Robert Hannigan | |
---|---|
Warden of Wadham College, Oxford | |
Assumed office 2021 | |
Preceded by | Ken Macdonald |
Director of the Government Communications Headquarters | |
In office November 2014 –April 2017 | |
Prime Minister | David Cameron Theresa May |
Minister | Philip Hammond Boris Johnson |
Preceded by | Iain Lobban |
Succeeded by | Jeremy Fleming |
Personal details | |
Born | 1965 (age 56–57) Gloucestershire |
Children | 2 |
Alma mater | Wadham College,Oxford Heythrop College,University of London |
Occupation | Intelligence officer |
Robert Peter Hannigan CMG (born 1965) is a cybersecurity specialist who has been Warden of Wadham College,Oxford,since 2021. He was a senior British civil servant who previously served as the director of the signals intelligence and cryptography agency the Government Communications Headquarters (GCHQ) and established the UK's National Cyber Security Centre. [1] His sudden resignation as director was announced on 23 January 2017,and he stepped down at the end of April 2017 to pursue a career in private sector cyber security,academia and as a security commentator. [2] [3] [4] In 2021 he became Warden of Wadham College,Oxford.
Hannigan was born in Gloucestershire and brought up in Yorkshire. He studied classics at Wadham College,Oxford, [5] and continued his education at Heythrop College,University of London. [6] He is married with a son and a daughter. [7]
After an early career in the private sector,Hannigan became Deputy Director of Communications for the Northern Ireland Office in 2000,Director of Communications for the Northern Ireland Office in 2001 and Associate Political Director for the Northern Ireland Office in 2004. [5] [8] He served as the Director-General,Political at the Northern Ireland Office from 2005,taking over from Jonathan Phillips. [9] [10]
Hannigan has not spoken of his role in the Northern Ireland peace process but he is the only British civil servant involved to be singled out in Tony Blair's autobiography,where Blair describes him as "a great young official who had taken over as the main Number 10 person [on Northern Ireland]" and cites him as an example of creativity. [11] Hannigan appears regularly in other accounts,notably by Blair's Chief of Staff Jonathan Powell,attending private crisis meetings with Irish Republican leaders,including Gerry Adams and Martin McGuinness,at Stormont Castle and Clonard Monastery. [12] [13] Powell describes his key role in brokering agreement with Ian Paisley and the Democratic Unionist Party during and after the St Andrews Agreement talks. [12] He is described as chairing the first meeting between the DUP and Sinn Féin and designed the diamond shaped table which brought Adams and Paisley together at a public meeting on 26 March 2007,which is widely regarded as marking the end of the Northern Ireland 'Troubles'. [13] [14]
In 2007,he was appointed to a new post of Prime Minister's Security Adviser in 10 Downing St, [15] [16] as well as replacing Sir Richard Mottram as the Head of Security,Intelligence and Resilience at the Cabinet Office,responsible for co-ordinating between the intelligence services and government, [8] and acting as Accounting Officer for the Single Intelligence Account which funds MI5,MI6 and GCHQ. [17] During his time in office,Hannigan led the review into the loss of the nation's child benefit data,a major data breach incident;the subsequent report is informally called the "Hannigan Report". [18]
Hannigan moved to the Foreign and Commonwealth Office as the Director-General of Defence and Intelligence with effect from 1 March 2010. [19]
He was appointed Companion of the Order of St Michael and St George (CMG) in the 2013 New Year Honours for services to national security. [20] [21] He was made an Honorary Fellow of Wadham College,Oxford,in November 2015. [22] He became a Fellow of the Institute of Engineering and Technology in 2017 and is one of the few non-US citizens known to have been awarded the US National Intelligence Distinguished Public Service Medal. [23] [24] He is a Senior Associate Fellow of the Royal United Services Institute [25] and a Senior Fellow of the Belfer Center for Science and International Affairs at Harvard University. [26]
It was announced in April 2014 that Hannigan would succeed Iain Lobban as the Director of the signals intelligence and cryptography agency the Government Communications Headquarters (GCHQ) in the autumn of the year, [27] taking over in November 2014 [28] after revelations by the National Security Agency whistleblower Edward Snowden in 2013 exposed mass surveillance by the agency. [29] As of 2015,Hannigan was paid a salary of between £160,000 and £164,999 by GCHQ,making him one of the 328 most highly paid people in the British public sector at that time. [30]
