0% found this document useful (0 votes)
412 views

Cyber Security Course 5

This document discusses cyber security strategies at the national and international levels. It outlines the key components of cyber strategies for the European Union, NATO, and several countries. Common elements include assessing threats, protecting critical infrastructure, developing incident response capabilities, fostering public-private partnerships, and engaging in international cooperation to address cyber issues. The strategies are aimed at strengthening cyber defense, enhancing resilience, and promoting a secure online environment.

Uploaded by

Cristina Paliu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
412 views

Cyber Security Course 5

This document discusses cyber security strategies at the national and international levels. It outlines the key components of cyber strategies for the European Union, NATO, and several countries. Common elements include assessing threats, protecting critical infrastructure, developing incident response capabilities, fostering public-private partnerships, and engaging in international cooperation to address cyber issues. The strategies are aimed at strengthening cyber defense, enhancing resilience, and promoting a secure online environment.

Uploaded by

Cristina Paliu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPT, PDF, TXT or read online on Scribd
You are on page 1/ 19

COURSE 5

CYBER
SECURITY
NATIONAL AND
INTERNATIONAL
CYBER SECURITY
STRATEGIES
Agenda
Fundamentals of
Cyber Strategies

EU
EU Cyber
Cyber Policies
Policies &
&
Strategies
Strategies

Policy
NATO Cyber Policy
- Cyber Defence

National Cyber
Strategies
Fundamentals of Cyber Strategies
• Different approaches
• Most Countries & International Organisations
(NATO, European Union) - specific Cyber Security
Strategy (CSS).
• for Most countries: Cyber Security Strategy -
derived from their National Security Strategy:
– identify major objectives IAW Economical, Political, and
Social Objectives
– assess national values and interests
• SWOT Analisys for Cyber Space
• Shape organisational structures to cyber defence
tasks.
• CSS may envisage cooperation programs:
– with players of the industry and various companies.
– joint Research and Development programs,
– common training
– common cyber defence exercises
SWOT Analysis

Strenghts Weaknesses

Opportunities Threats

Building on “S” - Avoiding “W”


Exploiting “W” - Removing “T
European Union CSS
• Cyber Security Strategy for the European Union
2013
•– An
Cyber
Open,Security Strategy
Safe and Securefor the European Union –
Cyberspace
2013 1.Increasing
An Open, CybSec
Safe and capab&coop
Secure 2.EU-stronger player
Cyberspace
3.Mainstreaming CybSec in EU policies

• EU Cyber Defence Policy Framework


2014 • more than 40 cyber related defence actions
2014
2014
• Global Strategy for the EU Foreign and Security
Policy - Directive on Security of Network and
2016 Information Systems (NIS Directive), Chapter 5
2016
2014 • Resilience, Deterrence and Defence – Building
strong cybersecurity for the EU
• upgraded the 2013 EU CSS: 1. Upgrading ENISA
2017 2.Building National Cyber Resilience 3.Conflict prevention
and stability in cyberspace
NATO Cyber Policy
• Alliance’s primary tasks: collective defence,
crisis management and cooperative security
– NATO and its Member states rely on robust
and resilient cyber defences
• Jan. 2008 – first Policy on Cyber Defence (after
EST 2007 cyber-attacks)
• Jun. 2011 -2nd Policy: Defending the Networks
– The NATO Policy on Cyber Defence: set out
– a vision for coordinated efforts in cyber
defence
– an associated action plan for its
implementation
NATO Cyber Policy
ESSENTIAL FEATURES:
• Cyber Defence – part of NATO’s core task
of collective defence
• NATO protects its own networks
• CYBERSPACE = domain of operations
• Member states protect their national
networks
• Enhanced capabilities for cyber education,
training and exercises
• Technical Arrangement on cyber defence
cooperation with the European Union,
signed in 2016.
NATO Cyber Policy
NATO established in
Tallinn, Estonia in 2007:
• NATO Cooperative
Cyber Defence Centre
of Excellence
(CCDCOE)
• International Military
Organisation
• MISSION: to enhance the
capability, cooperation
and information sharing
by virtue of:
– education,
– research and
development,
– lessons learned
– consultation
National Cyber Strategies

