1 / 40

IFS/2013/329397

EU funded Enhancing Cyber Security Project. IFS/2013/329397. 19 /09/2014. Presented by: Besnik LIMAJ Team Leader. 1. PROJECT SYNOPSIS. 2. PROJECT FUNDED BY: EUROPEAN UNION’S INSTRUMENT CONTRIBUTING TO STABILITY AND PEACE LAUNCHED: JANUARY 2014 – DURATION 24 MONTHS TOTAL BUDGET:

dawn
Download Presentation

IFS/2013/329397

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. EU funded Enhancing Cyber Security Project IFS/2013/329397 19/09/2014 Presented by: Besnik LIMAJ Team Leader

  2. 1 PROJECT SYNOPSIS 2

  3. PROJECT FUNDED BY: EUROPEAN UNION’S INSTRUMENT CONTRIBUTING TO STABILITY AND PEACE LAUNCHED: JANUARY 2014 – DURATION 24 MONTHS TOTAL BUDGET: 1,485,000 Euros

  4. 2 CONSORTIUM 4

  5. CONSORTIUM Adetef is the international technical assistance consultancy agency and operator for French ministries in charge of Economy and Finance, Industry, Sustainable Development and State Reform. It takes up and disseminates financial and economic best practices, providing national governments and public authorities with cutting-edge technical expertise from French officials and public sector experts. CIVI.POL Conseil is the in-house consulting and service company of the French Ministry of Interior, and its mandated body for international assistance. Since its founding in 2001, CIVI.POL Conseil has been providing services in the areas of the French Ministry of Interior.

  6. 3 PROJECT PARTNER COUNTRIES 6

  7. FYROM – MOLDOVA – KOSOVO - AZERBAIJAN • REGIONS: • East Europe and Western Balkans • PARTNER COUNTRIES: • The Former Yugoslav Republic of Macedonia, • Kosovo, • and Moldova

  8. 4 OBJECTIVE AND EXPECTED RESULTS 8

  9. OVERALL OBJECTIVE: increase the security and resilience of ICT networks in the partner Countries by building and training local capacities to adequately prevent, respond to cyber attacks and/or accidental failures

  10. EXPECTED RESULTS TO BE ACHIEVED • Creation and/or the development of National Computer Emergency Response Teams (CERTs) and 24/7 Contact Points; • Adoption of a National Cyber Security Strategy (NCSS) • Development of effective international cooperation

  11. COMPONENTS • COMPONENT 1: • Cyber security strategies and awareness raising • COMPONENT 2: • CERT Capacity Building • COMPONENT 3: • Enhancing Cooperation: • PPPs and International cooperation

  12. 5 PROJECTS ACTIVITY AREAS 12

  13. COMPONENT 1 • CYBER SECURITY STRATEGIES AND AWARENESS RAISING • CYBER SECURITY STRATEGY: • ACTIVITY AREA 1.1.- Advice on creation and adoption of National Cyber Security Strategies (including advice on policy, financial and legal implications) • AWARENESS RAISING: • ACTIVITY AREA 1.2. -Advice on raising awareness on cyber security including organisation of national and international workshops for decision makers and a closing conference

  14. COMPONENT 2 • ENHANCING CERTs CAPACITY • ACTIVITY AREA 2.1.- Support on establishment/strengthening of operational CERTs units (including inter alia advice on developing effective cyber security incident reporting; Skills training enhancement) • ACTIVITY AREA 2.2.- Facilitation of joint cyber security exercises • ACTIVITY AREA 2.3. -Advice on development of specific curriculum/training course for CERT officers

  15. COMPONENT 3 • ENHANCING COOPERATION: PPPs AND INTERNATIONAL COOPERATION • PPPs • ACTIVITY AREA 3.1.- Enhance cooperation between government and private sector on Cyber Security and advice on creation of new flexible and updated academic curricula including computer science (CS), and science, technology, engineering and mathematics (STEM) degrees • INTERNATIONAL COOPERATION • ACTIVITY AREA 3.2. – Fostercooperation with international bodies as ENISA in the field of cyber security • ACTIVITY AREA 3.3. - Facilitation of participation in international events on cyber security for the CERTs and 24/7 points of contact • . • ;

  16. 6 ACTIVITY STEPS on CERT’s 16

  17. ADVICE ON CREATION OF NATIONAL CERT’S • TASKS: • • Identify the right stakeholders during the Paris Workshop in April - COMPLETED • Review of the current situation in FYROM and KOSOVO– COMPLETED • Chose the right services: In the early stage CERT will focus mainly on providing some of the core-services as: • Alerts and warnings • Incident handling • Incident analysis • Incident response support • Incident response coordination • Announcements as Proactive services; • Define communication approach (SWOT/PEST Analysis); • Define Mission statements; • Develop organisational structure; • Coordinate with direct partner location of the CERT (in accordance with the country legislation); • Help to make CERT in these two countries operational. Establish process flows and operational/technical procedures for delivering core CERT services as: • Alerts and Warnings; • Announcements; • Incident Handling; • Establish cooperation with ENISA and other CERTs in the region; • Draft recommendations, action plans and road map.