On his first day in the role,Hannigan wrote an article in the Financial Times on the topic of Internet surveillance,stating that "however much [large US technology companies] may dislike it,they have become the command and control networks of choice for terrorists and criminals" and that GCHQ and its sister agencies "cannot tackle these challenges at scale without greater support from the private sector",arguing that most Internet users "would be comfortable with a better and more sustainable relationship between the [intelligence] agencies and the tech companies". Since the 2013 surveillance disclosures,large US technology companies have improved security and become less co-operative with foreign intelligence agencies,including those of the UK,generally requiring a US court order before disclosing data. [31] [32] However the head of the UK technology industry group TechUK rejected these claims,stating that they understood the issues but that disclosure obligations "must be based upon a clear and transparent legal framework and effective oversight rather than,as suggested,a deal between the industry and government". [33]
Hannigan developed this thinking in a speech at MIT in March 2016,in which he appeared to take a more conciliatory line with the tech companies. [34] He highlighted the importance of strong encryption and argued against 'back doors'. [35] [36] He also set out the role of James Ellis and other GCHQ mathematicians in the invention of public key cryptography and published for the first time facsimiles of Ellis' original papers on the possibility of digital and analogue secure non-secret encryption. [37] Interviewed on BBC Radio 4's Today Programme in July 2017,Hannigan argued against further legislation on encryption and said 'back doors' would be a 'bad idea',suggesting instead that governments and companies should work together against those abusing strong encryption by targeting devices and the 'end of the network'. [38] [39]
Returning to the debate on terrorist material on the internet after the London Bridge attack in June 2017,Hannigan commented on the polarised stand-off between politicians and tech companies. [40] He noted an improved relationship between the Silicon Valley companies and government since 2014,but called on the big companies to come together to address extremism and to preserve the freedom of the internet from state control. Interviewed alongside his former counterpart Admiral Michael Rogers,Head of the NSA and US Cyber Command,at the 2017 Aspen Security Forum,Hannigan said that since 2014 the companies had accepted responsibility for the content they carried and were making progress on extremist material,pointing to Mark Zuckerberg's comments on the subject. [41]
Hannigan's major external change to the organisation during his tenure was the creation of the National Cyber Security Centre (NCSC) as an operational part of GCHQ. [42] The NCSC's London headquarters was officially opened by Queen Elizabeth II on 14 February 2017. [43] In a speech welcoming the Queen and Prince Philip,Hannigan described the historical line between Bletchley Park and the NCSC and set out the challenge of cyber security at a national level. [44] [45] In a final interview with Financial Times editor Lionel Barber,at CyberUK 2017,Hannigan described his thinking in creating the NCSC and his involvement in cyber security over the years,from the creation of the first UK Cyber Security Strategy for Prime Minister Gordon Brown,to framing the coalition government's ambition of making the UK "the safest place to live and do business online";against a '"rising tide" of cyber security incidents,governments could not do this alone but only "with industry". [46] Hannigan has made frequent interventions on cyber security issues. In a speech in November 2015,he said that the usual market mechanisms were failing on cyber security:"The normal drivers of change,from regulation and incentivisation to insurance cover and legal liability,are still immature". [47] He also pointed to a critical cyber skills gap, [48] and has called for a "culture shift" within Boardrooms to meet the cyber threat,with less reliance on the "well-meaning generalist". [49] Other Financial Times articles have covered the sophistication of cyber crime groups and the threat from North Korea. [50]
In July 2017 Hannigan blamed Russia for causing a "disproportionate amount of mayhem in cyberspace",identifying state-linked crime as a major problem:"There is an overlap of crime and state,and a deeply corrupt system that allows crime to flourish,but the Russian state could do a lot to stop that and it could certainly rein in its own state activity." [51] [52] Asked at the 2017 Aspen Security Forum what had changed in Russian cyber behaviour,Hannigan referred to the "brazen recklessness" of Russian agencies who scarcely tried to hide their activity. [53] In December 2017 he joined General Lord Houghton in drawing attention to Russian threats to undersea internet cables,endorsing a report by Rishi Sunak MP for the Policy Exchange thinktank. [54] Hannigan was involved in monitoring Russian interference in the 2016 United States elections,including the Democratic National Committee cyber attacks. [55]
