英国交通部网络安全政策更新.pdf

1、DEPARTMENT FOR TRANSPORT:CYBERISOBELTOWNSLEYOBE,HEAD OFCYBER(TRANSPORT),DFT8 MAY2025AGENDACyber as a threat to TransportHow DFT approaches cyberOverview of challengesOFFICIAL SENSITIVEPresentation Title(edit this in Insert Header and Footer,then click Apply to All)ActorMotivationStandard Methodology

2、State ActorGathering intelligence disrupting critical infrastructure,stealing intellectual property,and undermining geopolitical rivals.Highly skilled and well-funded zero-day exploits,supply chain attacks,sophisticated social engineering tacticsCriminalPotential for monetary reward.Phishing attacks

3、,ransomware,malware,identity theftTerroristsSpreading propaganda,disrupting critical infrastructure,and instilling fear through cyberattacks.Cyber attacks that cause physical harm or disrupt public services.Script KiddiesBoredom,curiosity,desire for notoriety in the hacking community.Low-sophisticat

4、ion attacks including targeting unpatched systems and weak passwords.Cyber-attack as a service purchases.HacktivistsPromote political,social,or ideological causes.Defacing websites,DDoS attacks,leaking sensitive information.Insider ThreatFinancial gain,revenge,ideological reasons.Use legitimate acce

5、ss to systems for data theft,sabotage,or unintentional breaches due to negligence.CYBER IN DFTDfT Digital Information Services&DfT Corporate Security TeamsResponsible for the cyber security of DfTc and DfT ALBS(incl.regarding DfT data security).Use GovAssureNSD Cyber TeamActs as a central cyber team

6、 for DfT,focus is cyber security of transport sector(road,rail,maritime&aviation).Acts as both policy lead and Regulator including for some DfT ALB transport operators.Enforces the Network&Information Systems Regulations 2018(NIS)for road,rail and maritimeDfT modal resilience tea