  18. ADVICE ON STRENGTHENING OF NATIONAL CERT’S • TASKS: • Identify the right stakeholders - COMPLETED • Review of the current situation in Moldova - COMPLETED; • Interview relevant staff of CERT - COMPLETED; • Conduct needs assessment of further training - COMPLETED • Review of present CERT operational rules - COMPLETED; • Identify which servicesand trainings must be provided in priority; • Implement these recommendations;

  19. FACILITATION OF TWO - CYBER SECURITY EXERCISES Month 20 Month 14

  20. METHODOLOGY

  21. FACILITATION OF PARTICIPATION IN RELEVANT CYBER SECURITY MEETINGS

  22. OTHER TAILOR MADE ACTIVITIES BASED ON SPECIFIC COUNTRY NEEDS

  23. 7 COUNTRY FOCAL POINTS 23

  24. COUNTRY FOCAL POINTS THE FORMER YUGOSLAV REPUBLIC OF MACEDONIA National team’s representatives: • The Cyber Crime Unit – MoI; • Ministry of Information Society and Administration Agency for Electronic Communications - (CERT) Ministry of Interior University, MASIT ...

  25. COUNTRY FOCAL POINTS KOSOVO National team’s representatives: Office of the Prime Minister • Agency of Information Society • The Cyber Crime Unit – MoI; • Regulatory Authority of Electronic and Postal Communications – C.E.R.T. • Ministry of Justice • University

  26. COUNTRY FOCAL POINTS MOLDOVA National team’s representatives: • CERT – GOV – MD Ministry of Internal Affairs Office of the Prosecutor General National Center for Protection of Personal Data University

  27. 8 CERT’s in PARTNER COUNTRIES 27

  28. FYROM - MACEDONIA • LOCATION: Agency for Electronic Communications • LEGAL FRAMEWORK: Ministry for Information Society and Administration in coordination with AEC – in a process of ammending the Law on Electronic Communications • – Indicative expected ammendment of the Law – December 2014 • STAFF: AEC – 140 Employees - CERT – up to 5 persons • Proposed MKD- CERT implementation phases are:

  29. FYROM - MACEDONIA • Phase 1 • Reactive services • Incident response and handling (both remote and onsite) • Alerts and warnings • Vulnerability response • Proactive services • Announcements and basic awareness • Education Training • Phase 2 • Reactive services • Incident response coordination • Vulnerability response coordination • Thread analysis • Proactive services • Vulnerability analysis • Technology watch • Security quality • Advanced awareness • Education Training • Phase 3 • Reactive services • Security audits and assessments • Proactive services • Forensic analysis • Security quality management services • Risk analysis • Security consulting

  30. KOSOVO • Services • Basic KOS-CERT services (2014-2015): • Reactive services • Incident analysis and response • Alerts and warnings • Proactive services • Announcements • Training • LOCATION: Regulatory Authority for Electronic and Postal Communications (RAEPC) • LEGAL FRAMEWORK: Regulated with the • Law on Electronic Communications No. 04/L-109 – November 2012 and • Electronic Comm. Sectoral Policy‐ Digital Agenda for Kosovo 2013‐2020 • STAFF: RAEPC – 39 Employees - CERT – up to 5 persons and by the end of 2016 – in KOS-CERT are planning to work 8-10 people • Current situation: • Job advert published: • By end of September 2014 KOS-CERT – 2 people should be employed • High officer for Network Security and • Officer for Service developing

  31. KOSOVO Mobile Penetration rates in Kosovo: Broadband Penetration rates:

  32. MOLDOVA • CERT-GOV-MD is a governmental computer security incident response team founded within State Enterprise “Center of Special Telecommunications”. • CERT-GOV-MD's constituency are public authorities and critical information infrastructure providers of the Republic of Moldova. ABOUT CERT-GOV-md State Chancellery • Government S.E. Center of Special Telecommunications • Host organization Cyber Security Center CERT-GOV-MD Public Authorities Critical information infrastructure providers • Constituency

  33. MOLDOVA CERT-GOV-md Services • Proactive services: • - Announcements; • - Security-relatedinformation dissemination (Bulletins, Newsletters, Goodpractice guides). • Security quality management services: • Awareness building; • Security Consulting. • Additional Services: • Security audit; • ISO 27000 implementation.

  34. MOLDOVA INTERNATIONAL COOPERATION

  35. 9 TEAM - NEXT STEPS 35

  36. TEAM • KEY EXPERTS: • Besnik LIMAJ, KE 1: TEAM LEADER • Emilio BUGLI INNOCENTI KE 2: C.S. EXPERT • POOL OF NON KEY EXPERTS: • SENIOR EXPERTS: • JUNIOR EXPERT: • MORE S.T.E. TO BE IDENTIFIED PER SPECIFIC TASKS OF THE PROJECT

  37. PROGRESS UP TO - JULY 2014 • Project team mobilised; • Overlaps with other projects identified and avoided • Development of a detailed and updated Project Work Plan • Training Needs Analysis conducted; • Based on the Training Needs Analysis results, suggestions on the capacity building proposed in a detailed plan of activities; • Networks with relevant national stakeholders and international partners established; • Inception and 1st Progress Report submitted to the Contracting Authority.

  38. NEXT STEPS – UNTIL END OF DECEMBER, 2014 • ROME, ITALY - 43rd TF-CSIRT Meeting – 18-19 September, 2014 • SIBIU, ROMANIA TRAINING, CONFERENCE AND WORKSHOP ON CYBER SECURITY • 30 SEP-4OCT 2014 • PARIS, FRANCE WORKSHOP ON CYBER SECURITY STRATEGY AND PPP • 23-24 OCT 2014 • MENTORING SESSIONS PER COUNTRY – NOVEMBER 2014 • TRANSIT I – TRAINING, PRAGUE • CEH - ETHICAL HACKING TRAINING • RECRUITMENT OF FURTHER SHORT TERM EXPERTS

  39. SHORT TERM EXPERTS

  40. Contact: BesnikLimaj, Team Leader Email: besnik.limaj@encysec.eu Mobile: +377 44 506 403 www.encysec.eu

More Related