Projects / Incident response · Strategy & policy

Bangladesh's first government CIRT

Built the country's national government CIRT after the 2016 Bangladesh Bank SWIFT heist.

The challenge

After the SWIFT heist, Bangladesh had no national capability to detect, coordinate or respond to attacks on government and banks.

What I did

  • Delivered the CIRT, its laboratory and the incident-response capability-enhancement programme (Leveraging ICT for Growth, Employment and Governance project).
  • Designed and ran risk-assessment and incident-response processes with a 40+ analyst team across threat intelligence and incident response.
  • Represented the CIRT in FIRST, APWG and OIC-CIRT.

Outcomes

  • ~95% drop in nationwide cyberattacks
  • Repeat attacks on banks and government blocked

Next project

National cybersecurity strategy & risk framework

Read it