CENTRE FOR STRATEGIC CYBERSPACE + SECURITY SCIENCE CSCSS

COMMITTED TO EXCELLENCE IN CYBER DEFENCE.ONE MISSION. ONE GROUP.

CSCSS / DEFENCE INTELLIGENCE GROUP C DIG

We live in a world of highly interconnected, network-centric,global systems. This provides endless opportunities for thedevelopment of new visions for growth and prosperity. Thecurrent economic shadow is generating increased competitionfrom legitimate competitors as well as other players whostrive for any advantage and present significant national,transnational and economic security risks and threats.

These factors will foster new necessities for cyber defence.Complex,interrelated and dynamic forces will transformand recast the face of cyber defence, its role, priorities,strategies, frameworks and the methodologies necessary to meet the unique demands placed upon it.

The threats faced are persistent, constantly evolving and transcend national boundaries.

CSCSS / DEFENCE INTELLIGENCE GROUP IS YOUR SHIELD, YOUR FIRST LINE OF DEFENCE.Understanding what is at risk means you havethe keys to protecting yourself.

C DIG

CSCSS Defence Intelligence Group – C/DIGThe CSCSS Defence Intelligence Group strives to change theparadigm identifying the: WHO, HOW and WHY behind cyber-attacks. This enables a pro-active defence based on solidunderstanding of threats and players.

C/DIG offers a spectrum of Intelligence products. At thestrategic level we track national players to determine theirpolicies, and intentions. At the operational level C/DIGdocuments their Tactics, Techniques and Procedures (TTP). At the tactical level we provide threat analysis, identificationand forensic analysis. All of this data is used for awareness,education, prevention and defence from cyber-attacks and insupport of contingency operations to protect your organization.

Our MissionThe Defence Intelligence Centre works in real-time to report,analyze, forecast providing credible, reliable, sustained intel-ligence services and contingency planning.

Our VisionProvide the best all source cyber-centric intelligence, counter-intelligence, and cyber-security services oriented to nationalplayers.

Clear answers to your critical challenges We will help you to identify how key trends will impact yourbusiness and security strategy and you’ll get direct answers to your most pressing security challenges and your defenceIntelligence stance.

What are we doing to protect information?Security is no longer simply about preventing external threatsfrom entering the enterprise; it’s about keeping critical informationassets from leaving. Defence Intelligence plays a key role inInformation security. It is an essential strategic businessrequirement resource that expands the strategic role of leader-ship, transforming them into point persons who lead and developstrategy, conduct an organization’s business and managesecurity risk.

Delivering Threat Intelligence for the Real World C/DIG - How are we responding to threats?The interconnected landscape around us continues to evolve atblinding speed, introducing new threats, complexities, concernsand exposures. This state of challenge has become the norm,requiring us to respond much more rapidly and effectively to stayahead of the competition, our adversaries, and the security curve.

This means organizations must understand ‘threat information’AND security as part of the constant business evolution process.Defence Intelligence is a component of the effort to be continuallydiligent in security strategies and risk management programs.

A Snapshot - What is the Issue?Competitive Intelligence, corporate and foreign espionage, cyber attacks on the supply chain, counterfeiting, the globalcyber crime epidemic, fraud, malware research + development,theft of proprietary and intellectual property and information. All this effort is focused on illicitly gaining competitive advantage.These threats can, and in most cases will, include national levelplayers that seek to improve competitive advantage, theireconomies, technologies and militaries through specificallytargeted activities

DEFENCE INTELLIGENCE DEFINED[Intelligence is] The integration, evaluation, analysis,and interpretation of data into actionable informationthat you need to know to be successful.

YOU ARE A TARGETIF YOUR COMPANY:n has a technology or technological edge n has cutting edge proprietary informationn has developed a process that manufactures an item

at less cost than othersn is negotiating with another company or country,

the negotiators and negotiation strategy are highly confidential

THE BOTTOM LINE – VALUE AND ADVANTAGE –TRADE SECRETS ARE AT RISK EVERY DAYIf your company has invested time and resourcesdeveloping a concept, market strategy, process, product or technology, you have to protect it. You will be a target and you should expect to be attacked.

How We HelpThe CSCSS Defence Intelligence Group provides a full range ofcyber - Intelligence services in order to profile your organizationand identify, detect, and neutralize exploitable threats. Our areasof expertise deliver extremely specialized risk managementservices mapped to, NIST, COBIT, ISO, BS25999 and/or otherindustry standards.

