Nato supports collaboration on cyber security

More work to be done

However, Missiroli said there is still more work to be done because the threat continues to grow and evolve, adding that the pledge has been a useful mechanism to galvanise and catalyse improvement.

In addition to the work by allies, he said Nato has undertaken “significant” policy and organisational adaptation in response to the recognition of cyber space as a domain of operations at the 2016 summit.

“Milestones include the setting up of the cyber space operations centre in Mons, Belgium, which will provide situational awareness and coordination of Nato activity in cyber space; the approval of a military vision and strategy for the cyber space domain; and the agreement on how to integrate cyber effects, provided voluntarily by allies, into alliance operations and missions,” said Missiroli.

However, he noted that the recognition of cyber space as a domain of operations does not change Nato’s defensive mandate, adding that Nato has explicitly affirmed the applicability of international law to cyber space.

“We support work to maintain international peace and security in cyber space and to promote stability and reduce the risk of conflict. We recognise that we all stand to benefit from a norms-based, predictable and secure cyber space.

“Our goal in recognising cyber space as a domain of operations is simply to ensure that we can operate as effectively as we do on land, at sea and in the air. In short, our goal is to make cyber space a daily and normal part of our business.”

Cyber defence a team sport

Although a cliché, Missiroli said it remains true that cyber defence is a team sport. “Nato cannot and should not go it alone. We are only made better by sharing more information and the more we can pool best practices and interoperate with partners,” he said, adding that Nato currently engages with more than 40 partner countries based on shared values and common approaches.

Nato also helps to foster dialogue and practical cooperation in partner countries through the Science for Peace and Security Programme, taking steps, for example, to intensify cooperation with the European Union, particularly in the areas of information exchange, training, research and exercises.

However, Missiroli said Nato must continue to look beyond Europe in light of the fact that partner nations such as Australia, New Zealand, Japan and South Korea have all invested heavily in cyber defence. “And it will serve us well to continue to build these relationships.”

Nato also recognises the importance of the private sector, he said. “It is the private sector, after all, that develops and operates the vast majority of networks worldwide and our continuous interactions with industry partners helps provide advance notice and rapid mitigation for many activities that have been detected against systems in allied nations and against Nato itself.

“Information sharing goes both ways. Industry shares with us and we also share with industry. In the WannaCry  and NotPetya attacks, for example, we quickly reached out to our industry partners and the information exchange was critical for getting the most up-to-date picture of a rapidly-evolving and complex situation.”

Nato needs to do more

Moving forward, Missiroli said that given the cutting-edge developments in the cyber domain, such as artificial intelligence, Nato will need to do more to capitalise on the power of industry and academia.

“I hope it is clear that Nato has made significant progress in the cyber space domain as individual allies, as Nato and as partners,” he said.

“While affirming Nato’s defensive mandate, we have expressed our determination to employ the full range of capabilities, including cyber, to deter, to defend against and counter the full spectrum of cyber threats, including those conducted as part of a hybrid campaign.

“The threats of cyber space are real, and they are certainly not going away any time soon, so Nato will continue to adapt and evolve to meet these threats, and we do so not alone, but with all our partners,” concluded Missiroli.