![Scotland’s position to lead cyber and space. [Deep Space] — CyberWire Daily cover](/_next/image?url=https%3A%2F%2Fmegaphone.imgix.net%2Fpodcasts%2F550dc604-c16b-11ef-a02d-27e5dd79252d%2Fimage%2Fad72ba49a386b651623190673146de68.png%3Fixlib%3Drails-4.3.1%26max-w%3D3000%26max-h%3D3000%26fit%3Dcrop%26auto%3Dformat%2Ccompress&w=1920&q=75)
Sharon Lemac-Vincere has released a report on space and cybersecurity which outlines how Scotland can lead the way at the intersection of both industries.
Loading summary
Maria Varmazes
You're listening to the N2K space network.
Sharon Lemak Vincier
Happy holidays from all of us here at N2K Networks. We're taking some time off to spend with our families and we'll be sharing some of our radio programs and repeat episodes during this time for you to enjoy. We will resume our daily briefing on January 2nd. Happy New Year.
Cloudflare Representative
The IT world used to be simpler. You only had to secure and manage environments that you controlled. Then came new technologies and new ways to work. Now employees, apps and networks are everywhere. This means poor visibility, security gaps and added risk. That's why Cloudflare created the first ever connectivity cloud. Visit cloudflare.com to protect your business everywhere you do business. This.
T Minus Host
Longtime listeners to this show know very well that the world is increasingly becoming reliant on space based assets. In the span of a few years, we've gone from hundreds to tens of thousands of satellites in orbit. Well, how do you protect space assets from cyber threats? That has been a pressing question for the industry. And who is leading the way in this? Could it be Scotland? Welcome to T Minus deep space from N2K Networks. I'm Maria Varmazes. Sharon Lemak Vincier is an academic that focuses her research on the intersection of space and cybersecurity.
Maria Varmazes
She has released a report on space.
T Minus Host
And cyber which outlines how Scotland can lead the way in both industries. And there's more to come.
Sharon Lemak Vincier
I have produced three reports and one's already out. So that's the cybersafe gateway and that's looking at Scotland's space cyber potential. So really what I wanted to do was Scotland builds more satellites than anywhere else in Europe and I wanted to see what opportunities there may be for cybersecurity because it's makes complete sense to me that if we're building and manufacturing satellites then we should really be thinking about the cyber secure by design built into that. But actually there was so much more potential that came out of that report in terms of Scotland's ability for cybersecurity in the commercial space sector. And I think one of the nice things that I identified was that kind of historical or heritage to build bake that in as well. So not just kind of thinking about the innovation and the commercialization, but actually how do we make sure that it is truly Scottish and what does that really mean? So that was interesting. So that report's available and then there's a UK wide one coming out hopefully next week and a final report on women leadership, female leadership at the intersection of space cyber.
Maria Varmazes
So oh my gosh.
Sharon Lemak Vincier
Okay.
Maria Varmazes
Okay, okay. That's not a small amount of work. So congratulations, first of all. That is a huge amount to get that done. My gosh. Okay, so let's tell me a bit more about. Well, I mean, I want to hear more about each of these, but let's start with the first one that you mentioned about building in security by design in satellites that are made in Scotland specifically. So was this sort of a. Taking a look at what's happening now, like what maybe processes are. What was that report looking at specifically?
Sharon Lemak Vincier
Well, the UK more broadly is predominantly an SME market for space. And we know that we've got a real issue in terms of how do we make sure the space sector is secure globally. So I was really just trying to find out what was the competitive advantage for Scotland given that they've got that historical kind of market position in terms of building the satellites and just trying to see is there a real opportunity for developing the SOFTW as well. And we know that SMEs don't have enough funding for cybersecurity. If it's a case of putting food on your table and bacon or baking in cybersecurity, you're going to put the food on your table, aren't you? Because that's your kind of key issue to deal with in that kind of day to day thing. So it was trying to work out, is there a different way of thinking that we can help SMEs and leaders see the value to build a more robust ecosystem for the space sector?