It’s about FocusWe engage our clients with a team of professionals focusedexclusively on defence intelligence. We provide the criticalinsight, advice, and information to enable senior-level business,IT, and security executives to make the strategic, organizational,and technology investment decisions required to control today’scontinually evolving business and security threat environments.

We DeliverC/DIG will provide you with the insight you require to lookbeyond security and technology to gain an evocative, strategicapproach to assessing and defending against the threats againstyou. You will have what you need to manage informationsecurity and mission-critical business processes and assets. You will get the clear and focused picture, without the hype, to deliver organizational competitive edge.

StrategicallyCSCSS and the Defence Intelligence Group recognize the Rule ofLaw and the application of internationally recognized principals,protocols and conventions to cyberspace. CSCSS, through theDefence Intelligence Group provides a response to nations thatdiscard or refuse to comply with these principals. We operate as a Cyber-Defence partner against non-compliant nations.

Strategic Commitmentn Teamwork: Partnership across multinational and

organizational boundaries for mission accomplishmentn Integrity: Adherence to the highest legal and ethical

principles in our workn Excellence: Deliver agile, empirical, and insightful

professionalism and expertise in cyber-defence intelligence n Service: Dedication to our mission, goals, and objectives

and clients to achieve the highest standards of excellenceand greater stability in cyberspace

Leadership / Research / Defence From thought leadership, strategy development, to operations,we deliver a highly skilled and agile team of professionals withleading-edge training, experience, skill, and technology toenable you to adapt to changing cyber threats and mission-critical information assurance environments. We focus oncritical, cyberspace/cyber security decisions, and provide cyberdefence intelligence and support leadership whenever andwherever it is required. We do this by providing a response to unique policy, operational DI requirements and to respond to national defence intelligence missions.

Defence Intelligence Group Experience + ExpertiseThe Defence Intelligence Group is composed of: IntelligenceAnalysts, Network engineers, and Computer Security Analystswho have worked with various governments within the lawenforcement and military intelligence community. C/DIG personnelhave been security screened to NATO SECRET in accordancewith host nation, 5i and NATO security requirements.

Our standard is a comprehensive, highly trained, highly skilledand agile team. C/DIG enables CSCSS to provide a response to the evolving trends and challenges faced by our clients.

THE FBI ESTIMATES THAT BILLIONS OF U.S. DOLLARS ARE LOSTannually to foreign and domestic competitors who deliberately targeteconomic intelligence in flourishing U.S. industries and technologies,and who cull intelligence out of Commercial Off-The-Shelf (COTS)technologies by exploiting open source information and company trade secrets

THE INTELLIGENCE CYCLEYour MISSION and the ORIENTATION of what you are doing direct intelligence. We provide our leadership and experience, which we apply to the four components of DI to the Intelligence Cycle:

Tactically, we provide practical solutions to issues through the DI Cycle that are both dynamic and fluid in nature to ensure security attempting to minimize the exposure of your organization.

DIRECTION

COLLECTION

PROCESSING

DISSEMINATION

CSCSS Defence Intelligence ServicesMapping Solutions to Evolving Threat LandscapesWe deliver real-world computer / network security intelligencederived from our skills and experience within the defenceintelligence community. We collect data points from numerousintelligence sources drawing on military defence intelligencebackgrounds through which we analyzes data from a broadspectrum sources, including but not limited to:

n Open Source Intelligence (OSINT)n Directed Research and Collection (DR+C)n Human Intelligence (HUMINT)n Network Intelligence (Technology Based)n Technical Intelligence (TECHINT) n Digital Forensics + Analysisn Cyber Intelligence (CYBINT)n Proprietary Resources and Techniques

Our Defence Intelligence ServicesCSCSS DIG delivers its services through Actionable Intelligenceand proactive programs and services to address real-worldissues. Drawing from our expertise and experience with variousagencies within the law enforcement and military intelligencecommunities we deliver a spectrum services:

n Actionable Intelligencen Cyber-Centric Intelligence n Nation Player Threat profiling and Corporate Risk Profiling n Enterprise Risk Managementn Information Assurance and Testingn Incident Response + Forensics / Malware Analysisn Defence Intelligence Education / Awareness Programmes

Due to the sensitive, sometimes classified, nature of DefenceIntelligence many of our services are not expressly described in our public literature or within our website and are highlyspecialized. Please contact CSCSS or the CSCSS DefenceIntelligence Group to determine if we can help.

