Cyber security guidance for high-profile individuals
What does ‘high profile’ mean?
Individuals may become 'high profile' through the nature of their work and relationships. For example, you may be considered a high profile individual if you are:
-
an elected central or local government representative;
-
appointed to governance roles in major publicly traded companies or public sector organisations;
-
an academic or advisor who has expertise in a field of geostrategic interest (e.g. strategic studies, international relations, or advanced research);
-
a senior public servant with access to or influence over policy decisions, public expenditure, or information that impacts New Zealand’s national security.
-
a community leader or someone with a prominent role within a diaspora.
The list above is not exhaustive. If you are concerned that state actors might target you due to your role, influence or the activities you undertake then the advice in this guidance is for you. Please follow it.
As a high-profile individual, your cyber security practices need to be more thorough than the average person’s.
Understand the threats you face
Cyber threat actors including, nation state-backed actors, hacktivists, or cybercrime groups may seek to compromise your personal accounts and devices. These actors can be highly sophisticated, with many tools at their disposal.
Cyber threat actors will not differentiate between your personal and work life. They seek to understand where you store information of interest, and they use the path of least resistance to gain access.
The threat to high-profile individuals is real. There is documented evidence of both compromises and prevented attempts against New Zealanders. The National Cyber Security Centre’s (NCSC’s) Cyber Threat Reports detail the nature of the cyber threat against New Zealanders.
View the National Cyber Security Centre's annual Cyber Threat Reports(external link)
It is important to be aware of the tactics threat actors use so that you can stop them in their tracks.
The NCSC’s Own Your Online website is a practical resource you can visit to get simple, plain English descriptions of common threats and risks, along with guides about how to be cyber-smart and protect yourself.
Visit Own Your Online(external link)
We also publish active alerts and regular information on current threats. We recommend following us on social media.
Report a personal cyber incident
Reporting incidents as soon as possible is crucial in protecting yourself, your family and colleagues.
If you believe you are the victim of a cyber incident, contact us immediately and notify your workplace’s IT (Information Technology) support or security team to bring wider awareness of the threat.
Report an incident:
Reporting form for businesses and individuals(external link)
Contact us via phone:
0800 CERT NZ (0800 2378 69) in New Zealand or if you are overseas dial +64 3 966 6295. Calling us is free within New Zealand. Our call centre is open 7am to 7pm, Monday to Friday, and closed on public holidays.
Report national security concerns to the New Zealand Security Intelligence Service (NZSIS):
Reporting a national security concern(external link)
Our guidance for high-profile individuals
We have produced two downloadable resources for high-profile individuals:
Full guidance, setting out the cyber security steps high profile individuals need to take to protect themselves
A short four-stage cyber uplift programme - with checklist - to increase individual cyber security