Maria Varmazes
All right, so tell me more about that. Yeah, yeah, that makes sense. I was also thinking SMEs in this case means not just subject matter experts, but also satellite manufacturers and engineers.
Sharon Lemak Vincier
Is that what we're small medium enterprises?
Maria Varmazes
Okay, SME is an acronym. No, no, no. It's okay. I was like, which version of that are we using? Okay, that was my brain just going, okay. There's a lot of meanings of SME. All right, so small medium enterprises that also.
Sharon Lemak Vincier
I used to know that one in.
T Minus Host
My old marketing days.
Maria Varmazes
That was what we used as well. No, no, no, no. Okay. I just wanted to make sure I was, I was understanding what we meant by SMEs in this case. All right, so security as a differentiator. But there are significant barriers because of cost, because it is usually seen as a cost center and not a, you know, a profit center. Understandably, that is a, that is a long standing problem with. I'm not, it's not cybersecurity's fault, but that is a longstanding struggle in cybersecurity, that is. Yes. Um, so what recommendations, next steps, conclusions? What, what, what, what's the takeaway from that paper on that front?
Sharon Lemak Vincier
Yeah, well, I think there's, if you don't mind, a couple other points in terms of the intersection language. Languages was a real issue as well. Do you know, in terms of space and cyber, I think we've mentioned that before about speaking different technical languages and how you bring that together.
Maria Varmazes
Like SME. Like we just.
Sharon Lemak Vincier
Yes, exactly. Like just.
Maria Varmazes
Yeah, there you go.
Sharon Lemak Vincier
Just like we've done. And looking at the geopolitical landscape, looking at what different countries are doing and how they're approaching it. So the report also looks at different nations and looks at the laws and regulations and their technical kind of appetite. So to see what's going to happen and what the movements are and looking at the power that commercial actors actually wield within this kind of growing sector, the intersection of space and cyber. So in terms of the, the report, it suggests that Scotland should be really kind of maximizing that potential at the intersection because I don't see many nations actually capitalizing on the space cyber intersection. So there's work being done. But I was surprised, and even I'm not, I'm not afraid to admit it, that this is my area, but even I was surprised that the entrepreneur opportunities at the intersection, you know, there's. For those businesses so inclined to actually put their resources and time and effort here, I think they're going to make significant returns on their investment because this is a global problem.
Maria Varmazes
Yeah. And so Scotland stands to benefit as a leader in that. It sounds like, which it's. That's a pretty significant area to be a leader in right now especially.
Sharon Lemak Vincier
Yeah. So in addition to my reports, I've also proposed a new conceptual framework to try and help businesses to think about cyber. So back to that problem, that cyber is a tick box exercise. It happens annually. It's not very sexy and we've got multiple barriers. So when I was doing my re. Is that an understatement?
Maria Varmazes
Not very sexy. No. Yes.
Sharon Lemak Vincier
No, it's not sexy at all.
T Minus Host
I know, I know, I know, I know.
Maria Varmazes
You get space, which people go into because it's like, oh, space is cool. And you talk about cyber and they.
Sharon Lemak Vincier
Go, aw, that's it, don't they? They just seem to turn off, sadly. And yet cyber is super exciting and it's so important that you kind of go, really? This is a really sexy area. But it's got a really bad image. Right. So it needs some Help.
Maria Varmazes
Some PR help. Yes.
Sharon Lemak Vincier
So when I was doing my research and writing my many reports, the same kind of issues kept on coming up. And that made me think of a strap line that I shared this this week at Global Millsat. And basically what I'm suggesting is that for the space sector, in terms of cybersecurity, we need entrepreneurs and leaders to think like spies. So that's a top line. So think like spies, look at the horizons scanning, look in the gaps, look in the blind side and start to think about what is the next type of threat vector that we're going to have to face in the space domain and what kind of approaches can we do to develop products and services that help address that. So we need people in cyber to think like spies. We need them to build systems. So we need to build resilient systems for harsh environments and that unpredictability. So we need to build like astronauts. Because if we think about astronauts in space, they've not got all the tools and we just need to think about the Apollo 13 mission. Yeah. When they had to. Yeah. So they had to recover quickly and it was mission critical. So you need to think like a spy, you need to build like an astronaut, and then you need to innovate like an entrepreneur. So we need products to the market, so we need to start thinking about that entrepreneurial and that kind of disruption and innovation and really inject it. So I think if we think like that, it kind of makes it a wee bit more sexier. Yeah. Because we're space and we're entrepreneurs. Three of the most sexiest things that we could do. Yeah.
