International and national experience of the legislation of the Critical Infrastructure Protection

1. International and national experience of the legislation of the Critical Infrastructure Protection 2012. 09. 18. Lt-Col. Balázs Bognár PhD Head of Department – Department for Critical Infrastructure Coordination Ministry of the Interior, National Directorate for Disaster Management National Inspectorate for Industrial Safety

2. The noun "security" stems from the Latin "securitas sine cura " ("securitas" or "securus", its two components are "sine=without", and "cura”= fear"). The most common approach of security is the status without threat or the absence of vulnerability . Security MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT

3. MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT The complexity of security • Security in a wider sense is composed of social (legal), political (diplomacy), economic, environmental (transportation, logistics, ecological), military, cyber, financial, sanitary (epidemics), homeland(police, disaster management) security.

4. What is security? MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT Prof. R. B. J. Walker Keele University Prof. Ken Booth University of Wales Prof. Barry Buzan Department of International Relations, LSE „security is the ability and opportunity of survival against risks, which are threatening existence” „Security is belonging to the competence of Ministry of Uncertain Things” „security is what we do”

5. Stages of transition of the security environment 23 October 1989: Proclamation of the Republic of Hungary June 1991: Withdrawal of the Soviet troops March 1999: Hungary’s accession to NATO May 2004: Hungary’s accession to the EU 5

6. Changes of challenges and risks affecting Hungary: „change of aproach!” I. Illegal migration Conflict in the Balkans II. Disasters Hazard of terrorism Organised crime Threats to critical infrastructures Breach of public order Energetic crises Epidemics 2012. 1989 1989. military crisis civil emergencies

7. PROTECTION OF VITAL INFRASTRUCTURE ELEMENTS (INFRASTRUCTURES)

8. Infrastructures in the everyday life First forms of infrastructures (irrigation systems, road networks) INFRASTRUCTURE = social environment NETWORK-LIKE SYSTEMS MODERNSOCIETY PROTECTION DEPENDENCE VITAL NEEDS Satisfying human needs Improving technologies Structuring services

9. History and state of play Római tűzvész New York 2001. Madrid 2004. Szegedi árvíz 1879. Bhopal 1984. Kolontár 2010. London 2005. Szökőár 2004. Szumátra

10. United States of America – (cold war/nuclear attacks) United Kingdom (10 sectors, 39 subsectors) Germany – 1990 (Federal Office for Information Technology Security) NATO – 2002 (CEP Council) International outlook NEW YORK 2001 Madrid 2004 London 2005 • EU – aftermath of terrorist attacks • 9/11 → Action Plan against Terrorism • Madrid 2004 → CIP Strategy • London 2005 → acceleration of actions

11. Vulnerability of infrastructures INTENTIONAL , MALEVOLENT ACTIONS NATURAL INCIDENTS terrorist attack, armed conflict flood and inland water, extreme weather nationalist extremists climate change TECHNOLOGICAL HAZARDS accident, human error, epidemic red sludge disaster

12. CriticalInfrastructure Protection – Directive OBJECTIVES PREVENTION PREPAREDNESS RESILIENCE • EU Program → without any experience or tradition • Consultation process → the way from terrorist attacks to the Directive • All-hazard approach, paying particular attention to terrorism • National and European infrastructures – subsidiary • Roles and responsibilities of owners/operators/users • Action plan

13. Liability of Member States – Hungary • The 1990’s – reinterpretation of security • 1995 – reform of civil protection (new classification) • 2000 – NDGDM – collection of data • June 2007– The „Green Paper” on the Hungarian Program • Government Decision Nr. 2080/2008. (VI. 30.) • Adoption of the „Green Paper” • Enactment of sectoral consultations • Elaboration of regulatory concept • Military preparation • Possibility of joining to CIWIN

14. Liability of Member States – Hungary • 2008–2009 – sectoral consultations, questionnaires • 10-12 May 2010 Balatonföldvár – international seminar • 26-28 October 2010 Slovakia – regional discussion • 4-5 November 2010 Bucharest – regional discussion • Government Decision 1249/2010. (XI. 19) on the governmental tasks • Responsibilities of the Minister of the Interior (coordination, EPCIP POC, international discussions) • Setting up a CIP Working Group • Designation of ECIs • European Commission – report • Consultation Forum

15. Liability of Member States – Hungary Ministry of Defence Office for the Protection of Constitution National DG for Disaster Management NDGDM Minister for the Interior Centre for Counter-terrorism National Headquarter for the Police Minister for Administration and Justice National Authority for Security National Office for Commercial Granting Minister for Economics National Authority for Traffic Minister for National Defence National Office for Energy Composition of the CIP Inter-ministerial Working Group

16. Liability of Member States – Hungary • 30 November 2010 – inaugural meeting: tasks with deadlines • elaboration of criteria for designation of ECI • proposals for potential ECIs • 8 December 2010 – adoption of statutes and working program • (15,22,29) December 2010 – January 2011 – discussion, clarification, adoption of cross-cutting and sectoral criteria of ECIs • 10 January 2011 – draft report for the European Commission • 20 January 2011 – adoption of the draft on the cross-cutting criteria of National Critical Infrastructures (NCI), report to the European Commission afterGovernmental approval • 11 February 2011 – discussion of NCI sectoral criteria (completed by the National Ministry for Development (NMfD)in March 2011) • since April – 2011 NMfD– CIP Consultation Forum ACTIVITY OF THE WORKING GROUP

17. Critical Infrastructure Protection CRITICAL INFRASTRUCTURES Definition: An asset, system or part of thereof which is essential for the maintenance of vital societal functions, health, safety, security, economic or social well-being of people, and the disruption or destruction of which would have a significant impact in a Member State as a result of the failure to maintain those functions. • Interdependence • Cyber security • Operation • Cascade effect • The weakest link & part-whole concept

18. Present of the National Program New Act on Disaster Management and its decrees – Responsibility of the Ministry of the Interior (MoI NDGDM) Visible and tangible change of attitude Dynamic development – became a priority area Significant scientific actions and tender possibilities in the field of CIP

19. Tasks given by the Head of the National Directorate General for Disaster Management (NDGDM): • Identifying the potential critical infrastructure elements; • Keeping critical infrastructures under authoritative control.

20. MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT Amendments in the legislation The Fundamental Law of Hungary Strategy of National Security/ Strategy of National Military Security Disaster Management Act Government Decree on Disaster Management Act Ordinance (s) of the Minister of Interior Order (s) of the Head of NDGDM Act on Critical Infrastructure Government Decree on Critical Infrastructure Legislations of different sectors

21. Law and Order in extraordinary cases (48-54. article): 5/ emergency situation The Fundamental Law of Hungary „Disaster Threatening Situation” In case of disaster threatening situation the Director General – in accordance with the approved emergency response plan which was approved by minister of the interior - acts immediately in order to protect the critical infrastructures. Emergency situation The emergency situation is a situation, which is defined in the 53. article of the Fundamental Law, and which could be occurred in the following cases: cd) Such an operational failures of a given critical infrastructures which cause problems in the basic supply of the population during several days or affected more counties.

22. CIP Events 2011 MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT • January 2011 – preparation of the EU reports • February 2011 –NCI sectorial criteria • March 2011 – CIP POC pre/meeting • April 2011 – KIIV IT meeting • May 2011 – EU EXTRAH Project • June 2011 – II. EU-USA CIP conference • July 2011 – ECI assessment • August 2011– Working out of the regulations • September 2011– CIP WG meeting • October 2011 – NATO CPG / NATO CMX11 • November 2011– Regional CIP • December 2011 –NATO CC11/cyber incidents

23. Tasks of CIP in 2012– Legislation MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT • 1st January, 2012. – 62/2011. Ordinance of the Minister of Interior • 4th January 2012. – CIP proposal (Minister of Interior) • 20thJanuary 2012 – Proposal (Government) • 25thJanuary 2012 – Order of Head of NDGDM • February-May – executive legislation, institutions, identification/designation processes, establishment for the horizontal impact assessment • 2012– Act on CIP • 2012– legislation of sectors • Government Decree on CIP

24. MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT International activity • 14-16. March 2012, Brussels, CIP POC Meeting (EPCIP review) • 24-26, April 2012, Ispra, EPCIP Workshop • 22-23. May 2012, Brussels, III. EU-USA-Canada CIP Expert Conference

25. Horizontal Criteria / Analytical methods • Loses, • Economical effect, • Social effect, • Political effect, • Environmental effect, • and Security.

26. CIP Sectors

27. CIP Identified elements by sector Total: 34459 elements ENERGY IT TRANSPORT WATER FOOD HELATH LOW AND GOVERNMENT

28. MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT Main element of the legislation • Explanatory Provisions • Designation of the national and European critical infrastructures • Common rules for the national and European critical infrastructures • Registration • Operational Security Plan, security officer • Controls • Special rules for the energy sector • Closing provisions, authorization

29. MINISTRY OF THE INTERIOR NATIONAL DIRECTORATE GENERAL FOR DISASTER MANAGEMENT MonitoringControlCoordinationRegistrationNetwork SafetyCIP CERT

30. Cooperative authorities and organizations - Constitution Protection Office • National Protective Service • National Security Authority • National Police Department • Police Department of Budapest • Counter Terrorism Centre • National Taxation Authority • National Media and Info Communications Authority - Hungarian Energy Office • Hungarian Atomic Energy Authority • National Emergency Service • National Transport Authority • Transportation Safety Bureau • Government Offices at Budapest and in the Regions • Based on the Ordinance of the Minister of Interior no • 62/2011. • The Police, the Hungarian Prison Service, the Constitution Protection Office, the National Security, the Counter Terrorism Centre are co-operating according to the coordination of NDGDM: • in the shaping of the horizontal criteria system, • in the process of identification, • giving data to the above mentioned.

31. Simpler legislation

32. Thank you very much for your kind attention! Tel: +36(1)469-4116 Fax: +36(1)469-4388 GSM: +36(20)251-1560 E-mail: balazs.bognar@katved.gov.hu