Author: Matthew Miller

Quick Overview

• Victoria Police reestablishes IT support agreement with Kinetic IT worth $185 million.
• Collaboration endures over ten years, now valued at $508 million.
• Renewal enhances Victoria Police’s digital evolution objectives.
• Latest projects include a mobile app for on-the-spot fines and improved online reporting.

Victoria Police’s Dedication to IT Advancement

Victoria Police has reiterated its confidence in Kinetic IT by renewing a $185 million contract to prolong their IT support partnership for a further three years. This collaboration, which initiated in 2015 with an original $164 million agreement, has expanded significantly over time, now amounting to a total worth of $508 million.

Strategic Digital Evolution

The renewal plays a crucial role in Victoria Police’s extensive digital evolution strategy. The agency is focused on upgrading its technological framework to effectively tackle changing societal, economic, and technological demands. A recent digital strategy report reveals that Victoria Police intends to invest heavily in digital innovations and skill enhancement.

Recent Digital Endeavors

In line with its objective of modernization, Victoria Police has launched various digital projects. Among these is the digitization of roadside fine notices, enabling officers to issue penalties through a mobile application. Furthermore, the agency has improved its online reporting options for non-emergency incidents through its enduring collaboration with the police assistance line contractor, Serco.

Conclusion

The renewed collaboration between Victoria Police and Kinetic IT represents an ongoing commitment to bolstering its IT systems and capabilities. This renewal not only highlights the significance of technology in law enforcement but also showcases Victoria Police’s proactive stance in adopting digital evolution to better assist the community.

Common Questions

Q: What is the monetary value of the renewed contract between Victoria Police and Kinetic IT?

A: The renewed contract is valued at $185 million.

Q: How long has Victoria Police collaborated with Kinetic IT?

A: Victoria Police has been collaborating with Kinetic IT for more than ten years, starting in 2015.

Q: What is the overall worth of the collaboration between Victoria Police and Kinetic IT?

A: The collaboration is currently valued at $508 million.

Q: What recent digital projects has Victoria Police undertaken?

A: Recent projects comprise the digitization of roadside fine notices via a mobile app and an upgraded online reporting system for non-emergency incidents.

Q: What is the goal of Victoria Police’s digital evolution strategy?

A: The strategy seeks to improve the agency’s capacity to respond effectively and efficiently to social, economic, and technological shifts.

Brief Overview

• The International Criminal Court (ICC) identified a “complex and directed” cyber assault.
• This marks the second notable cyber event targeting the ICC in recent years.
• Information regarding the attackers or precise details of the incident remain confidential.
• This event follows the ICC’s issuance of arrest warrants for Vladimir Putin and Benjamin Netanyahu.
• Neither Russia nor Israel, which are implicated, are members of the ICC.

ICC Cybersecurity Breach Disclosed

The International Criminal Court (ICC) has announced a “recent, complex and directed” cyber assault that has taken place. The court has confirmed that the situation has been controlled, marking the second instance of such an event in recent years.

Background of ICC Cyber Incidents

In 2023, the ICC faced a major cyber assault, leading to weeks of operational difficulties as the court disengaged from most online systems. The details of that incident, including the attackers’ identities, were never revealed.

Geopolitical Consequences

The recent cybersecurity breach coincides with the ICC’s issuance of arrest warrants for President Vladimir Putin, concerning alleged child deportations from Ukraine, and Israeli Prime Minister Benjamin Netanyahu, linked to the situation in Gaza. Both Russia and Israel contest these actions and deny the ICC’s authority, emphasizing the intricate geopolitical backdrop of the court’s operations.

Conclusion

The latest cyber assault on the International Criminal Court highlights ongoing cybersecurity issues encountered by international organizations in a complicated geopolitical environment. As the ICC progresses with its judicial responsibilities, the incident raises concerns regarding the safety of sensitive international legal processes.

Q&A Segment

Q: What measures has the ICC implemented following the cyber assault?

A: The ICC has indicated that the incident has been managed, although specific measures taken have not been publicly shared.

Q: What could be the underlying motives for the cyber assault on the ICC?

