The Inter-Services Intelligence (ISI) and the Foreign Office will work together in order to protect itself from hackers following cyber attacks over the past 18 months.
The foreign ministry has sought an allocation of Rs80 million in the next fiscal year’s budget for bolstering cyber-security and securing its communications with the country’s missions overseas, an official told the Senate Foreign Relations Committee on Thursday.
The money sought for cyber security is 130 per cent more than the additional expenditure that the FO intends to incur on boosting the physical protection of its premises, which is Rs35 million.
The job will be done by “our premier security agency”, the official said in a reference to ISI.
The move comes as the FO strives to counter potential attacks in cyberspace by strengthening its readiness strategy. FO systems have over the past 18 months faced three major attacks. Paucity of resources has been identified as one of the reasons behind poor security arrangements of FO’s IT infrastructure.
The request for ramping up expenditure on cyber security implies both a renewed resolve to keep hackers out and a realisation that previous efforts proved to be insufficient.
“We have firewalls in place and our staff is regularly monitoring the situation, but we are continuously under cyber attack … our website, our emails, our servers have faced attacks,” the official explained to the senators.
“We have our own security system, but it is always good to get help from those who are experts,” the official said in response to a query from a member as he acknowledged the inadequacy of the existing internal arrangements.
The FO has already used the services of ISI for the security audit of its IT systems.
The official said that ISI might outsource part of the job to its “security cleared contractors”, because they too did not have a complete in-house facility. But, the FO by itself had never used private firms for this purpose, he added.
Some of the committee members had strong reservations on ISI being given the job.
Trying to address the members’ reservations, the official said ISI, despite being given the responsibility for fixing cyber security shortcomings, would only have “limited access”.
“They cannot ingress our system, but only check from outside,” he maintained adding the different departments had different encryption codes.
The government-run IT and Telecom services provider, National Telecommunication Corporation (NTC), provides internet service to FO. However, because of its poor services, a private company was hired for the new building, whereas many officers also use their private connections, which increases the vulnerability of the system.
FO officials, in private conversations with this correspondent, said that the foreign ministry should focus on “cyber-functionality” before beefing up the security.
