No Joke, Skeeve.

There was a talk at the last NZNOG about it, the two guys at the front of the room from GCSB (hi, guys!) got a bit clobbered by the room.

A quick google presented this URL:

http://blog.altan.me/ticsa-overview/

... which has the video and a very high level set of bullets about what it entails.

The legislation was passed whilst parliament was sitting 'under urgency', and here we are.

The GCSB guys have been working hard to try to make it reasonable, but the law itself is the issue and I personally feel that passing it 'under urgency' was a bit cheeky and underhanded. So they're doing their best with the hand they were dealt.

Thing is, it's now law, so we have no choice but to abide by it.  The mandate is around national security, so we can only presume that GCSB have some good intel sources and their pool of learned engineers will be looking for actual potential risks to national security.  I gather they will simply raise concerns, where possible providing as much information as possible as to why the item raised is a concern, and seek to ensure that appropriate mitigation measures are put in place.

I for one will be interested to see what happens when the full force of this particular piece of law is first tested.

Mark.


On 12/05/2014 5:50 p.m., Skeeve Stevens wrote:
Hang on... is this serious?

You aren't allowed to upgrade some equipment without informing the GCSB unless it is the same make and similar model?

How did this ACT get through?


...Skeeve

Skeeve Stevens - eintellego Networks Pty Ltd
The Experts Who The Experts Call
Juniper - Cisco - Cloud - Consulting - IPv4 Brokering


On Mon, May 12, 2014 at 2:59 PM, Dean Pemberton <nznog@deanpemberton.com> wrote:
Hey all,

So the TICSA came into effect today.

Things to remember:
The Act requires that network operators register their information
with the Police Registrar.  Details here:
http://www.police.govt.nz/about-us/programmes-and-initiatives/telecommunications-interception-capability-security-act-2013-0


The NCSC has also produced some guidance for Network Operators which
is worth a read.

http://ncsc.govt.nz/assets/TICSA/NCSC-Guidance-for-Network-Operators.pdf

The GCSB have also published a list of exceptions for Operators with
regard to what you're required to notify them of.

http://ncsc.govt.nz/assets/TICSA/Notice-of-Exemptions.pdf


As you were =)
_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog



_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog