NSA to create new division to bolster US cyber defences
Focus on defensive operations comes amid mounting geopolitical tensions
The USA's National Security Agency (NSA) is setting up a cyber security division with a specific focus on guarding the country against attacks from foreign adversaries like North Korea and Iran.
The organisation, which is tasked with overseeing America's cyber security operations, will establish a group dubbed the Cybersecurity Directorate with the aim of unifying foreign intelligence and cyber defence missions, according to CNN.
This new directorate, which has an exclusive focus on defence, is being formed amid rising geopolitical tensions with countries like Iran, against which the US was widely reported to have launched a cyber attack in June.
The group will be led by the NSA's lead investigator on election fraud, Ann Neuberger, and will become operational from 1 October.
"This new approach to cyber security will better position NSA to collaborate with key partners across the US government like US Cyber Command, Department of Homeland Security, and Federal Bureau of Investigation," the NSA said.
"It will also enable us to better share information with our customers so they are equipped to defend against malicious cyber activity."
The NSA is renowned for its focus on offensive cyber capabilities and also gained notoriety for its role in devising a series of programmes to orchestrate mass data gathering, as revealed by the Edward Snowden leaks.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Most recently the organisation was indirectly linked with a devastating hack on the government of Baltimore. Researchers learned the tool used to shut down the government and lock people out of essential services, dubbed EternalBlue, was developed by the NSA and used by cyber criminals.
This additional focus on defence reflects a time of heightened tensions across borders, not just between the US and Iran, but with China too.
Both nations, as well as North Korea, have been linked with a handful of known cyber gangs. The NSA's decision to create a defence-centric unit comes as the scale and severity of cyber attacks continue to rise.

Keumars Afifi-Sabet is a writer and editor that specialises in public sector, cyber security, and cloud computing. He first joined ITPro as a staff writer in April 2018 and eventually became its Features Editor. Although a regular contributor to other tech sites in the past, these days you will find Keumars on LiveScience, where he runs its Technology section.
-
Enterprise AI adoption is about to get the Big Brother treatmentOpinion Worried your staff aren’t using those shiny AI tools you petitioned for? Big tech has you covered
-
Dreamforce 2025: What's an agentic OS?ITPro Podcast NPUs, e-ink, and immersive headsets are the latest hardware innovations for business devices
-
Foreign states ramp up cyberattacks on EU with AI-driven phishing and DDoS campaignsNews ENISA warns of hacktivism, especially through DDoS attacks
-
A new 'top-tier' Chinese espionage group is stealing sensitive datanews Phantom Taurus has been operating for two years and uses custom-built malware to maintain long-term access to critical targets
-
‘States don’t do hacking for fun’: NCSC expert urges businesses to follow geopolitics as defensive strategyNews Paul Chichester, director of operations at the UK’s National Cyber Security Centre, urged businesses to keep closer tabs on geopolitical events to gauge potential cyber threats.
-
Three ways to evolve your security operationsWhitepaper Why current approaches aren’t working
-
Beat cyber criminals at their own gameWhitepaper A guide to winning the vulnerability race and protection your organization
-
Quantifying the public vulnerability market: 2022 editionWhitepaper An analysis of vulnerability disclosures, impact severity, and product analysis
-
Same cyberthreat, different storyWhitepaper How security, risk, and technology asset management teams collaborate to easily manage vulnerabilities
-
Business value of ServiceNow security operationsWhitepaper Experience transformational gains from automating workflows and data-sharing among IT, security, and risk teams to rapidly remediate threats