slow-time e-mail. We are proposing a number of strands to formulate an approach. We realised the standard Playstation 3 theme (P3T) approach applies to fast-time communications and can be augmented to provide a novel application of the P3T. We propose to add governance to ensure that the scope application and use is appropriate, within the scope of a threat profile. We also propose to make use of the consequence relevance acceleration severity and harm (crash) gate framework which facilitates the definition of trigger points for escalation in cyber incident response planning and response. We will present some use cases and explain how to integrate them into existing operating processes and procedures. The temporal activities matrix is discussed, which explains the different slow-time/fast-time activities in a cyber response team/security operations centre (SOC). This paper comes at the end of a three-year work programme for local government in England led by MHCLG which focused on cyber resilience from the ICT side and started to build an approach and capacity within the Local Resilience Forums (LRFs). The work delivered a wide range of workshops and cyber exercises for the English LRFs. There was also a similar programme run by the Welsh Government for the wider public sector in Wales. Finally we explore future research considering an additional application around smart cities, incorporating zero trust architecture. |
| first_indexed | 2025-02-19T01:15:46Z |
| format | Article |
| id | oai:repository.londonmet.ac.uk:9556 |
| institution | London Metropolitan University |
| last_indexed | 2025-02-19T01:15:46Z |
| publishDate | 2022 |
| publisher | Henry Stewart Publications |
| record_format | eprints |
| spelling | oai:repository.londonmet.ac.uk:95562024-08-06T09:05:39Z https://repository.londonmet.ac.uk/9556/ Enabling cyber incident collaboration in UK local government through fast-time communication Brett, Mark 000 Computer science, information & general works This paper brings together concepts and ideas to support organisations in implementing cyber incident response and coordination, especially focusing on the need for fast-time communications. Normal business operations are slow-time communication, with the shift to fast-time communication occurring during an operational incident. A good example of fast-time communication is instant messaging as opposed to slow-time e-mail. We are proposing a number of strands to formulate an approach. We realised the standard Playstation 3 theme (P3T) approach applies to fast-time communications and can be augmented to provide a novel application of the P3T. We propose to add governance to ensure that the scope application and use is appropriate, within the scope of a threat profile. We also propose to make use of the consequence relevance acceleration severity and harm (crash) gate framework which facilitates the definition of trigger points for escalation in cyber incident response planning and response. We will present some use cases and explain how to integrate them into existing operating processes and procedures. The temporal activities matrix is discussed, which explains the different slow-time/fast-time activities in a cyber response team/security operations centre (SOC). This paper comes at the end of a three-year work programme for local government in England led by MHCLG which focused on cyber resilience from the ICT side and started to build an approach and capacity within the Local Resilience Forums (LRFs). The work delivered a wide range of workshops and cyber exercises for the English LRFs. There was also a similar programme run by the Welsh Government for the wider public sector in Wales. Finally we explore future research considering an additional application around smart cities, incorporating zero trust architecture. Henry Stewart Publications 2022-03-01 Article PeerReviewed Brett, Mark (2022) Enabling cyber incident collaboration in UK local government through fast-time communication. Cyber Security: A Peer-Reviewed Journal, 5 (3). pp. 237-250. ISSN 2398-5119 https://doi.org/10.69554/VXKS8698 10.69554/vxks8698 10.69554/vxks8698 |
| spellingShingle | 000 Computer science, information & general works Brett, Mark Enabling cyber incident collaboration in UK local government through fast-time communication |
| title | Enabling cyber incident collaboration in UK local government through fast-time communication |
| title_full | Enabling cyber incident collaboration in UK local government through fast-time communication |
| title_fullStr | Enabling cyber incident collaboration in UK local government through fast-time communication |
| title_full_unstemmed | Enabling cyber incident collaboration in UK local government through fast-time communication |
| title_short | Enabling cyber incident collaboration in UK local government through fast-time communication |
| title_sort | enabling cyber incident collaboration in uk local government through fast time communication |
| topic | 000 Computer science, information & general works |
| work_keys_str_mv | AT brettmark enablingcyberincidentcollaborationinuklocalgovernmentthroughfasttimecommunication |