Maria Varmazes
I'm like, that's great messaging. I just have to say, I love that. Great top lines. Just my marketing brain is going, ooh, that's very nice. So that's directed mainly at, like, the space industry because, you know, people were building these incredible systems and spacecraft. I'm just curious, do you think the cybersecurity industry is ready to support the space industry in the way that the space industry needs? Like, do we think that they understand the space industry's challenges or is it still just sort of, again, that two different languages situation?
Sharon Lemak Vincier
Yeah, you're shaking your head now. Yeah. I genuinely don't think cyber fully understands space. Right. However, as a. As I've said by my reports, the pure entrepreneurial potential. Right. So if we're talking about, you know, follow the money. Right. Or money talks, if you're a cyber professional getting to understand space, you're guaranteed to make quite significant sums, in my opinion. Right. Because the space sector is only going to grow. And in terms of, we think about even the dual nature in the military, the attacks in space are so significant and so important that if you were to be able to develop the products and services to help protect space assets from cyber attacks, you're only a winner, in my opinion. Right. So if you follow the money, I think cyber professionals should be thinking about that. And then if we make it sexier, more engaging, so we say, well, we need people that are. Think like spies and build like astronauts and innovate like entrepreneurs, and we make it that gateway that it becomes a really sexual, sexy intersection. And it's got the kind of evidence base and the money behind it. To me, it's a no. Why would you not want to be doing it?
Maria Varmazes
Yeah, no, I'm with you on that. I love this intersection of all. I just, I love it. It's such a fascinating place to be. And it's also just to get a little woo, I guess, for lack of better term, the cultural meshing is just fascinating to sort of watch that happening in real time, because that has to happen too. But anyway. I know, but we're talking about, like, the business capabilities and technical capabilities and technical understanding of. From two very complex worlds that need to mesh more. And it's just really, you're. I envy you, Sharon. You're at the coolest place that you get to just be in that you really are and to be able to.
Sharon Lemak Vincier
Think differently because it's kind of a blank slate, you know, at the intersection. So that's why I think it's dead cool for other people to join. We've not got enough people that are working in this space, but there is a blank space there that you can really kind of put your mark there. So I think that's really exciting for a professional as well to be going. Well, actually, that's where I want to be. So. Yeah, so that's my. It's a new conceptual framework and it builds on. I'm not going to bore you to tears, but it pulls on academic theories and a strong evidence base, so there's robustness underneath that. But for those that don't need to understand the theoretical frameworks in that, I think the top line is quite catchy, in my opinion, and hopefully that'll. Yeah, hopefully that'll encourage people to explore more.
Maria Varmazes
We'll be right back after this quick break. I'm wondering, for folks in the industry who want to build better, build more secure by design, what is, I guess, what's their Next step is, is it a matter of just hiring a cyber person or cyber team, or is this something that they have to build their own expertise internally? Is it working with a vendor? Like, I mean, I imagine it depends a lot on what you're doing, but I mean, what is the path there?
Sharon Lemak Vincier
Well, it's interesting and I think, although I'm talking about entrepreneurs and the commercial sector, I was at Milsa where I was speaking this week, Global Milsa in Lond. And really when we're seeing more of the military engaging with commercial products and obviously the commercial off the shelf products, but we're seeing a real fusion here like never before between the commercial actors. So I think it's really interesting to see how that's going to feed through the ecosystem. Back to your point, is it that you just, you're looking for a cyber person? I don't think we have the skills. In fact, my report suggests that we don't. There's a massive gap. Right. And we've got a war going on in terms of skills. And the people that understand space and cyber and understand that intersection are going to be really sought after. And I would suggest that the salaries, et cetera, are going to reflect that expertise as well. Because I don't think you can just take a cyber person and pluck them in space. I don't think that's going to work. It's just we need more of a fusion and integration rather than two silos approaches.
