Cloud Hosting

Transportation Security Administration (TSA) Administrator David Pekoske has published the third Administrators Intent, which outlines the agencys near-term actions to achieve the vision and key strategic objectives in TSAs Strategy.

The Administrators Intent 3.0 focuses on people, partnerships and technology and outlines the agencys operational and mission support goals for the next two years.

I am proud of the hard work and outstanding achievements the TSA workforce has made in response to objectives outlined in prior editions of the Administrators Intent, TSA Administrator David Pekoske said. In this new iteration of the Administrators Intent, we remain steadfast in our focus on people, partnerships and technology so we can build on previous successes and provide flexibility and resiliency. We will invest in our workforce, maintain and strengthen our partnerships with transportation stakeholders, and continue to drive innovation to remain ahead of emerging threats.

Transportation systems, be they air, land or sea, face threats from a broad spectrum of adversaries, including nation states and their proxies, foreign terrorist organizations, domestic terrorist actors, and transnational criminal organizations. TSA notes that some threats in this environment are well-established, such as terrorists who continue to target aviation with improvised explosive devices. Other threats are still emerging, the agency says, such as 3D printed non-metallic weapons and weaponized unmanned aircraft systems. Cyber threats from a range of potential actors also pose a risk to both the information systems and operational technology commonly used in transportation systems.

The Administrators Intent 3.0 will rally the focus and commitment of TSAs talented workforce and the vigilance of the agencys partners across the transportation sector to safeguard the traveling public. Developed with input and insight from government and industry partners, it provides near term actions to achieve TSAs three strategic priorities:

The Administrators Intent 3.0. lists 20 objectives to be implemented from fiscal years 2023-2025, which each align with TSAs three strategic priorities. These are:

Threat detection: Develop and assess security screening detection capabilities through consistent collaboration with stakeholders on training, technology, and use of covert testing data and other evaluation methods to capitalize on knowledge-based performance and innovative solutions.

Threat forecasting: Improve TSAs ability to anticipate cyber risks and other emerging threats through greater understanding of their impacts on the TSA mission.

Customer experience or CX: Develop an integrated plan to organize, align, and communicate activities that positively influence the customer experience.

Air cargo security: Enhance air cargo security by collaborating with industry and the interagency to align policies and activities to the air cargo supply chain, encourage the testing and use of innovative screening technologies, and explore potential security gains in areas such as domestic all-cargo flights and additional classes of U.S. mail.

Advanced Air Mobility (AAM): Establish a framework to guide TSA and its partners to integrate security by design into emerging AAM systems and operating environments.

One-Stop Security (OSS): Establish OSS operations between the United States and select last point of departure airports to exempt the rescreening of transfer passengers and baggage arriving at a designated U.S. airport from designated international airports.

Business intelligence: Develop systems, tools, and processes to provide the capability to use analytics, data mining, data visualization, and other capabilities to improve agency decision-making.

Open architecture: Develop and define common and accessible technical standards, capabilities, and processes to enable an open, streamlined, and secure infrastructure for transportation security screening.

Risk-based, outcome-focused security: Collaborate with stakeholders to assess the effectiveness of security policy and compliance activities, including the examination of security data, to proactively identify opportunities for security improvement.

Positive security culture: Define standards for a system of shared accountability for a duty of performance, in which employees strive to self-correct and voluntarily disclose performance issues.

Insider threat: Implement and enhance capabilities and technologies within the transportation systems sector to better identify unusual behaviors, support proactive threat assessment, identify investigative follow-up, and share relevant information with industry.

Federal Air Marshal Service (FAMS): Enhance the capabilities of law enforcement and FAMSs own field-based law enforcement across the transportation systems sector.

Organizational governance: Assess TSAs organizational roles and responsibilities related to policy making, international engagement, acquisitions, and law enforcement functions to identify opportunities for improvement.

Drive resourcing higher: Communicate TSAs risk-based requirements for, and non-traditional approaches to, resourcing to external partners to support mission priorities and long-term goals.

Recruitment and hiring: Improve recruitment and hiring processes by implementing strategies to assess national and regional job markets, forecast workforce requirements, and decrease time-to-hire, thereby mitigating a significant enterprise risk.

Outcome-driven contracting: Assess TSAs current approach and methodology to contracting for services to determine appropriate courses of action to effectively and efficiently meet mission needs.

Communications: Enhance communications with the TSA workforce with an emphasis on field staff. This is intended to increase overall awareness of key issues, decisions, priorities and initiatives, and inspire positive agency advocacy.

