Cyber Primer

Integrating cyber operations
consider cyberspace to be an area of intelligence collection and analysis in its
own right. Intelligence support to operations within cyberspace is essential
to provide knowledge, reduce uncertainty, and support effective operational
decision-making in defending Defence networks. It is not different to the
intelligence support function on traditional operations – the outputs will
include providing timely indicators and warnings.
4.10. Cyber cannot be dealt with by one business, government department
or agency alone. Each has their own specific responsibilities and expertise.
Defence’s main aim is to protect its own systems and networks so that it can
continue to carry out its missions.
4.11. National cyber activities. The UK Cyber Security Strategy provides
the strategic framework for all UK Government activity on cyber security.
Government, business, the public and international partners all have a
part to play because a coherent approach to cyber security is required.
Protecting our own and other states’ critical national infrastructure, as well as
providing advice to the public and industry, is a matter for other government
departments and agencies. Key UK Government organisations are identified
below.
a. Office of Cyber Security and Information Assurance (OCSIA) is a
directorate in the Cabinet Office and provides strategic leadership
across Government for UK cyber security issues. OCSIA works closely
with the Government’s Chief Information Officer in the Cabinet Office.
b. Government Communications Headquarters (GCHQ) works
in partnership with other government departments to protect UK
national interests. Director GCHQ reports to the Secretary of State for
Foreign and Commonwealth Affairs. Their primary customers are the
Ministry of Defence (MOD), the Foreign and Commonwealth Office
and law enforcement agencies.
c. CESG 51 (a part of GCHQ) is the national technical authority for
information assurance within the UK. It has the lead responsibility
within government for providing advice on information assurance
51 CESG is an initialisation of Communications Electronics Security Group, but that title is
no longer used and the organisation is simply known as CESG.
70
Cyber Primer (2nd Edition)