Maria Varmazes
Yeah, I think you're totally spot on. And the people that I've interviewed that have a really solid, or seem to from the outside, a really solid understanding of both worlds, almost 201 have military backgrounds, which I think is really fascinating and a great opportunity for folks who are coming out of the military looking for what they want to move into. I think that's an amazing advantage for our veterans. So that's. It's great for those of us who are not in the military. I think it's an interesting question on how to gain that expertise. But I mean, I'm sure there are paths. I mean, I don't know what they are, but I'm sure there are. But gosh, if I was doing it all over again, If I was 20 years younger and looking at a career path, I'd be like, I don't know what I'd be looking into. Because this is really cool. Yeah. Because my interests meshed well.
Sharon Lemak Vincier
Exactly. But it's such an issue just today. Right. But if we think 20 years ago and we think about social media. Right. That was a niche issue. And look how it's transformed our world. Right. And there's, as I said, there's no country that's got this tied down. So for professionals looking for carve out their niche, this is a fantastic area. But it's also mission critical as well.
Yes, indeed.
Maria Varmazes
Yep. Yeah. You know, I could talk to you about this like for literal hours, Sharon.
Sharon Lemak Vincier
I just like.
Maria Varmazes
Oh, my God. All right, so I. So that sort of is your first paper. You also had a second paper which just more broadly looks at the UK in general. Sort of similar issue. Any takeaways from that that are distinctive that you want to highlight from that one?
Sharon Lemak Vincier
No, I think just really came back to the similar message, unsurprisingly, that if the UK wants to be a leader in space, then this is one area that it could really set. It could really lead. So that's why I'm suggesting it focuses on the cyber safe gateway so that other nations want to work with us. Because we are prioritizing cybersecurity and resilience not just for domestic space sector, but for the global sector as well. We want, I think we should aim to be a preferred partner, one that looks at secure by design.
Absolutely.
Maria Varmazes
All right, Another great takeaway there. So the third. Now the third paper, that one was Women in Leadership in Space Cyber. Am I remembering that one correctly? Okay, yes. I don't know if anyone. Has anyone actually covered that before? Because I was like. I was gonna say. I think you're the first. Please tell me more about that. Cause I am very interested in that.
Sharon Lemak Vincier
Well, I'm not giving all my secrets away before it's published.
Maria Varmazes
Oh, come on.
Sharon Lemak Vincier
Yeah, but it's just really looking at this gap. As I've said already, there's not enough people at this intersection. But when we look at women in both space and cyber, we know that there's real problems with inclusion. We know that there's leadership. G. So my argument is that we need to start thinking about what the criminal or hostile nation posture is. Right. And what is the competitive advantage that women can bring and what is the type of leadership that we can develop in this intersection. There's so many opportunities for women to lead here, and it's addressing the historical lack of inclusion in both sectors. So I'm basically suggesting, look, the sector needs disruption right at the intersection. We need disruption and we need new ways of thinking. And women are bringing a whole diverse strength to that intersection that we need to include them. So sorry, maybe that's a waffle.
Maria Varmazes
No, no, it's quite all right. The ongoing struggles of trying to have more women in these areas. Including in these areas, but also just in general, a lot of the very. The areas where historically women have not often been in as much. I was an engineer for some years and then I left. So I'm like, I'm part of the problem. I dropped out of that, which I always feel kind of guilty about that. But it is a. Yeah, I know, I know, but it's just always like, oh, yeah, it's not any. Nobody has like a silver bullet answer to this. This is such a complex mesh of so many factors that, you know. But yes, I'm so glad.
Sharon Lemak Vincier
Yeah. And you know, the point I'm making as well is that this is not at the detriment or anti male. Neither. It's about.
No, no, no.
