Alliance Stands Up Advanced Cyber Threat-Management System
NATO’s Communications and Information (NCI) Agency has announced the alliance’s security incident and event management (SIEM) system has been successfully upgraded, under budget and ahead of schedule.
The Agency awarded a €7.8million contract in September 2020 to the Croatian firm KING ICT d.o.o., and the system reached full operational capability (FOC) last month. The project forms part of the Capability Package 120 programme which has been designed to “refresh and enhance cyber security capabilities used by the NATO Cyber Security Centre [NCSC] in support of its services,” the Agency stated.
SIEM systems – which can involve hardware, software, and/or managed services – take the alerts generated automatically by hardware and applications running on a network and conduct analysis of them, which is delivered in real time to administrators and network security teams. The systems also assist with the logging and reporting of security incidents. Automating elements of this process helps speed up the defensive response to cyber security incidents, and should also enable organisations to embed lessons learned following incidents.
The Agency says the new capability “has a more robust and powerful high-capacity infrastructure, enabling experts to analyse and correlate vast amounts of data, which is critical in a more connected world.”
“Final acceptance of this project’s deliverables marks the conclusion of a successful collaboration between NATO and industry,” commented Jeroen Pinas, NCSC Senior Project Manager, appearing to confirm that managed services do not form part of this contract. “This project was completed within scope, cost and ahead of schedule and demonstrates that NATO and industry can be extremely effective when they join forces to successfully deliver NATO contracts.” NCSC cyber security programme delivery branch head, Frederic Jordan, added: “The project teams on both sides have demonstrated exemplary flexibility given pandemic-related constraints, and set a very high bar for our future projects. There will be more industry opportunities in other tranches of the CP120 Programme in 2022.”