Defence Intelligence + PracticeOur diverse areas of practice include:

n Cyber attack profilingn Cybersecurity threat assessments and testingn Cyber architecture development and evaluationn Cyber-Defence Strategy + Policy Development and

implementation n Apply Defence Intelligence knowledge to security +

business process n Support stakeholder mapping through educational

awareness programs in order to support education Outreach and Collaboration

n As a component of CSCSS and a partner with the Cyber Conflict Center, C/DIG Analyzes on-going attacks.C/DIG also provides warning of potential and ongoing attacks and persistent threats.

Examples of CDIG activities include:We bring third party neutrality and confidentiality and integrityfor reporting security and intelligence threats. This enablesbusinesses to share data without compromise to theirorganization.

n Threat analysis and identification, for setting priorities duringan emergency response to issues or a breach of security.

n Analysis and tracking of Advanced persistent threats (APT),intelligence gathering / industrial espionage

n Detection of active internal / external threats, identifyingtarget sets including intellectual property, identification ofattacking malware designed to gather economic intelligence,including trade secrets, proprietary data, financial and otherelectronically stored private information

n Evaluating and recommending strategic and tacticalapproaches, priorities, criteria for computer security and/orinformation protection

n Providing leadership from the political, legal, and technicalperspectives within two parallel DI focus areas the includeLaw & Policy Technical Security.

n Supporting security transformation within organizations toassist leadership and policymakers to better understand thecomplexities of APT and Nation Players in relation to theirorganization

ACCORDING TO A GOVERNMENT OFFICIAL, the UK facesyearly some 44 million cyber-attacks against privatecompanies, government institutions and crucial infra-structure sectors, costing about £27 billion a year.

CSCSS Defence Intelligence / Situational AwarenessComplimentary to our cyber-security efforts, C/DIG is engaged increating Defence Intelligence training and educational materialsto promote a stronger understanding of:n Using Intelligence to safeguard your computer /

network securityn Information securityn APT ( Advanced Persistent Threats )n Role of nation players / National actors

The CSCSS Defence Intelligence Group is uniquely positioned toattract some of the foremost defence intelligence, strategists,and intelligence professionals to develop and high caliber,professional training and programs and services. Cyberspacethreat awareness and protection must be driven by seniorleadership through organization-wide cyber policy and awareness.

DI Education / Awareness Productsn Lectures / Presentationsn Classes n Executive / C-Level Briefingsn Roundtablesn Workshops n Webinars

Topics Include: n Organizational Defence Intelligence / Threat Level Profilingn Defining the cyber-environment (defining the area of

operations)n Case Studies (cyber-attacks in detail)n Detailed Studies / Detailed Aggressor Briefingsn Cyber-Attack (trends and potential types of cyber-attacks)n Smart Defence (designing a secure environment / countering

an attack)n Leveraging cyber-capability (your return on security investment)

Subscription Productsn Intelligence Summaries (INTSUMs) n Weekly / Monthly reports designed to keep the subscriber

current on specific topics.n Current cyber-threats from international playersn Reports on Policies, Histories, TTP and Trends on a specific

cyber-aggressor. n Intelligence Reports (INTREPs) These are spot reports on

one specific incident or event

OFFICE OF THE NATIONAL COUNTERINTELLIGENCE EXECUTIVEChina and Russia view themselves as strategic competitors of the United States and are the most aggressive collectors of US economic information and technology.

n FIND OUT MORE ABOUT THE ACTIVITIES OF THE “ASYMMETRIC” CYBER THREATthat may be putting your organization at risk.

n UNDERSTAND THE IMPACT OF CORPORATE ESPIONAGE, cyber-fraud, and the insider threat to your organization and staff

n LEARN TO IDENTIFY VULNERABILITIESin your supply chain. How secure is your ‘partner’?

n EXAMINE YOUR INFORMATION MANAGEMENT STRATEGIESto mitigate the risks.

n SUPPORT YOUR DEVELOPMENT OF YOUR CYBERSECURITY STRATEGY and concepts to help you navigate the threat landscape

C DIGCONTACT

Custom Services + ProductsC/DIG provides insights on key issues, relating to DI as well asadvisory services to government, military, industry and agencies.We strive to enhance the understanding of the defence andintelligence related to cyber threats posed by foreign intelligenceservices and transnational competitors to bring attention tonational security issues of common concern. We offer a broadrange of services to secure and better protect commercialactivities, economic programs, and intellectual property inhostile environments, which, if lost, could dramatically impactnational and economic security

The Industries We ServeIn an enabled world where everything is interconnected, our futureis tied to information – its manipulation, delivery, integrity andsecurity. Cyberspace and related security cannot be treated asan afterthought. CSCSS Defence Intelligence Group serves public -privately industry spanning a wide range of sectors and industries.