AUSTRIA

GREECE

ITALY

MOLDOVA

POLAND

ROMANIA

UNITED STATES OF AMERICA


National Cyber Strategies
COMMONALITIES:
- derives from National Security Strategies
OBJECTIVES:

Address cyber crime Engage in international


Engage in international cooperation
cooperation

Critical Information
Critical Information Infrastructure Protection Establish
Establish a a public-private
public-private partnership
Infrastructure Protection partnership

Establish an incident
Develop national
Develop national cyber
cyber contingency plans
response capability
contingency plans

Establish incident
Foster R&D reporting mechanisms
AUSTRIA CSS
• The Austrian Cyber Security Strategy / ACSS
(Österreichische Strategie für Cyber Sicherheit /
ÖSCS) - issued in 2013
• Build awareness and confidence in the Austrian
society
• By taking a number of awareness measures,
builds a “culture of cyber security”.
• Austrian population should be aware of the
individual’s personal responsibility in cyber
space.
• All citizens should ensure adequate protection of
their online activities and have the necessary
capabilities for electronic authentication and
signature
GREECE CSS
• ΕΘΝΙΚΗ ΣΤΡΑΤΗΓΙΚΗ ΚΥΒΕΡΝΟΑΣΦΑΛΕΙΑΣ /
National Cyber Security Strategy
• Issued in 2017
• Two Phases that determine a continuous life
cycle
– The development and implementation of the
Strategy
– Assessment and review in the second phase.
• National Strategy is first developed and
implemented, then assessed, and, if deemed
necessary, revised and updated.
• Balance security with privacy
• Measures to assure Citizen's awareness
ITALY CSS

• Quadra Strategico Nazionale per la Sicurezza


dello Spazio Cibernetico / National Strategic
Framework for Cyberspace Security
• Issued in 2013
• Establish an institutionalised form of cooperation
between public agencies
• Provide incentives for the private sector to invest
in security measures
• Strengthen training and educational programmes
• Establishes Roles and Tasks of the different
public entities
• Sets out Tools & Procedures to strenghten
national cyber defence capability
MOLDOVA CS Programme

• Programul de Securitate Cibernetică / Cyber


Security Programme
• Seven Areas of Intervention
1. safe processing, data storage and accessing;
2. security and integrity of the electronic
communication networks and services;
3. prevention capabilities and emergency
response;
4. preventing and combating the cybercrime;
5. strengthening cyber defence capabilities;
6. education and informing;
7. international cooperation and interaction.
POLISH CSS
Cyber Security Strategy for the years 2017-2022, (an
extensive update of the 2013 version)
Issued in 2017
The strategy defines four objectives:
• 1 - capacity to combat cyber-threats at national level.
• 2 - Increasing capability to counter such threats.
• 3 - Enhancing the digital competences of local entities.
• 4 - Strengthening Poland's international position in the
field of cyber security
The objectives will be achieved through:
• implementation of new legislation
• facilitating investments in technology
• overhauling the institutional framework
ROMANIA CSS

Cyber Security Strategy of Romania / Strategia de


Securitate Cibernetică a României
Implemented 2013
Objectives
• Regulations & Institutional adaptation to handle the
cyberspace threats
• establish and implement security profiles for the
protection of critical infrastructure;
• ensuring cyber infrastructure resilience;
• ensuring the security through understanding,
preventing and countering vulnerabilities,
• identifying the opportunities of cyberspace to promote
the interests, values and national goals in cyberspace;
• promote cooperation between the public / private
sectors at national / international cooperation in cyber
security
USA NCS

National Cyber Strategy of the United States of


America /
Issued September 2018
The Strategy explains how USA will:
• Defend the homeland by protecting networks, systems,
functions, and data;
• Promote American prosperity by nurturing a secure,
thriving digital economy and fostering strong domestic
innovation;
• Preserve peace and security by strengthening the ability
of the United States – in concert with allies and
partners – to deter and, if necessary, punish those who
use cyber tools for malicious purposes;
• Expand American influence abroad to extend the key
tenets of an open, interoperable, reliable, and secure
Internet
Agenda
Fundamentals of
Cyber Strategies

EU
EU Cyber
Cyber Policies
Policies &
&
Strategies
Strategies

Policy
NATO Cyber Policy
- Cyber Defence

National Cyber
Strategies

You might also like