Guidance

CSSF cyber and technology programme lot 2: threat intelligence provision and support to defend against and deter cybercrime

Published 6 July 2021

© Crown copyright 2021

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/conflict-stability-and-security-fund-cyber-and-technology-programme-call-for-bids-2021-to-2022/cssf-cyber-and-technology-programme-lot-2-threat-intelligence-provision-and-support-to-defend-against-and-deter-cybercrime

Proposal

High-quality cyber threat intelligence and the capacity to analyse and act on it is essential for national CSIRTs and service providers to be able to effectively identify and mitigate risks.

For low and middle income countries, it is important that they are able to access this information and support free of charge. This will not only help protect those countries, reducing the spread of malware will also help protect the UK.

As a minimum, the following should be covered in the proposal:

  • Africa* and Indo-Pacific* [footnote 1] to be the primary focus
  • also to propose a potential offer to Central and Eastern European countries, based on your organisation’s own understanding of the region and its needs
  • free (for recipient countries) threat intelligence feeds to be provided to CSIRTs that do not already currently receive them
  • provision of training and tools for non-Commonwealth CSIRTs to automate interpretation of the threat reports they receive, together with guidance on how to engage with Internet Service Providers and other key stakeholders to share data so that it can be acted on
  • measures to support implementation of the UK-US G7 commitment to lead globally on countering ransomware attacks, e.g. work with one or two national CSIRTs to pilot development of effective cyber attack response strategies, including defence protocols, to mitigate the threat
  • a commitment to work with international law enforcement agencies

  1. countries not in scope: Africa (Democratic Republic of Congo, Republic of Sudan and Zimbabwe); Indo-Pacific (North Korea, Myanmar (Burma), China and its territories (including Hong Kong and Macao). NB: in terms of scope, treat Africa as the continent and the Indo-Pacific as the space between the Indian Ocean and the Pacific Ocean starting with Pakistan and India at its north and western point and with New Zealand and the Pacific Islands at the most southern and eastern point. ↩

Back to top