Government unveils new strategy to take on cybercrime

An estimated 856,000 New Zealanders were victim to online crime last year, with economic losses at about $257 million. Photo / iStock

People will be able to look for an official "cyber security tick" when they use businesses, under a Government proposal to reduce cybercrime.

Those with good cyber security practices would be able to display the tick, in a similar way to schemes that acknowledge healthy food or energy efficient appliances.

The tick scheme is proposed in the Government's refreshed cyber security strategy, launched in Auckland today by Communications Minister Amy Adams.

Other new initiatives include:
• The establishment of a national "CERT" - a computer emergency response team, or expert group, that handles computer security incidents and will be the first port of call for organisations and individuals needing help.
• Review of the Crimes Act 1961 and other legislation to see if changes are needed to more easily address cybercrime.

An estimated 856,000 New Zealanders were victim to online crime last year, with economic losses at about $257 million.

Ms Adams said the cyber security tick was proposed for small businesses, and could be similar to the United Kingdom's "Cyber Essentials" scheme.

"It will enable small businesses to demonstrate to their customers and business connections that they have put in place the basic cyber security practices.

"Small and medium businesses need to take steps to protect their online records as much as they keep their buildings and physical assets safe."

Meanwhile, documents published by the Government Communications Security Bureau have revealed the "Cortex" system Prime Minister John Key made public to counter claims of mass surveillance of New Zealanders is now being aimed at the internet service providers handling the emails and online data of everyday Kiwis.

But the GCSB said Kiwis' communications were safe, with the "eligible" internet service providers (ISPs) carrying less than 1 per cent of the country's internet traffic.

Cortex was revealed at last year's election amid allegations of mass surveillance by US National Security Agency whistleblower Edward Snowden and journalist Glenn Greenwald.

The details on the GCSB website say it is carrying out a "malware free networks" pilot with an ISP which could later be rolled out to others. It says it is not compulsory for ISPs to join and ISPs are obliged to tell customers their data is being screened.

On Tuesday, Mr Key questioned whether a proposal he has previously rejected - attaching the Cortex cyber security programme to the Southern Cross internet cable linking New Zealand to Australia and the United States - should be revisited to give wider cyber protection to New Zealand companies.

He made the suggestion while questioning the acting director of the Government Communications Security Bureau, Una Jagose, at the intelligence and security committee.

Mr Key said he had canned the original proposal because of the potential anxiety of it being seen as mass surveillance but he asked if an argument could be made, with enough public debate for it happen to protect smaller companies.

At present, the GCSB uses Cortex to mount cyber defence on Government agencies and strategically important private companies - and only with their permission.