People and culture: Nurture TSA culture to encourage innovation and collaboration, and to learn from and celebrate differences. Provide transparent communication of workforce culture attributes, activities, and improvements.

Workforce retention: Improve workforce retention by proactively monitoring and analyzing separations and implementing people-first strategies that cultivate employee perceptions of TSA as a career of choice. Assess TSA employment policies and practices and implement strategies to remove barriers and close gaps.

Human Capital (HC) Information Technology (IT) performance: Modernize TSAs HC IT systems to provide an improved interface for candidates, hiring managers, TSA human resources specialists, and employees.

The Administrators Intent 3.0 includes potential outcomes for each of these objectives. For example, TSA could fully fund mission-critical requirements through additional Aviation Security Passenger Fee allocations and other nontraditional resourcing opportunities such as the Reimbursable Screening Services Program, gifting, cost sharing and public-private ventures.

Some of the objectives will be helped by recent developments such as rollouts of new screening and identity verification technology, and the TSA workforce pay increase included in the fiscal year 2023 Omnibus Appropriations Act, which is already reducing attrition rates by as much as 40-50 percent. But Pekoske recently testified that the pay increase must apply to all TSA staff. I want to be clear that pay initiatives must include all TSA employees. Oftentimes many of our TSA employees who are not customer-facing are overlooked. We must acknowledge and recognize their impact and contributions to our overall mission, the Administrator told the House Homeland Subcommittee on Transportation and Maritime Security in June.

TSA will now assign a lead executive for each objective to provide a measure of transparency and accountability. Each executive will be responsible for managing their objectives, including developing and maintaining implementation plans. The plans will identify the specific initiatives, activities, milestones, funding requirements, and risks and provide a measurable end state. Lead executives will also be responsible for providing regular updates on the status of their objectives and complying with all dashboard reporting requirements. Information in the dashboard will be used to brief key executives on the status of implementation.

Since Administrator Pekoske published the Administrators Intent 2.0 in June 2020, the agency has accomplished key objectives that modernize and advance transportation security. Among those accomplishments, TSA:

The new Administrators Intent 3.0 aligns with the Department of Homeland Security 2023 Priorities, national strategies and directives, including the National Cybersecurity Strategy and the Executive Order on Transforming Federal Customer Experience and Service Delivery to Rebuild Trust in Government.

Read the full Administrators Intent 3.0 as TSA

See the original post here:

People, Partnerships and Technology Are Key for Pekoske As He ... - HSToday

The National Fraud Initiative (NFI) matches data from 1,300 public sector and 77 private sector organisations, including police authorities, local probation boards, fire and rescue authorities as well as local councils, NHS Trusts and other agencies. It flags up inconsistencies in data that may indicate fraud, errors, and potential overpayments, signalling the need for participating organisations to further review those findings, conduct internal investigation with Accounts Payable Recovery Audits and implement any necessary corrective actions which is no small task.

The main NFI matching exercise takes place every two years, whilst Council Tax and Electoral Register matching takes place annually. Participating organisations submit data to a secure website.

The NFI system matches data within and between bodies to identify potential anomalies, referred to as matches. Matches are made available to participating organisations for them to review, investigate and record outcomes from those investigations.

Good motives underpin NFI match reports, and this article places the spotlight firmly on NFI Creditor and Duplicate Payment reports.

They help prevent or detect fraud, support good governance, provide transparency, and essentially assist provide greater scrutiny of Tax-Payer spends.

Theoretically the NFI reports are a WIN-WIN for participant organisations; they deliver the identification of potential errors and positive reassurance no errors exist. The issue or NFI dilemma arises with the sheer size of some reports.

These may contain matches that are false positives or potential duplicate payments which may have already been corrected. Despite this internal staff are compelled to vet and address each matched line item.

Accounts Payable teams are frequently under time pressures and resources stretched to maximum working capacity.

Few if any, have the desire or wish to divert valuable and often expensive resources to the rather mundane task of investigating data matches and potential duplicate payments which may prove to be false positives. The match reports are simply the first step in a process of queries.

Those yards get even harder when valuable time is absorbed verifying and validating if a duplicate or overpayment has taken place and organisations find themselves under time pressure to report back their findings to the NFI. This is before any recovery, claims fromsuppliers can even commence which in of itself, can often be measured in months rather than weeks.

