An Garda Sochna Cybercrime and Cyber Risks Credit

An Garda Síochána Cybercrime and Cyber Risks Credit Unions 26 th Jan 2016 Computer Crime Investigation Unit Sgt Paul Johnstone LLB MLitt Garda Bureau of Fraud Investigation

Intended Learning Outcomes ØComputer Crime Investigation Unit ØRole of CCIU ØUnit Capabilities ØInteraction with unit partners ØRisk analysis – Credit Unions ØMitigation ØUnit contacts

Computer Crime Investigation Unit Est 1991 D/Chief Superintendent D/Superintendent Inspector D/Sergeant CFEII Forensics CFEI Triage D/Gardaí (8) Gardaí (3) Sergeant Administration Forensics Clerical Staff (3) Sergeant R&D Forensics Training

Role of the CCIU…. ØNational Central Reference Point for Computer Forensics and Hi Tech Crime Investigations ØAssist and advise other Garda members in the seizure and recovery of computer evidence ØThe Forensic (SECURE) examination of all computer related media in criminal/governmental/civil investigations ØVia ‘Interpol’ to liaise with other NCRP’s in relation to computer crime ØConduct enquiries for Europol – external agencies ØTo advise on Security Measures and Prevention Techniques for combating cybercrime. ØTraining courses – civilian/military/law enforcement ØAOB

Operational Activities… §Cases ØDistribution of Child Pornography – (circa 60%) ØDistributed Denial of Service attacks (DDo. S) ØOnline Frauds ØInternet Abuse - Hacked ‘Websites’, Harassment ØSearches and search scene advice ØLiaison with international agencies – Europol, Interpol ØPABX Frauds ØSuicide/Missing Persons ØCCTV and Mobile device examinations ØEvidence retrieval - Major Investigations ØMurder, Rape, Drugs, Extortion, Criminal Assets, Discipline etc. ØAny process in which computers are involved

Unit Capabilities 1. Forensic examinations of computer media Usual STORAGE MEDIA and unusual HARD DRIVES. SMART CARDS, FLASH CARD PDA’s And the Fridge (not joking)

Networks…. v. Windows v. Linux v. Wired v. Wireless v. Local Garda Bureau of Fraud Investigation

Interaction with Unit Partners • Banking and Payments Federation of Ireland • Insurance Federation of Ireland • Central Bank – others through MLIU and Cards Section • Data Protection Commissioner • Com. Reg • LE Partners – Europol/EC 3/Interpol/FBI/NCA/etc • Government Departments – IRISS • Internet Service Providers Association of Ireland • Academia – UCD/TCD/Queen Mary Univ (London) • Industry – Microsoft/IBM/Apple/Facebook/Google/etc

Risks for Credit Unions Same as any institution with online presence • DDo. S attacks • CEO frauds • Phishing attempts – If mobile banking SMShing Same as any institution with offline presence • Data Protection • Fraud • BYOD

Mitigation • Robust IT Policy – Sec 55 Credit Union Act 1997 as amended Strong protection of systems – Antivirus/Firewall/Cloud/Backup/updates/encryption. . . IT provider – Big enough then work with security company Secure Wi-Fi BYOD policy Log on Protocols Password Policy – change and share • Strategic Plan – • Fitness and Probity (CF and PCF) – Central Bank Regulation – trust staff (internal and external) • Training – DPA and IT security • CEO fraud – know email addresses and suppliers. Two step check on outgoing electronic payments

UNIT CONTACT DETAILS Computer Crime Investigation Unit Garda Bureau of Fraud Investigation Harcourt Square Harcourt Street Dublin 2 D 02 PT 89 § Tel: +353 1 6663708/96 § Fax: +353 1 6663798 § Email: cciu. flo@garda. ie

Questions !!!!