1. Friday 22nd April 2016 DS Chris Greatorex SEROCU
Fighting Cyber Crime
Friday 22nd April DS Chris Greatorex SEROCU

2. Introduction Police Officer for 11 years
Regional Cyber Protect Coordinator for SEROCU
To engage with, and develop relationships with companies and organisations within the region to promote cyber security, the role of the SEROCU CCU.

3. The Regional Units NCA Local Forces
Regional Organised Crime Units (SEROCU)
Local Forces
(Surrey, Sussex, Kent, Hampshire, Thames Valley)

4. The Four ‘P’ Strategy
Funding via the National Cyber Security Programme
2011 – £650 million – £1.9 billion
PURSUE – Criminal investigations and disruption activity targeting the top tier cyber threats
PREVENT – Stopping individuals becoming involved in cyber crime
PREPARE – Responding effectively to major cyber attacks and mitigating their impact
PROTECT – Helping businesses and the public to avoid victims of cyber crime

5. Cyber Crime In Numbers
2.5 Million cyber crimes reported in 12 months (2015)
28% of businesses reported attacks to Police
Cost to UK economy...
£27 Billion in 2011 → £49 Billion in 2014
SME average cost of a security breach £65K to £115K
500 Million new viruses in 2015
3000 DDoS attacks per day
500K phishing attempts per day
Maybe use IoD data?? More recent?

6. Peel’s First Principle
“The basic mission for which the police exist is to prevent crime and disorder”

7. Moving Focus
Report recommends “a greater focus on protect against and preparing for cyber crime” not just trying to pursue criminals
There is a clear need for more help to protect, prepare and educate SMEs
Constant requirement to review incidents, highlight lessons learned and share these experiences

8. It Is Preventable!!
80%
...of cybercrime is preventable (GCHQ)

9. The Risks Getting into your systems..
Insider (either innocent or malicious)
Phishing (spam)
Social engineering (spear phishing)
Hackers

10. Ransomware Currently targeting individuals → Moving towards businesses
Demands from £600+
No guarantees to get data back
Supporting criminality
Repeat victimisation
Backup using an external HDD
Do it regularly
Store backup securely
Cloud storage not immune

11. A Recent Investigation (Malicious Insider)
Richard Neale sent a “Wipe Command” to 900+ Aviva employees devices – BYOD
Further access and alterations made into companies systems
Tried to hide his involvement by using VPN’s but forensic investigation identified incriminating artefacts on his devices
Cost the company £500K
Convicted and serving 18 months
40 year old with a family

12. €20M General Data Protection Regulations Possible fines of 4%
of global
Turnover or
€20M

13. Tackling the UK Cyber Threat
Partnering with Industry and Academia
The Police cannot do this alone..
Law Enforcement
Academia
Tackling the UK Cyber Threat
Industry & Business

14. Police Response COLLABORATION
We work with the victims and Emergency Response teams to stop and repair damage and to ensure that evidence is captured.
TRUST
We understand that the reputational damage to a business is sometimes worse then the actual offence. We therefore operate confidentially.
SUPPORT
We are happy to investigate without taking a subject to court so that we can build the intelligence picture to protect UK PLC.
ASSISTANCE
We have access to international law enforcement and intelligence platforms and networks that could reduce repeat victimisation.

15. Cyber Essentials

16. 10 Steps to Cyber Security

17. Action Fraud

18. Cyber-security Information Sharing Partnership
Expand on notes here

19. CiSP – Regional Nodes
Expand on notes here

20. Thank You DS Chris Greatorex @SouthEastROCU