To help provide an indication of scale participating organisations are compelled to investigate NFI matches and where Rockford delivers regular risk-free Accounts Payable Recovery Audits, it provides an ideal opportunity to lighten that load and assign the mundane task to us.

Over 2 months, we analysed and reported on over 12,000 NFI line matches for a single client mapping their NFI matches with our Accounts Payable Recovery Audit.

This enabled the update and reporting of findings to the NFI within project timescale. Moreover, it provided time to deliver the day job and apply corrective actions to their respective payable ledgers.

From an Accounts Payable and duplicated payments perspective, NFI creditor reports are similar to Rockfords Pathfinder data mining outputs. Potential duplicated supplier reports also mirror our Electronic Data Analysis Reports. Dual vetting provides a belt and braces approach with errors highly unlikely to escape the scrutiny of two systems.

Rockford can match the relevant NFI duplicate payment reports to the Pathfinder outputs; and we can validate each item establishing the action to be taken (essentially: not a duplicate, already cleared by a matching credit, duplicate but not paid, still to be investigated, Etc).

Thereafter we can advise on the response to each item. Rockford regularly performs such exercises whilst undertaking risk-free Accounts Payable Recovery Audits and there is generally no cost incurred.

Rockford Associates Accounts Payable Recovery Audits include a ready-made resolution for NFI duplicate payment reports, save organisations time and monies by the release of valuable internal resources enabling them to focus on higher priority tasks. The benefits include:

Duplicate / incorrect payments

Wrong Supplier / Currency

Paid Credit Notes

Missed Credit Notes

Overpayments (E.g., unused deposits, incorrect invoice values)

The National Fraud Initiative, based in the Cabinet Office, has enabled participating organisations to prevent and detect/recover 443 million fraud and error across the UK in the period April 2020 to March 2022.

This takes the NFI programme cumulative savings to 2.4 billion since its creation in 1996. These outcomes exclude the non-financial benefits also experienced by participants, such as improvements in the accuracy of records, or a greater knowledge of the extent and types of risks their organisations might face.

Recommended Next Steps?

Rockford encouraged long standing Clients to transition away from undertaking accounts payable recovery audits on an ad-hoc basis. The need for vigilance in respect of overpayments never ceases. We pioneered an on-going multi-year audit programme, enabling regular delivery pre-planned Accounts Payable Recovery Audits on an Annual, Biennial or Triennial basis.

The benefits of ongoing Accounts Payable Recovery Audits are abundantly clear and proved popular with Clients now requesting we schedule them to coincide or dovetail directly with the timescales of the NFI match reports enabling them to meet the challenge of NFI reporting requirements in a timely manner.

To discover how we can assist you with NFI match reports and Accounts Payable Recovery Audits, or if you would like to see some case studies of how we have assisted others please feel welcome to get in touch.

Editor's Recommended Articles

More:

National fraud initiative (NFI) creditors claim, vet and match - Open Access Government

And he said the mix of passengers reveals around 10 per cent less people visiting east coast capital cities, with monthly passenger numbers declining 1.5 per cent in Sydney and 3.8 per cent in Melbourne in May, compared with April. They were higher, however, in a year-on-year comparison with May 2022.

Airline Regional Express, known as Rex, which has started flying golden triangle routes between Melbourne, Sydney and Brisbane, issued a profit downgrade last month saying corporate travel demand softened dramatically in May and June as travel budgets were exhausted.

The data also showed that Virgin Australia has overtaken Qantas in major cities, growing to 37.7 per cent market share versus 35.3 per cent for Qantas. In December 2019, Qantas held 38.3 per cent to Virgins 32.1 per cent. Qantas low-cost airline Jetstar picked up some ground, however, to 22.2 per cent from 19.8 per cent in 2019.

Mr Seow said the dip in Qantas market share appears to be largely corporate/premium demand particularly in Melbourne, Sydney and Brisbane, where it was forecasting a rebound in capacity by December.

On face value this presents an interesting question: does the corporate recovery continue as implied by forward schedules? Or is there downside risk to capacity in the fourth quarter with potentially softer business conditions? Mr Seow speculated.

Regardless of the outlook, he said Qantas was offsetting capital city share losses by operating above pre-COVID-19 capacity in and out of key mining towns like Rockhampton, Olympic Dam, Mount Isa, Port Hedland and Kalgoorlie.

We estimate these routes have longer stage lengths/higher ASKs per trip, and interestingly this demand appears to be propping up the headline ASK recovery, Mr Seow said, referring to available seat kilometres.

