22 February 2013
Key NZ infrastructure operators take a lead in cyber security
A group of New Zealand critical infrastructure organisations have established the New Zealand Cyber Security Voluntary
Standards for Industrial Control Systems with the support of the National Cyber Security Centre (NCSC).
The NCSC is part of the Government Communications Security Bureau, and supports government and critical infrastructure
owners in efforts to protect themselves from cyber threats.
These critical infrastructure organisations operate industrial control systems, which allow centralised supervision and
control of remote assets. The group has been working on voluntary standards with the NCSC.
Mike Judge from Genesis Energy says, “This work has allowed us to safely discuss cyber security issues, and work
together with industry to develop best practice and share information.
“The participants in this group are well placed, to provide or endorse security guidance to the New Zealand utility
industry. Risks will vary, but this standard we have developed is a practical compilation of best practice and guidance
for establishing a secure control system.
“The aim is to minimise the threat from unauthorised or inappropriate access, and also to maintain access and control
during adverse conditions.“
“These voluntary standards will be applicable for a range of NZ industries including electricity, oil and gas, water,
transport, chemical, pharmaceutical, food and beverage, and manufacturing,” Mr Judge said.
The National Cyber Security Centre recently published its 2012 Incident Summary, which identified a 48 per cent increase
in the number of attacks against New Zealand government agencies and critical national infrastructure in 2012.
If you or your organisation is a part of the Industrial Control Systems infrastructure (SCADA) in New Zealand and is
seeking further resources on current security issues contact the NCSC ICS team by emailing: info@ncsc.govt.nz
ends