An Adaptive Wideband Delphi Method to Study State Cyber-Defence Requirements

Abstract

Background-Edward Snowden's revelations of the extensive global communications surveillance activities of foreign intelligence services have led countries such as Indonesia to take concrete steps to enhance protective information security for classified data and communications. Objective -This paper develops the Wideband Delphi Method to study the Indonesian Government's requirements for cyber-defence in response to reported secret intelligence collection by the Australian Signals Directorate (ASD). It provides a clearer understanding of the issues that influence Indonesian policymakers' views on the mitigation of foreign surveillance. Method -We developed and conducted an Adaptive Wideband Delphi Study with senior Indonesian officials, with group discussions and individual sessions to explore how to mitigate the surveillance activities of the "Five Eyes" (the US-UK-Canada-Australia-New Zealand) intelligence alliance. We used the US National Security Agency (NSA) framework of the three elements of Defence in Depth (people, operations, and technology), in combination with governance and legal remedies, as an analytical framework. Results -We identified twenty-five mitigation controls to deal with the priority concerns of policymakers, which were divided into the five defences in depth elements. Conclusion -We discuss the key requirements for protection against foreign surveillance to be taken into account in state cyber-defence frameworks, and suggest effective mitigation controls for safeguarding and protecting states' national interests.

Investigating Security Capabilities in Service Level Agreements as Trust-Enhancing Instruments

“…Understanding the perceived threats can drive security requirements. Thus, security requirements play an important role in mitigating threats, such as unauthorised disclosure data by foreign intelligence services [19,35]. However, our participants confirmed that understanding the government security requirements was essential in offering trustworthy services to the GAs.…”

“…However, we only conducted interviews and individual feedback with six participants (n=6) from two selected SPs. The two providers are the major SPs in Indonesia, and their network infrastructures were reported to be compromised according to Edward Snowden's revelations in 2013 [19].…”

“…An important similarity between these methods is the integration of GT analysis and a group communication processes. One of the differences is that the GADM is based on a Policy Delphi approach [29] and an adaptive Wideband Delphi method [19], which aim to suit the different views of individual participants on specific matters, with greater generalisability across different participants. The GT analysis is well suited for capturing these different views from the participants.…”

“…To this end, we conducted a longitudinal study of the government auctions in Indonesia to find "auction winners" or major external SPs, which were then contacted to do extensive face-to-face meetings as the application of GADM. In this paper, we adopted an adaptive wideband Delphi study [19] to enable the surveying of multiple panellists from major SPs through group discussions to clarify existing security-SLAs, along with individual sessions through semi-structured interviews to gather genuine knowledge and experiences in relation to the current and potential attributes of security-related SLAs. We analysed the Delphi study data using a grounded theory analysis to categorise and generalise the extracted statements.…”

Implementation of Secure Smart Grid as Critical Information Infrastructure in Indonesia: A Case Study in Smart Grid Electricity

“…Related to national cyber security defense, other studies conducted by Yudishthira. He identified mitigation controls in relation to the five defence in depth elements: people, operations, technology, governance and legal remedies for state cyber defense [6].…”