Report of the COI into the Cyber Attack on SingHealth 10 Jan 2019
COI Report – Part VII Page 338 of 425 practices, and that the CII sectors consider whether to establish forums for such sharing on a regular basis. 42.4 Using a network to defend a network should be explored 981. An advanced technique or strategy that maybe considered for the longer- term is using a network to defend a network. This can be done by establishing a behavioural analytic capability, with an expert system and hunt platform, to provide network speed information to a collective cybersecurity platform for the sector and to the government. Gen. Alexander called this his most important recommendation, as the ability to see across companies and sectors allows the elimination of threats that are invisible to anyone company or sector. 982. Behavioural analytics make collective defence a possibility, and produces a wealth of events that can be shared in a collective defence strategy at network speed. As noted by Gen. Alexander, if the government has the opportunity to see data gathered by enterprises from behavioural analytics, the government will be able to map such data onto classified intelligence, and can inform the sectors of which behaviours they need to focus on, and what remedial action to undertake as a priority. Gen. Alexander opined that “[i]t is ironic that the network and associated devices have become the biggest technological advances of our time, yet we don't use a network to defend a network”. 983. As behavioural analytics is an advanced technique or strategy, it may not be necessary to immediately implement this recommendation. Even in the United States of America, behavioural analytics are still in the initial pioneering phase in their healthcare sector. CE, CSA’s evidence is that cybersecurity is still a nascent area within Singapore’s ecosystem. As such, before enterprises adopt more advanced new technology or methods, enterprises should first ensure that they get the basics right in the short-term. Even as Singapore works on getting the basics of cybersecurity right in the short-term, the sectors should continue to monitor developments in behavioural analytics and other advanced technology. This could involve dialogues with vendors of commercially available products to gain abetter understanding of the products, test them, and discover their
