Garda Bureau of Fraud Investigation Computer Crime Investigation Unit Sgt Paul Johnstone LLB MLitt An Garda Síochána Cybercrime and Cyber Risks Credit Unions 26 th Jan 2016

Intended Learning Outcomes  Computer Crime Investigation Unit  Role of CCIU  Unit Capabilities  Interaction with unit partners  Risk analysis – Credit Unions  Mitigation  Unit contacts

D/Chief Superintendent D/Superintendent Inspector Administration Forensics Clerical Staff (3) D/Sergeant CFEII Forensics D/Gardaí (8) CFEII Forensics D/Gardaí (8) CFEI Triage Gardaí (3) Sergeant R & D Forensics Training Computer Crime Investigation Unit Est 1991

Role of the CCIU….  National Central Reference Point for Computer Forensics and Hi Tech Crime Investigations  Assist and advise other Garda members in the seizure and recovery of computer evidence  The Forensic (SECURE) examination of all computer related media in criminal/governmental/civil investigations  Via ‘Interpol’ to liaise with other NCRP’s in relation to computer crime  Conduct enquiries for Europol – external agencies  To advise on Security Measures and Prevention Techniques for combating cybercrime.  Training courses – civilian/military/law enforcement  AOB

 Cases  Distribution of Child Pornography – (circa 60%)  Distributed Denial of Service attacks (DDoS)  Online Frauds  Internet Abuse - Hacked ‘Websites’, Harassment  Searches and search scene advice  Liaison with international agencies – Europol, Interpol  PABX Frauds  Suicide/Missing Persons  CCTV and Mobile device examinations  Evidence retrieval - Major Investigations  Murder, Rape, Drugs, Extortion, Criminal Assets, Discipline etc.  Any process in which computers are involved Operational Activities…

Unit Capabilities 1. Forensic examinations of computer media Usual STORAGE MEDIA and unusual HARD DRIVES. SMART CARDS, FLASH CARD PDA’s And the Fridge (not joking)

Garda Bureau of Fraud Investigation Networks….  Windows  Linux  Wired  Wireless  Local

Interaction with Unit Partners Banking and Payments Federation of Ireland Insurance Federation of Ireland Central Bank – others through MLIU and Cards Section Data Protection Commissioner ComReg LE Partners – Europol/EC3/Interpol/FBI/NCA/etc Government Departments – IRISS Internet Service Providers Association of Ireland Academia – UCD/TCD/Queen Mary Univ (London) Industry – Microsoft/IBM/Apple/Facebook/Google/etc

Risks for Credit Unions Same as any institution with online presence DDoS attacks CEO frauds Phishing attempts – If mobile banking SMShing Same as any institution with offline presence Data Protection Fraud BYOD

Mitigation Robust IT Policy – Sec 55 Credit Union Act 1997 as amended Strong protection of systems – Antivirus/Firewall/Cloud/Backup/updates/encryption... IT provider – Big enough then work with security company Secure Wi-Fi BYOD policy Log on Protocols Password Policy – change and share Strategic Plan – Fitness and Probity (CF and PCF) – Central Bank Regulation – trust staff (internal and external) Training – DPA and IT security CEO fraud – know addresses and suppliers. Two step check on outgoing electronic payments

UNIT CONTACT DETAILS Computer Crime Investigation Unit Garda Bureau of Fraud Investigation Harcourt Square Harcourt Street Dublin 2 D02 PT89  Tel: /96  Fax: 

Questions !!!!!!!!