And after airlines reiterated that demand for travel has held firm during the winter school holidays, Mr Seow said flights to leisure hot spots like the Gold Coast, Sunshine Coast, Ballina, Hamilton Island and Port Macquarie are filling the gap in lower capital city flying.

When we look at website traffic to assess the recovery in domestic demand (data as of June 30) we see no signs of softening, Mr Seow said.

We find this particularly interesting given the soft macro, but also in general leisure customers are more likely to book online/direct and generally book further in advance versus corporate.

Citi warned that the downturn may not yet have hit flights but said it was hard to know why, speculating that the lack of availability of international long haul fares might be creating a domestic substitution effect.

Separately, the Australian Bureau of Statistics put out travel data showing that inbound travellers or overseas tourists again outpaced the number of Aussies flying overseas in May. The number of outbound Australians fell compared with April, the data showed.

See more here:

Virgin pips Qantas on major cities, mining towns keep demand strong - The Australian Financial Review

MANILA, Philippines Taking a screenshot of a private message and sharing it with others is as easy as a single click. This, however, does not grant them a free pass to the consequences of doxing.

The escalating incidence of doxing has sparked significant concern among digital rights and safety advocates, given the heightened vulnerability individuals face such as scams, online gender-based violence and identity fraud.

A 2021 survey conducted by cybersecurity company Kaspersky revealed that one in six users had experienced doxing globally while using online dating platforms. In Asia Pacific alone, the survey found that 22% of the respondents had fallen victim to doxing while engaging in online dating.

Advocates emphasize educating diverse communities about the significance of safeguarding against doxing and the crucial role they play in protecting others.

By prioritizing education, digital rights and safety organizations empower individuals with the necessary tools and information to navigate the internet safely and mitigate the risks associated with doxing.

Derived from the word "documents," Kaspersky defined doxing as the act of leaking private or personal information about an individual online without their consent. This is often done with malicious intent with the aim of intimidating or threatening individuals.

Advertising

Scroll to continue

Common examples of doxing are when online users share screenshots of private conversations on social media platforms. These are often observed on Facebook, Twitter, Messenger and Telegram, a 2019 study by The Hong Kong Polytechnic University found.

Doxing often exposes a persons name, social details, and private information, including contact numbers, email addresses, intimate photos or videos and private conversations.

The 2021 study ofKaspersky discovered that nearly half of the Asia Pacific respondents either have or had online partners who leaked their intimate photos, disseminated screenshots of their conversations online, threatened them with personal information or stalked them in real life.

While doxing often involves users with malicious intent, there are also users who have a more profound motive behind sharing private information online, such as victim-survivors of online gender-based violence.

Driven by their personal experiences, some peopleexpose the identities of their abusers to warn others of the potential risks of interacting with them. At the same time, victim-survivors unintentionally commit doxing hoping to hold their perpetrators accountable.

In the Philippines, no law details how cases like this should be treated by the justice system. Similarly, no law has defined the term doxing.

However, existing laws have been implemented that stipulate the concept of doxing as a digital safety issue. Among these are the Data Privacy Act of 2012 (DPA) and the Cybercrime Prevention Act of 2012 (CPA).

The DPA states in Chapter VIII, Section 32 that an individual who discloses personal information to a third party without the consent of the data subject should be penalized with one to three years of imprisonment and a fine ranging from P500,000 to P1 million.

Filipino users may file a complaint to the National Privacy Commission for digital safety violations.

For instance, Jover Laurio (Pinoy Ako Blog) filed a civil complaint against Rey Joseph Nieto (Thinking Pinoy) in 2018 for revealing Laurio as the author of Pinoy Ako Blog in one of Thinking Pinoys entries, including their full name and school.

In a decision on March 31, Laurio won their data privacy case against Nieto, who now has to pay the blogger a total of P300,000 in damages and P50,000 in attorneys fees and litigation expenses.

Besides pressing charges, tweaking privacy settings and carefully selecting followers on social media can also limit the number of people who may have access to information posts.

Advocates also suggest establishing distinct email accounts and usernames for different platforms and refraining from using ones complete name when creating online accounts.

Using multi-factor authentication is another security measure that prevents others from accessing an account with just an email address and a password. It will require a user to either input a code randomly generated by the social media platform or a one-time pin (OTP) usually sent through text.

Cybersecurity firms also suggest utilizing a virtual private network (VPN) to protect IP addresses which describe ones location from being exposed, allowing users to browse the internet anonymously.

Most of all, combating digital safety issues like doxing will only be effective when users value their data and respect that of others.

Media organizations regularly conduct workshops and trainings on digital rights and safety for various sectors of society. They seek to not only raise awareness on these issues but also to equip them with the necessary knowledge and tools to become more resistant to doxing.

EngageMedia, a nonprofit organization advocating for digital rights and safety, organized the three-day Asia Pacific Digital Rights Forum in 2023, aiming to further discuss and collaborate on solutions for each regions pressing digital safety issues.

Out of The Box Media Literacy Initiative (OOTB) has also conducted such trainings for college students and mothers in early 2023. To improve their campaigns for the latter half of 2023, they held a digital rights and safety co-learning session with civil society organizations.

Diving deeper into the digital issues of doxing and data mining, OOTB will be conducting Training on Digital Rights and Security, a workshop under its Take Ctrl ? Shift Habits campaign on July 11 at the Polytechnic University of the Philippines.

Out of The Box is a non-profit organization in the Philippines promoting media literacy practices with educational resources, campaigns and workshops.

See original here:

How to safeguard your personal information from doxing - Philstar.com

Lurking in the shadiest corners of the dark web is a well-established ecosystem of hackers that target cryptocurrency users with poor security hygiene, according to Binances chief security officer, Jimmy Su.

Speaking to Cointelegraph, Su said that hackers had shifted their gaze toward crypto end-users in recent years.

Su noted when Binance first opened in July 2017, the team saw plenty of hacking attempts on its internal network. However, the focus has shifted as crypto exchanges continued to beef up their security.

Hackers always choose the lowest bar to achieve their goals because, for them, its a business as well. The hacker community is a well-established ecosystem.

According to Su, this ecosystem comprises four distinct layers: intelligence gatherers, data refiners, hackers and money launderers.

The most upstream layer is what Su described as threat intelligence. Here, bad actors collect and collate ill-gotten intel about crypto users, creating entire spreadsheets filled with details about different users.

This could include crypto websites a user frequents, what emails they use, their name, and whether theyre on Telegram or social media.

There is a market for this on the dark web where this information is sold [...] that describes the user, explained Su in a May interview.

Su noted this information is usually gathered in bulk, such as previous customer information leaks, or hacks targeting other vendors or platforms.

In April, a research paper by Privacy Affairs revealed cybercriminals have been selling hacked crypto accounts for as little as $30 a pop. Forged documentation, often used by hackers to open accounts on crypto trading sites, can also be bought on the dark web.

According to Su, the data gathered is then sold downstream to another group usually made up of data engineers specializing in refining data.

For example, there was a data set last year for Twitter users. [...] Based on the information there, they can further refine it to see, based on the tweets to see which ones are actually crypto-related.

These data engineers will then use scripts and bots to figure out which exchanges the crypto enthusiast may be registered with.

They do this by attempting to create an account with the users email address. If they get an error that says the address is already in use, theyll know if they use the exchange, which could be valuable information that more targeted scams could use, said Su.

The third layer is usually what creates headlines. Phishing scammers or hackers will take the previously refined data to create targeted phishing attacks.

Because now they know Tommy is a user of exchange X, they can just send an SMS saying, Hey Tommy, we detected someone withdrew $5,000 from your account; please click this link and reach customer service if it wasnt you.

In March, hardware wallet provider Trezor warned its users about a phishing attack designed to steal investors money by making them enter the wallets recovery phrase on a fake Trezor website.

The phishing campaign involved attackers posing as Trezor and contacting victims via phone calls, texts, or emails, claiming that there has been a security breach or suspicious activity on their Trezor account.

Once the funds are stolen, the final step is getting away with the heist. Su explained this could involve leaving the funds dormant for years and then moving them to a crypto mixer such as Tornado Cash.

Related: Arbitrum-based Jimbos Protocol hacked, losing $7.5M in Ether

There are groups that we know that may sit on their stolen gains for two, three years without any movement, added Su.

While not much can stop crypto hackers, Su urges crypto users to practice better security hygiene.

This could involve revoking permissions for decentralized finance projects if they no longer use them, or ensuring communication channels, such as email or SMS used for two-factor authentication, are kept private.

Magazine: Tornado Cash 2.0 The race to build safe and legal coin mixers

See original here:

Darknet bad actors work together to steal your crypto, heres how Binance CSO - Cointelegraph