- Posted October 29, 2024
- Media Releases
The New Zealand intelligence agencies have today launched new security guidance to help protect emerging technology companies from a range of threats, particularly those posed by foreign-state actors.
Secure Innovation: Security Advice for Emerging Technology Companies has been published by the New Zealand Security Intelligence Service (NZSIS) and the Government Communications Security Bureau’s (GCSB) National Cyber Security Centre (NCSC).
The guidance is created for the New Zealand technology sector, including start-ups, and has been published alongside similar, best practice advice from security intelligence agencies from Australia, Canada, the United Kingdom and the United States.
The release follows last October’s unprecedented summit in Palo Alto, California, which brought together the heads of the Five Eyes domestic security and intelligence agencies to highlight the threats and announce Five Shared Principles to protect technology companies.
NZSIS Director-General of Security Andrew Hampton said the Secure Innovation advice provides the tech sector with a set of cost-effective measures companies can incorporate to better protect their ideas, reputation and future success.
“The idea is that security becomes built into everyday business practices right from the start in a way that doesn't inhibit innovation, but rather supports a start-up to be more robust, resilient, and ultimately more attractive to investors and customers.”
Mr Hampton said foreign states are actively looking to gain advantage by stealing emerging technology or intellectual property that would advance their own industries or national capabilities, including technologies that have dual-use military applications. Espionage activity can be be carried out in person or remotely through cyber means.
“We know a small number of foreign states conduct espionage against New Zealand and New Zealanders, which reinforces why this advice published today is timely and important.”
GCSB Director-General Andrew Clark said New Zealand has built a world-class technology sector but that success can come with risks.
“New Zealand start-ups can be an attractive target for espionage and malicious cyber activity from state actors, but also competitors seeking commercial advantage, and criminal gangs looking to profit from weak security in order to exploit data relating to assets, customers and people.”
Today’s announcement demonstrates the increased commitment from all Five Eyes nations to work collaboratively against this shared threat. Businesses in Australia, Canada, New Zealand, the UK, and the US can take advantage of Secure Innovation products now available across all Five Eyes countries.
This means companies can benefit from consistent and consolidated advice reflecting the global nature of the security threats start-ups face.
ENDS
The Five principles of Secure Innovation: Security Advice for Emerging Technology Companies:
- Know the threats – understand the potential vulnerabilities that might put your product or innovation at risk.
- Secure your business environment - create clear lines of ownership around the management of security risks in a business. Appoint a security lead at board level who factors in security considerations into decisions and initiatives.
- Secure your products - build security into the front end of your products by design. This will help protect your IP, make your products more marketable and ensure your products don’t become a supply chain vulnerability.
- Secure your partnerships - make sure the people you collaborate with are who they say they are and can be trusted with your company’s IP.
- Secure your growth - be aware of security risks as you expand, such as hiring new people into positions of trust and managing risk around entering new markets.
Media contact: media@ncsc.govt.nz