On 23 January 2017,Hannigan announced that he had decided to resign once a successor to his role as director had been found,explaining in a letter to the Foreign Secretary,Boris Johnson,that his resignation was for personal reasons. [56] [57] This exchange of letters between Hannigan and Johnson revealed that he had "initiated the greatest internal change within GCHQ for thirty years";no further details were given but the letters refer to a "focus on technology and skills",to make GCHQ "fit for the digital age". He was widely credited with bringing greater transparency to GCHQ,not least through the use of cryptographic puzzles;his Christmas card puzzle in 2015 inspired some 600,000 attempts worldwide to solve it. [58] [59] This led to the publication of The GCHQ Puzzle Book in 2016,with Forewords by the Duchess of Cambridge and Hannigan. It became a Christmas best-seller, [60] and by April 2017 had raised £240k for the Heads Together mental health charities. [61] According to the Guardian,his resignation was sudden and prompted speculation that it might be related to "British concerns over shared intelligence with the US in the wake of Donald Trump becoming president." [29]
In February 2017,Hannigan was appointed to the UK Government's new Defence Innovation Advisory Panel,along with McLaren Chairman Ron Dennis and astronaut Tim Peake. [62] He has written about the shift in technological innovation from government to private sector and West to East,expressing some concern about the tone of the Brexit debate and its impact on the UK academic tech sector. [63]
In December 2021,the Intelligence and Security Committee of Parliament (ISC) reported that it had been misled by the government over the reasons for Hannigan's sudden resignation. Hannigan had in fact resigned because he had given a character reference some years earlier while working in the Foreign &Commonwealth Office using his FCO title,for Father Edmund Higgins,who had been found guilty of possessing 174 child pornography images,but the priest later reoffended. [64] The report said the ISC is entrusted with oversight of the intelligence community,and ensuring their probity,and must be fully informed in such circumstances,instead of discovering it much later from a Mail on Sunday report. He was also heavily criticised in the ISC report for later revealing operational information on a TV programme of how intelligence agencies had discovered the identity of Islamic State executioner Mohammed Emwazi,commonly known as Jihadi John. The successor Director of GCHQ had written to Hannigan to remind him of his ongoing responsibility to safeguard sensitive information and to seek approval in advance of discussing such matters in the media,but without any substantive sanctions which the ISC viewed as giving the wrong message to other former intelligence staff. [2] [65] [66]
He has served as chairman of BlueVoyant,a US-based cyber security services company,and as an adviser to a number of governments and international companies. [67] He has been a paid commentator on security matters in the media and a public speaker. [66] [68]
In May 2021,it was announced that Hannigan was to be the next Warden of Wadham College,Oxford,from summer 2021. [64]
Government Communications Headquarters,commonly known as GCHQ,is an intelligence and security organisation responsible for providing signals intelligence (SIGINT) and information assurance (IA) to the government and armed forces of the United Kingdom. Based at "The Doughnut" in the suburbs of Cheltenham,GCHQ is the responsibility of the country's Secretary of State for Foreign and Commonwealth Affairs,but it is not a part of the Foreign Office and its Director ranks as a Permanent Secretary.
BAE Systems Digital Intelligence is an international business and technology consulting firm owned by BAE Systems. It specializes in "security and resilience",and in collecting,managing and exploiting information to reveal so-called "actionable intelligence","threat intelligence","fraud containment" and customer insight. It also sells clients software for large-scale data exploitation,and analytics for intelligence-grade security and financial crime work.
GCHQ Bude,also known as GCHQ Composite Signals Organisation Station Morwenstow,abbreviated to GCHQ CSO Morwenstow,is a UK Government satellite ground station and eavesdropping centre located on the north Cornwall coast at Cleave Camp,between the small villages of Morwenstow and Coombe. It is operated by the British signals intelligence service,officially known as the Government Communications Headquarters,commonly abbreviated GCHQ. It is located on part of the site of the former World War II airfield,RAF Cleave.
Cyberwarfare is the use of cyber attacks against an enemy state,causing comparable harm to actual warfare and/or disrupting vital computer systems. Some intended outcomes could be espionage,sabotage,propaganda,manipulation or economic warfare.
John Chris Inglis,also known as Chris Inglis,is an American government official and the current National Cyber Director,the first person to hold the role. Inglis is also a former Deputy Director of the National Security Agency. On April 12,2021 President Joe Biden nominated Inglis to serve as the 1st National Cyber Director. His nomination was confirmed by the Senate by voice vote on June 17,2021. He was sworn into office on July 11,2021.
The Centre for the Protection of National Infrastructure (CPNI) is the United Kingdom government authority which provides protective security advice to businesses and organisations across the national infrastructure.