Inclusion means that everyone wins because we're challenging the norm so that everyone can help make their mark in this space. So it's very much, you know, looking at leadership as well, because I want women to reach the highest levels in this intersection as possible. So, yeah, so that's that.
Maria Varmazes
I appreciate that. Well, I really. I don't think I've read that one, so I would like to, if you don't mind. I would love to read that. That's so great, Sharon, you're amazing. Thank you just for talking to me yet again about all the amazing things you've been working on. Now I gotta ask, what are you up to next?
Sharon Lemak Vincier
Oh, well, I've not even finished with my list.
Maria Varmazes
You haven't finished with your list? Oh, my God. I thought there were three. There's more than three.
Sharon Lemak Vincier
Well, there's three reports and my new framework. But one of the also cool things is that I've put my tartan into a spacesuit and it's the first tartan spacesuit. Did you see it?
Maria Varmazes
Did you share that on LinkedIn? I feel like you shared that on LinkedIn at some point. Yeah. Okay, so I know what you're talking about, but the listeners might not. So, yeah, tell me more.
Sharon Lemak Vincier
So at the start of the year, I registered my space tartan, Vincere Adashtra. And I've been looking at this. How do we curate the space heritage in Scotland? And what does that mean? Like, mean for Scotland as it's emerging as a space sector. So I took my tartan and I've created a tartan spacesuit.
So amazing.
Maria Varmazes
I love that you did that. I just really love that you did that. You just want the. You want the extra steps to make that happen? I just. It's so great.
Sharon Lemak Vincier
So I'm hoping to make. I'm hoping to have it in production. So I'm hoping to have the spacesuit ready in 2020 for.
Maria Varmazes
Where will I be able to see this spacesuit once it's made? Because I am. I need to see it badly.
Sharon Lemak Vincier
Oh, I'm hoping that it will be traveling to space conferences in 20. That's the plan.
Maria Varmazes
I cannot wait to get my photo with your spacesuits. I can't even begin to tell you. Oh, my gosh. Yeah. That's so great. I love that so much. Is there a mock up of that? Did you do a mockup? Yeah. You did? Yeah. We'll have to put a link to that in the show notes because it's really. I just that, like, am I imagining that or did you have a mock up of this?
T Minus Host
Yeah.
Maria Varmazes
Oh, my God. So spacesuit, tartan, Spacesuit, Tartan. Spacesuit, tartan, spacesuit. Okay, so because you're always busy, what are you working on next?
Sharon Lemak Vincier
What am I working on next? No, really, it's just academic papers now. Just sharing the theoretical work. And, you know, as an academic as well, my many. Is it my many bows, we've got to obviously write our academic journal. So that's what I'm going to be hibernating for the next few and write in my journals.
Maria Varmazes
Oh, fun times. Hibernating for the winter. I get it. Bless it. Yeah. Well, I wish you all the best on that. My dad was a professor many years ago, so I remember it well. Yeah, it's a lot. So I wish you all the best on that. Thank you, Sharon. You know, I love talking to you, like, anytime. So please, when you have more exciting things to share, please come back because you know I will happily chat with you anytime.
Sharon Lemak Vincier
So thank you, Maria. And can we remember people to think like spies, build like astronauts, and innovate like entrepreneurs?
T Minus Host
That's it for T Minus Deep Space, brought to you by N2K CyberWire. We'd love to know what you think of this podcast. You can email us@spacen2k.com or or submit the survey in the show notes. Your feedback ensures we deliver the information that keeps you a step ahead in.
Maria Varmazes
The rapidly changing space industry.
T Minus Host
T Minus Deep Space is produced by Alice Carruth. Our associate producer is Liz Stokes. We're mixed by Elliot Peltzman and Trey Hester with original music by Elliot Peltzman. Our executive producer is Jennifer Ibin. Our executive editor is Brandon Karp. Simone Bottrella is our president. Peter Kilpe is our publisher. And I'm your host, Maria Varmazes.
Maria Varmazes
Thanks for listening.
T Minus Host
We'll see you next time.
