Cyber Crime What’s all the fuss about? Introduce myself, Lead Cyber Crime Trainer for the past 2 years. Now in a new role for the Force, DMC, coordinating the activity for 30 DMI’s across the force. I’ve been asked to talk to you about ‘Cyber Crime’ which is such a massive topic area. Don’t worry I’m only going to talk for about 30 mins so will just briefly some of the areas that effect day to day policing . I’m going to start with a short video.

This demonstrates the vast quantity of data and traffic that the use of the internet allows. 700,000 people log on to Facebook 500,000+ photos shared via Snapchat 38,000 posts to Instagram

This just shows the scale of the online world and the access we have to it. Although the Internet of Things (IOT) allows us to have access to heating, lighting, etc etc via the touch of your smart phone it in turns brings with it risk and vulnerabilty.

3.9 Million cyber crimes reported in 12 months (2016) 28% of businesses reported attacks to Police Cost to UK economy... £49 Billion in 2014 Average breach costs £1.46M to £3.14M (large company) 500 Million new viruses in 2015 3000 DDoS attacks per day 500K phishing attempts per day (93% ransomware) 3.9 Million cyber crimes reported in 12 months (2016) this is up from 2.5M in 2015 28% of businesses reported attacks to Police Cost to UK economy.......£27 Billion in 2011 → £49 Billion in 2014 Average breach costs £1.46M to £3.14M (large company) 500 Million new viruses in 2015 3000 DDoS attacks per day 500K phishing attempts per day (93% ransomware) 80% of all security breaches could be avoided by better housekeeping!!!

So what are the risks?

PHISHING It’s estimated that 1, 580, 000 phishing emails are sent daily. Examples here are ones I’m sure all have seen or received. Phishing – Email sent for example from your bank ‘Dear valued customer just click this link to update you security settings’. The average Phisher may send 2,000,000 emails a day, 100,000 can reach a computer user, 5,000 respond to the email, 100 enter their personal details, £1200 from each person- there is a potential profit of £120,000 pounds IN ONE DAY. In 2013 an estimated £59 million worth of fraud was prevented through the arrest of 3 men traced to the UK who ran a sophisticated phishing scam. They had set up more than 2600 phishing pages that mimicked banking websites, used 70 million customer email addresses and gaining access to the banking details of over 30,000 customers.

MALWARE Malware – Malicious software, often poor housekeeping can lead to people clicking links, downloading software that the user won’t realise has compromised their computer Ransomware is something we are seeing a lot of. This is generally as a result of clicking on a link by an employee which triggers encryption of your whole network and the screen above then explains how you must pay a ‘ransom’ to obtain a key to be able to decrypt your systems.

INSIDER THREAT It is believed that people are responsible for 90 % of security incidents. Think of the contractors, cleaners and visitors to a business... Or perhaps an employee that is offered money for stealing data..... Or an ex employee that still has logins/passwords to computer systems......

The affect of Cyber Crime on your business #protectyourworld #protectyourworld is a link to Youtube Video of 3 case studies that we used as part of the campaign in Sept 2016, #protectyourworld

So what can you do?

Back up! Protect your systems so if you are a victim you can continue your business without any loss of data. Educate your staff! Educate staff to the risks, clicking on links, downloading from untrusted sources, or responding to urgent requests to change payment details. Check before doing anything!!! Protect your passwords! Consider who has access to passwords, privileged users and change when they leave the business. Report it!! Action Fraud; UK’s national fraud and internet crime reporting centre. Unless reported the true scale can’t be established.

Find out more www.cyberaware.gov.uk/cyberessentials “Government backed and industry supported scheme to guide businesses in protecting themselves against cyber threats” “Self assessment with responses independently reviewed by an external certifying body” “Self assessment, external vulnerability scan, internal vulnerability scan and on-site assessment” I would direct all businesses to this site. The Cyber Essentials scheme provides businesses small and large with clarity on good basic cyber security practice. By focusing on basic cyber hygiene, your company will be better protected from the most common cyber threats. Cyber Essentials is for all organisations, of all sizes, and in all sectors - we encourage all to adopt the requirements as appropriate to their business. This is not limited to companies in the private sector, but is also applicable to universities, charities, and public sector organisations. Find out more www.cyberaware.gov.uk/cyberessentials

WEDNESDAY 30TH NOVEMBER 2016 We are holding a Cyber Security Event for Businesses together with Get Safe Online. Contact April via aprilmccoig@thamesvalley.pnn.police.uk The details are being finalised but will be confirmed by the end of the week and then a press release will go out. The event is free to all. It will be held from 9am til 12pm and include a number of speakers regarding keeping your business safe. It will be held (tbc) at the Cornerstone Arts Centre in Didcot. Parking is available and is a short walk from the train station. Any queries please ask them to contact April McCoig via email.