The Director of the Government Communications Headquarters is the highest-ranking official in the Government Communications Headquarters (GCHQ),a British intelligence agency that specialises in signals intelligence,information assurance and cryptography. The director is a Permanent Secretary,and appointed by and reports to the Secretary of State for Foreign and Commonwealth Affairs.
The Chartered Institute of Information Security (CIISec), formerly The is an independent,non-profit body governed by its members,with the principal objective of advancing the professionalism of information security practitioners and thereby the professionalism of the industry as a whole.
The cyber security community in the United Kingdom is diverse,with many stakeholders groups contributing to support the UK Cyber Security Strategy. The following is a list of some of these stakeholders.
The Doughnut is the nickname given to the headquarters of the Government Communications Headquarters (GCHQ),a British cryptography and intelligence agency. It is located on a 71 hectares site in Benhall,in the suburbs of Cheltenham,Gloucestershire,in South West England. The Doughnut houses 5,500 employees;GCHQ is the largest single employer in Gloucestershire. Built to modernise and consolidate GCHQ's multiple buildings in Cheltenham,the Doughnut was completed in 2003,with GCHQ staff moving in the same year,and fully moved into the building in 2004. It is the largest building constructed for secret intelligence operations outside the United States.
The Government of the United Kingdom maintains intelligence agencies within several government departments. The agencies are responsible for collecting and analysing foreign and domestic intelligence,providing military intelligence,performing espionage and counter-espionage. Their intelligence assessments contribute to the conduct of the foreign relations of the United Kingdom,maintaining the national security of the United Kingdom,military planning and law enforcement in the United Kingdom. The main organisations are the Secret Intelligence Service,the Security Service (MI5),the Government Communications Headquarters (GCHQ) and Defence Intelligence (DI).
The National Cyber Security Centre (NCSC) is a government computer security organisation in Ireland,an operational arm of the Department of the Environment,Climate and Communications. The NCSC was developed in 2013 and formally established by the Irish government in July 2015. It is responsible for Ireland's cyber security,with primary focus on securing government networks,protecting critical national infrastructure,and assisting businesses and citizens in protecting their own systems. The NCSC incorporates the Computer Security Incident Response Team (CSIRT-IE).
The National Cyber Security Centre (NCSC) is an organisation of the United Kingdom Government that provides advice and support for the public and private sector in how to avoid computer security threats. Based in London,it became operational in October 2016,and its parent organisation is GCHQ.
Cozy Bear,classified by the United States federal government as advanced persistent threat APT29,is a Russian hacker group believed to be associated with one or more intelligence agencies of Russia. The Dutch General Intelligence and Security Service (AIVD) deduced from security camera footage that it is led by the Russian Foreign Intelligence Service (SVR);this view is shared by the United States. Cybersecurity firm CrowdStrike also previously suggested that it may be associated with either the Russian Federal Security Service (FSB) or SVR. The group has been given various nicknames by other cybersecurity firms,including CozyCar,CozyDuke,Dark Halo,The Dukes,NOBELIUM,Office Monkeys,StellarParticle,UNC2452,and YTTRIUM.
Joint Operations Cell is a unit of GCHQ,a British signals intelligence agency,and the National Crime Agency (NCA),a United Kingdom national law enforcement agency. It opened in November 2015 with the intention of tackling a range of crime on the Dark Web,initially focusing on child sexual exploitation,but also including international sex trafficking and the sale of drugs and weapons on darknet markets. Its intelligence methods include analysis of data gathered through mass surveillance. Joint Operations Cell is a collaborative effort of GCHQ and NCA,co-located in Warrington.
Sir Jeremy Ian Fleming is the Director of the Government Communications Headquarters,the UK's intelligence,cyber and security agency. He was appointed in 2017 and is the 16th person to hold the role.
Ciaran Liam Martin,,was the first CEO of the National Cyber Security Centre (NCSC). In September 2020 he was appointed Professor of Practice in the Management of Public Organisations at the Blavatnik School of Government,University of Oxford.
TechVets is a UK not-for-profit company which supports military veterans and service leavers into careers in information security.
Lindy Cameron is a British civil servant who is chief executive officer at the National Cyber Security Centre. She was previously Director-General responsible for the Department for International Development’s programmes in Africa,Asia and the Middle East. She was awarded an Order of the Bath in the 2020 Birthday Honours for her services to international development.