This edition of the Nuclear Security Culture (NSCP) webinar series introduces Rakesh Burgul from the International Nuclear Services (INS). The webinar will look at a cyber security model called the cyber kill chain.

The idea originates from the American Defence contractor Lockheed Martin and is a way of looking cyber attacks from the attackers perspective.

There are variants of the kill chain but in general, this structured approach to a cyber attack makes it easier for defenders to decide on cyber protections and at which point we might intervene in order to prevent cyber-attacks. When combined with a strong cyber intelligence capability, the cyber kill chain can be a powerful tool to anticipate attacks and defend your organisation.

This will not be a technical presentation but will look at concepts and ideas instead.

The session will cover:

• An introduction to the cyber kill chain
• How to think about cyber-attacks in relation to the kill chain
• Look at case studies in nuclear and non-nuclear environments that illustrate the use of the kill chain
• Look at the cyber-security controls available at each of the stages in order to intervene or interdict
• How strong intelligence can be used along with the kill chain to anticipate attacks

About the speaker

Rakesh Burgul has worked in the nuclear sector in the United Kingdom for 33 years and currently works for International Nuclear Services (INS) where he has served as their Chief Information Security Officer (CISO) for 5 years.

In his role, Rakesh is tasked with protecting INS against cyber-attacks on its corporate networks, standalone systems and Operational Technology (OT) within INS’s offices and on-board INS’s INF3-class nuclear cargo vessels.

He is a Member of the Royal Society of Chemistry and a Chartered Chemist but has had a lifelong fascination with computers and has certified in computer hacking, computer forensics, data privacy, security management and information security management gaining certifications to globally recognised standards.

Rakesh is also a Certified Chief Information Security Officer and, along with peers, plays an active role in the UK’s civil nuclear sector helping to influence regulation, formulate policy and set strategic direction particularly in cyber security.