The Five Eyes intelligence partnership has launched security guidance to help protect emerging technology companies from a range of threats, particularly those from nation-state actors.

The Secure Innovation security guidance is already being utilsied across the Five Eyes intelligence partnership, and is now being aimed at protecting the tech sector from national security threats following the surge in activity from state-related threat actors including North Korea, Russia, and China.

Previously a UK-only initiative from the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA) – a part of MI5 – the full Secure Innovation guidance is now available in separate regional versions across all Five Eyes countries.

Technology companies in the UK can use the guidance to create a bespoke action plan which supports them to assess their level of secure innovation, identifying any necessary actions they need to take to protect their business, with over 500 firms already taking part.   

The NCSC said that the guidelines provide the tech sector with a set of cost-effective measures that companies can take from day one to better protect their ideas, reputation and future success.

Along with cybersecurity self-assessments and guidance for companies to consider, there is also guidance for investors who want to encourage the firms they invest in to protect their innovation, business, and profitability.

Those guidelines include the asking questions around the risk of insider threats and physical security, the value in considering background checks, and the importance of fostering a cybersecurity culture at an early stage. 

Businesses in Australia, Canada, New Zealand, and the US are being invited to take advantage of these Secure Innovation resources, guidance and products in hope of establishing a global cyber-safety net for the tech startup ecosystem in light of the global nature of security threats startups face.

MI5 director general, Ken McCallum said: “Sophisticated nation-state adversaries, like China are working hard to steal the intellectual property held by some of our countries’ most innovative and exciting startups. The Five Eyes Secure Innovation advice we’re rolling out today forms part of our response.

“By joining up with our allies and offering consistent advice, we are making it easier for companies working across the world to take steps to keep their ideas and products secure.”

Recommended reading

• Report: IT Leaders Struggling to Keep Up with Cyber-threats
• New Report Highlights Collabs Between Nation-states, Cyber-crime Rings
• 67% of Healthcare Organisations Hit by Ransomware In the Past Year

Within the last few months alone, the NCSC has issued warnings of China-linked threat actors, Iranian-backed spear-phishing attacks, and Russian military intelligence units accused of targeting critical infrastructure around the world.

As global tensions continue to escalate, the NCSC has taken pains to ensure that UK is prepared for the new era of cyber-warfare, doing everything from providing free cyber-defence services to schools, to issuing guides on how to deal with ransomware attacks, as well as ramping up its own capabilities by building on its Active Cyber Defence programme.