Strengthening Europes Cyber Resilience System & Fostering a - - PowerPoint PPT Presentation

Strengthening Europe’s Cyber Resilience System & Fostering a Competitive and Innovative Cybersecurity Industry – COM(2016) 410: Malta Perspective

MEUSAC Meeting, Valletta

• Dr. Keith Cilia-Debono

13th March, 2017

Cyberspace : Prelude

• Backbone of digital society and economic growth
• Related security incidents:

– Increasing at an alarming pace – Disrupt supply of essential services e.g. Telephony, energy, health – Undermine trust in digital services and products

• 22% of EU citizens have full trust in digital companies e.g social

networking sites, e-mail services

• 38% of EU citizens are confident about online cross-border (intra-

EU) purchasing

– Compromise of data which may be sensitive – Financial losses

• https://ec.europa.eu/digital-single-market/en/news/have-your-say-how-boost-europes-cybersecurity-industry
• Consumer Attitudes towards Cross-Border Trade and Consumer Protection – Summary Flash Eurobarometer 397

: Sept 2015

Cybersecurity Progress: Prelude

• Cyber Security Strategy of the EU (2013)
• Network & Information Security (NIS)

Directive

– Adopted 06 July 2016 “Comprehensive piece of cybersecurity legislation” ...“Fundamental building block for work in the Digital Single Market” Andrus Ansip EC for Digital Single Market

– Chapter 1 (General Provisions) Art. 1 –

stipulates need for National Cyber Security Strategy....

Malta Context: National Cyber Security Strategy (NCSS)

• Launched September 2016

http://ncss.gov.mt/en/Pages/Main.aspx

• In line with NIS Directive

Malta Context: NCSS Six Goals with measures

• 1. Establish Goverance Framework

– National CSIRT, Incident management, Risk Management, Public Sector information Security Framework, Data Classification,

• 2. Combat Cybercrime
• 3. Strengthen National Cyber Defence

– National security, Collective Sharing of information, legislation review,National Cyber Simulation Exercises

• 4. Secure Cyberspace

– Regulation and voluntary self commitment; interoperable & secure standards, online public services, support to private sector

• 5. Cybersecurity Awareness and Education

– Education and training (national and public sector), cyber centre

• f excellence, R&D, cyber hygiene, National Awareness
• 6. National and International Cooperation

Malta context: NCSS Implementation

• Governance (Strategic)

– Ministry for Competitiveness and Digital, Maritime and Service Economy (Chair) – Malta Information Technology Agency – Critical Infrastructure Protection Directorate – Malta Communications Authority – Ministry for Home Affairs and National Security

• Malta Police Force
• Armed Forces of Malta

– Cabinet Office

Malta Context: NCSS Implementation Approach

• Lead and Coordinator: Ministry for Competitiveness

and Digital, Maritime and Service Economy

• Executive role : MITA reporting to Steering Committee
• Lead Implementors: Ministries
• Instrument: Roadmap: Action item, Lead, Other

Actor(s), Timeframe, Budgets, Progress

Malta context: Other relevant activities

• NIS Directive transposition into local law by 2018

– Lead: Critical Infrastructure Protection Directorate (CIPD) – OPM

• Horizontal Working Party (HWP) – Cyber issues

– Chair as part of the Presidency of the Council of the EU role: (January-June 2017) – Lead: MITA

Proposed Measures in COM 410

• 1. Strengthen cooperation across Europe

– Better cross-border and cross-sector cooperation and faster information sharing

• Malta: NCSS
• 2. Support the single market for cybersecurity

products and services in the EU

– Consider certification scheme to boost trust and security – Access to finance for SMEs

• 3. Contractual Public-Private Partnership

– Mobilising public and private resources to boost the cybersecurity industry

COM 1 Strengthen Cooperation across Europe

a) Making the most of NIS cooperation mechanisms and moving towards ENISA 2.0 – EU level:

• Cooperation Group for strategic cooperation among MS
• Cooperation Blueprint to handle large-scale cyber incidents
• Information hub to support exchange of information between EU

bodies– faciliate knowledge and expertise – supported by ENISA, CERT-EU and Joint Research Centre

• High level advisory group (EU level)

– NCSS Goals on governance and on cooperation – HWP for Cyber Issues ensuring follow up of developments by EC as appropriate

COM 1 Strengthen Cooperation across Europe

b) Increased efforts in education, training & exercises

• EC aims to work in close cooperation with MS, ENISA ,

EEAS, Europol, and others to establish a cyber security platform

• Malta – NCSS proposed action items related to

education and awareness - Lead : MITA on Cyber Awareness not necessarily directly related) (next slide)

• Malta – HWP on Cyber issues – focus area on cyber

awareness to EU citizens and SMEs

• Malta – NCSS proposed action item on national cyber

simulation exercises.

Malta Context: National Cyber Awareness

• Launch of Two year Campaign:

– January 2017 – December 2018 – Lead: MITA – Two Phases:

– General (January 2017 / February 2017) – Focussed (March 2017 onwards)

www.cybersecurity.gov.mt CyberSecureMT

Malta Context: National Cyber Awareness

• General –

– Theme: What is Cyber Security? – Coverage: TV, Radio,Newspaper articles, Website and FB

• Focussed

– Target audiences :

• Students and Youths
• Children and parents/guardians
• Adults – including the Elderly
• SMEs

– Content and coverage specific to each audience; interactive sessions included

COM 1 Strengthen Cooperation across Europe

c) Addressing inter-sectoral dependencies and key public network infrastructure resilience

– Malta - NCSS Goal on establishing governance framework – establishing coordination structures , coordinate protection

• f national critical information infrastructure, national cyber

risk assessment. – Malta - NCSS calls for establishment of a collective approach for sharing cyber security knowledge and intelligence

COM 2 Support single market for cybersecurity products and services

Action items (aim to strengthen an EU cyber security industry, support

related vendor SMEs in investments & in international market development )

a) Certification and labelling b) Scaling up cybersecurity investment and supporting SMEs – Malta - NCSS calls for promoting robust levels of cyber security in online public services

• Security and privacy in design of ICT products and services for

Government

– Malta – HWP on Cyber issues ensuring follow up on roadmap on European ICT security certification framework proposal

COM 3 - Contractual Public Private Partnership

• Cybersecurity cPPP

– Supported by European Cyber Security Organisation ESCO – Launched in 2016; it is now operational – Aims to

• Mobilise resources under Horizon 2020- EU R&I Framework

programme

• Help turn EU cybersecurity research into products / services
• Build trust among users, businesses, public administrations
• Define minimum common digital security and privacy requirements

across different sectors

• EC to ensure its coordination with sectoral strategies, Horizon 2020

instruments, other PPPs

– Launch of Horizon 2020 calls for proposals related to Cybersecurity cPPP – early 2017

Thank You