2019 MCMC Research Symposium Cyber Security vs. Cyber Resilience ~Knowing the difference and relevance in strengthening the Digital Ecosystem
21 November 2019
Digital Ecosystem 21 November 2019 The Global Trend The - - PowerPoint PPT Presentation
2019 MCMC Research Symposium Cyber Security vs. Cyber Resilience ~Knowing the difference and relevance in strengthening the Digital Ecosystem 21 November 2019 The Global Trend The Technologies Today The Emerging Technologies The Near
21 November 2019
The Technologies Today… The Near Future Technologies… The Emerging Technologies … Protecting the Cyber Environment is the key to the “TRUST”
Digital Economy National Security & Sovereignty
2
INTERNET OF THINGS (IOT) ARTIFICIAL INTELLIGENCE VIRTUAL REALITY (VR)/AUGMENTED REALITY (AR) SERVERLESS COMPUTING/CLOUD COMPUTING 5G MOBILE
3
4
Revenge Cyber Attack
Infrastructure Breached of Sensitive Information Cybercrime Technology Vulnerabilities (Dependencies) Hacktivism Harmful Internet Content Terrorist use
Power Supply Grid Internet Infrastructure Banking System Airlines Services Information Stolen- Unaware Information Stolen - Exposed Information Stolen – Criminal Activities Online Fraud Intrusion Phishing Too Dependent
and Companies – Unauthorized Access to Critical Information & System Socially or Politically Motivated Attention Pornography Online Gambling Child Abused Materials Cyber Bullying Influencing Ideology Recruiting Fund Raising
IMPACT
Operation Planning
Government to Function National Security Sovereignty Economy National Image Public Safety Privacy
5
6
RESOURCES
National lead agency for cyber security, with the objectives of securing and strengthening Malaysia's resilience in facing the threats of cyber attacks, by coordinating and consolidating the nation's best experts and resources in the field of cyber security. Protection of Critical National Information Infrastructure Coordination Strategy in Managing Cyber Crime Cyber Security Technology Capacity & Capability Building Education & Awareness
Policy/Strategy Formulation Monitor & Improve Coordination Officially established in February 2017
7
Malaysia started early in Cyber Security initiatives since 1997 to support the implementation of the Multimedia Super Corridor (MSC) in creating the best environment for Malaysia to harness the full potential of ICT and become the big user of ICT.
WHY DO WE NEED TO ESTABLISH NACSA
1992
International Internet Gateway
1997
Crimes Act 1997
Signature Act 1997 Under MIMOS
1998
Communications and Multimedia Act 1998
1999
Under MIMOS
2001
United Nations Group of Governmental Experts (UNGGE)
2004
Council created Cyber & Space Security Division
Security Policy (NCSP)
Cyber Drill
Implementation Cybersecurity Governance JPDP
2011 2010 2008 2007 2006
MKN’s Arahan 24 launched
2013 2016 2017
National Cyber Coordination and Command Centre (NC4) NACSA under MKN
8
Policy Governance Coordination Critical National Information Infrastructure Protection
Capacity Building Awareness & Education International Cooperation Cybercrime National Security & Sovereignty
NACSA, MKN SECTOR LEAD PDRM, ILKAP, INTAN, MDEC, MCMC, CSM, UNIVERSITIES & POLYTECHNICS KKMM, MCMC, MINDEF, KDN, KLN AGC, PDRM, MCMC, BNM, SC, KPDNHEP, MOH CSM MCMC, PDRM, BNM, SC, MOE,NGOs, Private Sectors, Industries CSM ATM, PDRM, RD
Legal, Technical & Economy Support Government Digital Initiatives Provide Engagement Platforms Information Sharing Public- Private Partnerships Resource Utilization Industry involvement Protection of SMEs and Businesses
9
S8 Enhance National Cyber Security Capacity and Capabilty Building S9 Enhance Cyber Security Awareness S10 Nourish Cyber Security Knowledge Through Education S1 Enhance National Cyber Security Governance and Ecosystem S2 Improve Organisation Management and Business Operation (Government, CNII and Business) S3 Strengthen Cyber Security Incident Management and Active Cyber Defense S11 Strengthening International Collaboration and Cooperation in Cyber Security Affairs S12 Demonstrating Malaysia's Commitment in Promoting Secure, Stable and Peaceful Cyberspace to Uphold International Security S4 Enhance Malaysia’s Cyber Laws to Address Current and Emerging Threats S5 Enhance the Capacity and Capability of Cyber Crime Enforcement S6 Spur National Cyber Security R&D Programme S7 Promote a Competitive Local Industry and Technology
The Five Strategic Pillars
Effective Governance and Management Strengthening Legislative Framework and Enforcement Developing Capacity & Capability Building, Awareness and Education Catalysing World Class Innovative, Technology, R&D and Industry Strengthening Global Collaboration
P2 P2 P1 P1 P3 P3 P4 P4 P5 P5
Clear role of Key Agencies Cyber Security in National Agenda 10
Effective Governance & Management
Infrastructure through Active Cyber Defence
Management
National Sectoral Organisation
Guideline, Compliance
Strengthening Legislative Framework & Enforcement Catalysing World Class Innovative, Technology, R&D and Industry Developing Capacity & Capability Building, Awareness and Education Strengthening Global Collaboration
Threat Visibility Prevent Predict Detect Respond Deter Early Warning Integrated SOC Operation
law
specific law
capability of Cybercrime Enforcement
Enforcement Plan
Coordination Centre
Challenge Repository
market new local Cyber security solutions
Body
CYBER WORKFORCE NATIONAL
Capacity & capability Building Plan
Awareness Master Plan
Knowledge through Education
as a priority in foreign policy
international cyber security efforts
contribute in key international fora and strategically collaborate with international partners