Joint fact sheet for critical infrastructure leaders on Volt Typhoon activity

In February this year, the NCSC joined international partners in publishing a Cyber Security Advisory(external link) regarding both the observed activities of the People’s Republic of China (PRC)-linked state sponsored actor ‘Volt Typhoon’, and how network defenders can mitigate these efforts. Today, the NCSC along with 10 international partners are publishing an additional fact sheet relating to this actor specifically for the owners and operators of critical national infrastructure so they can better secure their assets against this activity. 

This fact sheet provides an overview for executive leaders on the urgent risk posed by the PRC state-sponsored cyber actors known as ‘Volt Typhoon.’ Previous advisories released by CISA warned cyber security defenders that Volt Typhoon has been pre-positioning themselves on U.S. critical infrastructure organisations’ networks to enable disruption or destruction of critical services in the event of increased geopolitical tensions and/or military conflict with the United States and its allies. This is a critical business risk for every organisation in the United States and allied countries.

The NCSC and other authoring agencies are releasing this fact sheet to provide leaders of critical infrastructure entities with guidance to help prioritize the protection of critical infrastructure and functions. The authoring agencies urge leaders to recognise cyber risk as a core business risk. This recognition is both necessary for good governance and fundamental to national security.

For more NCSC NZ updates, follow us on LinkedIn(external link).