A: While the motives remain unverified, they may be associated with the ICC’s recent legal pursuits involving prominent global figures such as Vladimir Putin and Benjamin Netanyahu.

Q: What effect does this cyber assault have on the ICC’s operations?

A: Previous cyber incidents have resulted in operational interruptions, including severing connections to online systems. However, the ICC has not disclosed particular effects from the most recent assault.

Q: Are there any suspected groups behind the assault?

A: The ICC has not disclosed any details regarding the identity of the attackers or their possible affiliations.

Q: What steps does the ICC take to improve cybersecurity in the future?

A: Although specific strategies are not detailed, the ICC likely implements a variety of cybersecurity measures to safeguard its infrastructure and information.

Quick Overview

• Sportsbet introduces a ‘security champions’ initiative featuring 42 senior employees.
• The concept is influenced by AWS’ security guardians program.
• Security champions function as advocates, encouraging early threat modelling.
• The initiative seeks to integrate security into all delivery teams.
• An initial pilot with 10 engineers yielded positive outcomes.
• The program intends to minimize last-minute security evaluations.

Overview of Sportsbet’s Security Approach

Sportsbet has taken a notable step towards improving its cybersecurity stance by enlisting 42 senior personnel as ‘security champions’. This initiative aims to incorporate security considerations at the project’s onset, a method known as ‘shift-left’.

Insights from AWS

The initiative is inspired by AWS’ security guardians program, which highlights the importance of frequent and early security evaluations. These guardians work collaboratively with central security teams to enhance security standards while enabling quicker product launches.

The Function of Security Champions

Mirroring AWS’ methodology, Sportsbet’s security champions are responsible for executing threat modelling and posing essential security inquiries during the development phase. This forward-thinking method seeks to avert last-minute security approvals and ensure effective security protocols are established prior to product launches.

Formalizing Security Initiatives

Before the program’s inception, Sportsbet operated with informal security methods across its 25 delivery teams. The organization identified an opportunity to formalize these actions and broaden them across all teams. The objective is to promote consistent threat modelling and secure mindset throughout the project design stages.

Pilot Program Observations

The pilot program, launched in the third quarter of the previous year, engaged 10 engineers acknowledged as ‘security friends’. These individuals naturally identified security issues and assisted their teams with secure methodologies. The pilot aimed to officially support and widen these natural behaviors.

Outcomes of the Pilot

Security solutions consultant Paul Johnson highlighted the favorable results of the pilot. Champions dedicated two hours each week to the program, participating in onboarding and communicating with fellow champions through a specific Slack channel. The initiative aligns with the STRIDE threat modelling framework and has resulted in innovations such as custom plug-ins for threat modelling.

Evaluating Success

While quantitative indicators like time savings in security evaluations are apparent, qualitative factors, including enhanced team involvement and greater willingness to raise security concerns, are also vital signs of the program’s success.

Confronting Challenges

Obstacles emerged, such as the necessity to clearly outline the champions’ roles to prevent them from being perceived as mere extensions of the security team. Johnson stressed the significance of effective communication regarding the responsibilities of champions.

Conclusion

Sportsbet’s security champions initiative aims to integrate security considerations early in the development process, reducing last-minute security challenges and promoting a secure mindset. Influenced by AWS, the program has already shown positive outcomes, both quantitatively and qualitatively, and is set to become a critical element of Sportsbet’s cybersecurity strategy.

Q & A

Q: What is the goal of Sportsbet’s security champions initiative?

A: The initiative aims to incorporate security early in the development cycle, fostering proactive threat modelling to avert last-minute security challenges.

Q: How does the initiative take cues from AWS?

A: It follows the AWS security guardians approach, ensuring early and consistent security considerations to enable quicker and safer product delivery.

Q: What were the results of the pilot initiative?

A: The pilot generated innovations like custom threat modelling plug-ins and showcased time savings in security evaluations, alongside improved team collaboration.

Q: How are security champions selected?

A: Champions are senior personnel acknowledged for their proactive security approach, guiding their teams and participating in secure methodologies.

Q: What challenges surfaced during the initiative?

A: Significant challenges included clarifying the champions’ roles to prevent them from being viewed as an extension of the security team and ensuring transparent communication about their duties.