Examining Bermuda’s Cybersecurity

A leading authority on cybersecurity will head a Bermuda workshop next week that could shape the future of the island’s defences against online attacks.

The Hon. Walter H. Roban JP MP Deputy Premier and Minister of Transport and Regulatory Affairs and the Hon. Wayne Caines JP MP Minister of National Security will host a Cybersecurity Framework Workshop on Wednesday September 20 to raise awareness of the need for cybersecurity preparedness.

The event will also showcase the National Institute of Standards and Technology (NIST) Cybersecurity Framework as one of the mechanisms that stakeholders can use to assess and manage risk.

The workshop is part of the Government’s larger effort to bolster the cybersecurity of Bermuda’s Critical National Infrastructure and achieve a higher level of information security maturity across the island by forging strong partnerships with key organizations responsible for cybersecurity - both within Bermuda and internationally.

By putting in place internationally-recognised, trusted and reliable mechanisms to address emerging and sudden cybersecurity threats, Bermuda will be well positioned to remain one of the world’s top jurisdictions for international business.

NIST (www.nist.gov/) was founded in 1901. It is now part of the U.S. Department of Commerce and is one of the oldest physical science laboratories in the U.S.

In 2013, NIST began developing a voluntary, risk-based Cybersecurity Framework – a set of industry standards and best practices to help organizations manage cybersecurity risks.

The resulting Framework, created through collaboration between government and the private sector, uses a common language to address and manage cybersecurity risk in a cost-effective way based on business needs without placing additional regulatory requirements on organisations.

Mr. Matt Barrett, Cybersecurity Framework Program Manager at NIST, will provide an overview of the NIST Framework, present an example of international adoption of the Framework, and explain the importance of having a framework in place to assess, mitigate and respond to cybersecurity risks.

Participants will appreciate the need for decision-makers at the highest levels of an organization to be engaged, together with the jurisdictional benefits of better cybersecurity awareness and preparedness on the Island.

The workshop will be held from 9am to 5pm on Wednesday, September 20, with registration taking place from 8am, at the Bermuda Underwater Exploration Institute and will feature diverse panel discussions. They include the current use of cybersecurity frameworks in Bermuda, enterprise risk management, the applicability and likely use of the NIST Framework by organizations in Bermuda, and steps that organizations can take to adopt and enact the value of a cybersecurity framework.

Minister Caines said: “We are seeing cyber-attacks taking place more frequently all over the world so it’s no surprise that cybersecurity is a priority for the government. Bermuda is committed to preserving its status as a blue chip jurisdiction as it finds itself a potential target, not the least because of its world-leading financial services and reinsurance sectors and by virtue of the highly valuable information that it holds in that regard.”

He added: “The work therefore rests with all of us and not just in the public and private sectors. In this information age, cybersecurity – indeed, information security– has become an important consideration for all of our residents, including working adults, seniors, students, parents and teachers.  It is also relevant across the community, also encompassing small and medium-sized businesses and non-profit organisations.

“Adequate cybersecurity is essential to supporting this administration’s objectives as laid out in this year’s Speech from the Throne, so we’re pleased to host this Cybersecurity Workshop as the country works to increase its cybersecurity preparedness.”

Those with an interest in cybersecurity and cyber risk management techniques, at all levels of an organization, are encouraged to attend.

Participants are welcome to register by going on www.gov.bm/cybersecurity-workshop. Lunch and light refreshments will be provided.

For more information, please visit www.gov.bm/cybersecurity-workshop or contact the Department of ICT Policy and Innovation at ictpolicy@gov.bm.