New Zealand agencies issue security guidance for tech start-ups
The New Zealand Security Intelligence Service (NZSIS) and the Government Communications Security Bureau's (GCSB) National Cyber Security Centre (NCSC) have released new security guidance for emerging technology companies in New Zealand, focusing on threats from foreign-state actors.
The guidance, titled "Secure Innovation: Security Advice for Emerging Technology Companies," is designed for New Zealand's technology sector, including start-ups. This release coincides with best practice advice from partner security intelligence agencies in Australia, Canada, the UK, and the US. The guidance's formation follows a summit in Palo Alto, California, last year, where the heads of the Five Eyes domestic security and intelligence agencies emphasised the importance of protecting technology companies.
Andrew Hampton, Director-General of Security at NZSIS, expressed the intent behind the new guidance. "The idea is that security becomes built into everyday business practices right from the start in a way that doesn't inhibit innovation, but rather supports a start-up to be more robust, resilient, and ultimately more attractive to investors and customers," he stated. The guidance offers cost-effective measures to safeguard companies' intellectual property and reputation.
Hampton highlighted the risks posed by foreign states seeking to advance their own industries or national capabilities through espionage. Foreign entities may target technologies with dual-use military applications, utilizing methods ranging from in-person espionage to remote cyber attacks. "We know a small number of foreign states conduct espionage against New Zealand and New Zealanders, which reinforces why this advice published today is timely and important," Hampton remarked.
Andrew Clark, Director-General of the GCSB, acknowledged the strength of New Zealand's technology sector while warning of corresponding risks. "New Zealand start-ups can be an attractive target for espionage and malicious cyber activity from state actors, but also competitors seeking commercial advantage, and criminal gangs looking to profit from weak security in order to exploit data relating to assets, customers and people," he said.
This collaboration among the Five Eyes nations underscores a collective commitment to counter shared threats. The availability of Secure Innovation products across these countries enables businesses to access consistent and comprehensive advice, addressing the global dimension of security challenges faced by start-ups.
