COMMENT: Why ‘connecting smart’ is the smartest thing you can do to prevent cybercrime

This week saw the launch of the government’s Connect Smart programme for its second year. Microsoft is very pleased to again be a Connect Smart partner, and to see that the partner community has grown from 40 to 100 organisations over the past year.

Connect Smart is both timely, and very important. The past twelve months have seen a relentless increase in high profile cyber-attacks on major organisations, ranging from Sony Pictures and JP Morgan Chase to the US federal government, which recently saw hackers gain access to 14 million personnel records.

As we look forward, we should expect that this problem will only continue to grow. Aside from the rising tide of state-sponsored attacks, there is big money to be made. Earlier this year, it was revealed that a group of Russian, Ukrainian and Chinese cyber criminals – called the Carbanak group – stole $1 billion dollars from 100 banks. Microsoft’s research indicates that, globally, the economic value of cybercrime has now surpassed the value of the global trade in illicit drugs.

When we look at New Zealand we see a similar pattern, albeit on a smaller scale. It is clear that New Zealanders from all walks of life are exposed to this rising tide of cyber security risks, which is impacting on government, businesses – both large and small – as well as our voluntary and community organisations and individuals.

When we think about what we can do to combat this, one of the best things is to start with an understanding of the most common cybersecurity myths. From my perspective, the most pervasive myth that needs to be busted is the idea of “it doesn’t happen in New Zealand” or “it won’t happen to me”. Nothing could be further from the truth.

New Zealand is fully connected to the global digital economy, and presents as attractive a target to criminals as anywhere else in the world. Believing that physical distance and our small size somehow protect us from cybercrime is a folly and gives some explanation for the relatively complacent approach to cyber risks revealed in research undertaken by Connect Smart in 2014.

So, take it from me – cybercrime is happening in New Zealand, and it can happen to you, or your business. In fact, it may have already occurred without you knowing it.

Globally, the average length of time attackers spend inside a large corporate IT environment before being discovered is over 200 days. The question is, what could or should you do about this? The answer is not “Stop using the Internet”. The best response is to become educated about the risks you are exposed to, and what you can do to reduce them.

Some of the most useful information I’ve seen on cybersecurity comes from Symantec, in this article called “Debunking Cyber Security Myths”, which lists the most common assumptions that need to be challenged.

Myth #1: Malware is something I should only worry about for my desktop and laptop computers.
Myth #2: Social networks are where my friends hang out. No malware there!
Myth #3: Apple computers and products are safe from viruses, so I don’t have to worry (I use 3^rd party security software on my MacBook!)
Myth #4: My computer is safe; I’m using some free antivirus I got online.
Myth #5: I can tell if my computer has an infection. It will behave strangely and stop working.

Developing an awareness of the realities of cyber risks is one of the most important things each of us can, and should, be doing to protect ourselves, our families and friends and our organisations.

For more helpful information on cybersecurity from Connect Smart, visit www.connectsmart.govt.nz

Microsoft also produces a wealth of information to help our customers in understanding and addressing cybersecurity risks. Check out some of these links, which I hope you will find useful:

Russell Craig
National Technology Officer, Microsoft New Zealand