Podcast Summary: CyberWire Daily – Episode: Scotland’s Position to Lead Cyber and Space
Introduction
In the January 1, 2025 release of CyberWire Daily, hosted by Maria Varmazes from N2K Networks, the focus shifts to Scotland's emerging role at the intersection of cybersecurity and space industries. The episode features an insightful discussion with Sharon Lemak Vincier, an academic specializing in space and cybersecurity. Sharon shares her extensive research on Scotland's potential to lead in securing space-based assets and fostering innovation within this critical sector.
Scotland’s Space Cyber Potential
Sharon Lemak Vincier introduces her report titled "Cybersafe Gateway," which explores Scotland's unique position in the European space sector. Scotland boasts a robust satellite manufacturing industry, surpassing other European nations in satellite production. Sharon emphasizes the importance of integrating cybersecurity "by design" into satellite development to ensure resilience against emerging threats.
"Scotland builds more satellites than anywhere else in Europe, and it makes complete sense to build cyber secure by design into that." [03:21]
She highlights that Scotland’s historical expertise in satellite manufacturing provides a competitive advantage. However, the report reveals that the commercial space sector in Scotland has untapped potential for enhancing cybersecurity, particularly among small and medium-sized enterprises (SMEs).
Challenges for SMEs in Cybersecurity
A significant portion of the discussion centers around the challenges SMEs face in implementing robust cybersecurity measures. Sharon points out that SMEs often view cybersecurity as a cost center rather than a profit center, leading to underinvestment in essential security practices. This perspective hampers the ability of these businesses to build a more secure ecosystem for the space sector.
"If you're building satellites, you should really be thinking about the cyber secure by design built into that." [03:21]
She also addresses the language barriers between the space and cybersecurity industries, which complicate collaboration and integration. Sharon suggests that bridging this gap is crucial for fostering a unified approach to securing space assets.
Sharon’s Conceptual Framework: Think Like Spies, Build Like Astronauts, Innovate Like Entrepreneurs
To address the existing challenges, Sharon introduces a new conceptual framework designed to make cybersecurity more engaging and integral to the space industry. She proposes that cybersecurity professionals approach their work with the mindset of spies, astronauts, and entrepreneurs. This multifaceted approach aims to:
"We need to think like spies, build like astronauts, and innovate like entrepreneurs." [08:38]
Sharon believes this framework will rejuvenate the perception of cybersecurity, making it a more attractive and dynamic field within the space industry.
Women in Leadership in Space Cyber
Sharon also discusses her forthcoming report on female leadership within the space cybersecurity intersection. She highlights the underrepresentation of women in both sectors and the unique perspectives they bring to leadership roles. Sharon argues that increasing female leadership will drive innovation and enhance the sector's overall resilience.
"The sector needs disruption right at the intersection. We need new ways of thinking, and women are bringing a whole diverse strength to that intersection." [18:07]
She emphasizes that inclusion benefits everyone by challenging existing norms and fostering a more diverse and effective workforce.
Tartan Spacesuit Initiative
In a lighter yet culturally significant endeavor, Sharon shares her project of integrating Scottish heritage into the space industry by designing the first tartan spacesuit. Registered as "Vincere Adashtra," this initiative aims to curate Scotland's space heritage and promote national pride within the burgeoning space sector.
"I've created a tartan spacesuit... hoping to have it ready for space conferences in 2020." [21:30]
This innovative project underscores Scotland's commitment to blending tradition with cutting-edge technology, symbolizing the nation's leadership in space cybersecurity.
Conclusions and Recommendations
Sharon concludes by advocating for Scotland to capitalize on its strengths in satellite manufacturing and cybersecurity to become a global leader in securing space assets. She recommends:
Key Takeaways
Notable Quotes
Conclusion
This episode of CyberWire Daily offers a comprehensive exploration of Scotland's strategic position in the rapidly evolving domains of cybersecurity and space. Sharon Lemak Vincier's research and innovative initiatives provide valuable insights into how Scotland can harness its existing strengths, address industry challenges, and foster an inclusive, forward-thinking environment to lead the global space cybersecurity landscape.