Civilian / Government AgenciesSupporting the Civilian and Government Mission Government civil servants face complex challenges in cyberspaceand with the related security issues of operating in a digitalworld. C/DIG strategy and technology experts have helped withstrategic planning, intelligence management and analysis,information sharing, training, counterintelligence, and otherforms of support.

National Defence AgenciesGlobally, defence agencies face persistent, fast-paced, rapidlyevolving threats and changing national security environments.To address threats and meet complex mission requirements,C/DIG and its associated internal groups and key partnersprovide intelligence support and will function as a resource.We will deliver strategic and tactical DI leadership tocyber/defence planners, interagency partners, and policymakersto defend cyberspace and related cyber security interests.

Intelligence CommunitySupporting the Intelligence Community + Intelligence MissionCSCSS DIG collaborates with organizations in government,health, finance, transportation, energy and other critical sectorindustries to develop cyberspace risk assessments that deliverbenchmarks and indicators to assist in securing cyber operations.

Commercial OrganizationsCSCSS delivers programs that are tailored to meet uniquerequirements. We work to ensure they are better prepared tomitigate the risk of future attacks through: threat awareness,vulnerability assessment, enhanced processes, programs,services, policies, and technologies. We direct organizationsthrough a dynamic, collaborative approach, helping our clientsnot only understand their weaknesses through assessments andvulnerability or penetration tests, but also to anticipate threatsand respond to incidents when they occur.

SECTORS WE SERVEPUBLICLY AND PRIVATELY HELD COMPANIESACROSS A WIDE RANGE OF INDUSTRIES IN THE FOLLOWING SECTORS:

Public SectorUtilities andGovernment

Payment CardIndustry + Processing

Telecommunications

Manufacturing

Healthcare / Medical HealthSciences

Science / Research

Banking andFinancial

WALL STREET JOURNALThe bulk of the theft of U.S. corporate and economic secretsis carried out in cyberspace, where vast volumes of data canbe stolen in seconds, according to U.S. intelligence officials.

About CSCSSThe Centre for Strategic Cyberspace + Security Science / CSCSS is a multilateral, international not-for-profit organization thatconducts independent cyber-centric research, development, analysis, and training in the areas of cyberspace, defence intelligence,cyber security, and science while addressing the threats, trends, and opportunities shaping international security policies and nationalcyberspace cyber security initiatives.

CSCSS, as a strategic leader in cyberspace, works jointly with key partners to address, develop, and define cyber technologies, cyber defence force capabilities, information dominance, and concept operations. We deliver practical recommendations and innovativesolutions and strategies to advance a secure cyberspace domain.

CSCSS / DEFENCE INTELLIGENCE GROUP C DIG

CENTRE FOR STRATEGIC CYBERSPACE + SECURITY SCIENCE CSCSS

All trademarks or registered trademarks are properties of their respective owners. Copyright © 2013 The Centre for Strategic Cyberspace + Security Science. All rights reserved

CSCSS Defence Intelligence Group / Putting it all TogetherWe are dedicated to countering computer based threats bydeveloping outreach materials; conducting workshops, trainingclients, participatinåg in conferences; working with industry, lawenforcement and defence intelligence community, deliveringtargeted presentations.

Our resources bring to bear Information and CommunicationsTechnology (ICT) solutions and advanced analytics that tiedirectly to CSCSS Internal resources including, DefenceIntelligence, CSCSS Cyber Conflict Centre and ET+S Groupresources supporting cyber security research that focusessolutions on people, process, and policy.

Contact UsFor more information on the Defence Intelligence Group or to find out how we can help you please contact us.

CSCSS / Centre for Strategic Cyberspace + SecurityScience Defence Intelligence GroupWashington D.C + 571.451.0312London, United Kingdom +44 2035141784North America +877.436.6746Middle East +800.653.4077Australia +61 2.8003.7553

Email: defintel@cscss.orgwww.cscss.org

We respond to client requests globally and treat each contactand the information you provide to us with the highest regard forconfidentiality. Our unique experience and expertise brings tobear, comprehensive capabilities recognized by agencies inseveral countries, including the FBI and intelligence communities,which we focus on client issue resolution. We can help.

CSCSS.org