Supporting IT Security Response Teams
|
|
|
- Justina Barrett
- 5 years ago
- Views:
Transcription
1 Supporting IT Security Response Teams 2nd ENISA Conference 24 September 2013, Athen, Greece Dr. Klaus-Peter Kossakowski
2 Agenda 1. Why was TI established? 2. What is TI? 3. Who is inside the TI community? 4. What kind of Infrastructure is offered?
3 Why does TI exist? 2nd ENISA Conference 24 September 2013, Athen, Greece Dr. Klaus-Peter Kossakowski
4 A Web of Trust takes Work! It started 25 years ago 1988 CERT/CC established due to crisis 1993 community established in Europe 1998 RFC 2350 published by IETF
5 A Web of Trust takes Work! It started 25 years ago 1988 CERT/CC established due to crisis 1993 community established in Europe 1998 RFC 2350 published by IETF In 2000 a more formal approach was needed Too many teams in Europe No scalable framework
6 What is TI actually doing? 2nd ENISA Conference 24 September 2013, Athen, Greece Dr. Klaus-Peter Kossakowski
7 TI Framework Maintain a community-driven approach for collecting information about response teams Act as introducer for response teams that want to become part of the community Provide infrastructure support for the community Workgroups for development / research Collaboration for day-to-day work
8 Different Levels of Inside LISTED or REGISTERED teams Anyone recognized as response team supported by the TI community ACCREDITED teams, must be REGISTERED Go through an initial accreditation process Have to adhere to fundamental principles CERTIFIED teams, must be ACCREDITED Go through workshop and assessment Have to proof maturity and ability
9 TI Principles Transparency Allow others to understand your team Setting realistic expectations Don't promise something you cannot do Respect the interests of other teams But explain your interests to others also Contribute to the community objectives Help responding to incidents
10 Who is inside TI? 2nd ENISA Conference 24 September 2013, Athen, Greece Dr. Klaus-Peter Kossakowski
11
12 Listed Teams Research & Education Commercial Government, National & Military
13 Recent Additions aecert (United Arab Emirates) CERT BWI (Germany) CERTGOVIL (Israel) DefCERT (The Netherlands) LTU MOD CIRT (Lithuania) Qatar CERT (Qatar)
14 Recent Additions (2) AAB GCIRT (The Netherlands) RH-ISIRT (United States) BASF gcert (Germany) Secunia Research (Denmark) e-lc CSIRT (Spain) Telefonica CSIRT (Spain) ISPIRIT (United Kingdom) TK-CERT (Germany) KPMG-CSIRT (United Kingdom) Vodafone-CERT (Germany) RABOBANK SOC (The Netherlands) XING (Germany)
15 Accredited Teams Research & Education Commercial Government, National & Military
16 Recent Accreditations Government and Military CERT-EU (Europe) COSDEF-CERT (Spain) Commercial Panasonic PSIRT (Worldwide) Malware.lu (Luxembourgh)
17 Certifications Maturity is the key Capability Maturity Model based on best practices Functional requirements easily incorporated Important for National CERTs (ENISA's baseline capabilities)
18 What can be utilized? 2nd ENISA Conference 24 September 2013, Athen, Greece Dr. Klaus-Peter Kossakowski
19 TI Database Accredited teams are required to update their entry at least every four (4) months Self service interface via the web Database Access via the web Downloads to import in your DB PGP keys Contact database IP addresses, network space, ASN
20
21 Communication Mechanisms Cryptographic Mailing Lists Protected by X.509 user certificates For the whole community For sub groups as defined by community Cryptographic IRC Server Protected by X.509 user certificates Downloads from HTTPS Server Protected by X.509 user certificates
22 Communication Mechanisms (2) Out-of-Band telephone / SMS alerts Protected by user / team credentials Users can leave a message SMS will alert other users or team roles System will call out to specified telephone numbers and mobile phones
23 Crisis Management?!? Ad hoc team will be set up by volunteers to Identify a coordinated approach Utilize TI functions and secretariat support We have the mandate to do good things! However no authority!
24 Wrap Up 2nd ENISA Conference 24 September 2013, Athen, Greece Dr. Klaus-Peter Kossakowski
25 Value Added for your Team If you are providing security response or are involved in security crisis management, join the community requires support by accredited teams If you want to prove your ability to follow best practices and be able to sustain your function, consider to become certified requires a long term commitment Make sure to liaison with accredited teams in your country regardless!
26 For Security Crisis Management TI offers technical, but critical infrastructure support functions Authenticated Encrypted Robust Out of Band TI maintains the underlying fabric for it Assessment of teams and maintenance Framework of accepted policies like TLP
27 Thank you very much for your kind Attention! PRESECURE Consulting GmbH Dr. Klaus-Peter Kossakowski
Statistics Clearinghouse function Infrastructure Alert function
ecsirt.net The European CSIRT Network Status Update TF-CSIRT, September 2003 Amsterdam, NL Review of the current results Statistics Clearinghouse function Infrastructure Alert function Slide 2 Participation
TI nine months old. Trusted Introducer Status report 1 June TI nine months old Slide 1
TI nine months old Trusted Introducer Status report 1 June 2001 01 06 2001 TI nine months old Slide 1 Let s assume we all know that... (i) Security is a problem on the Internet There s lots of security
The latest version of this profile can be found on the location specified in 1.3
FORTHcert Profile according to RFC 2350 1. About this document 1.1 Date of Last Update This is version 1, published 2012/02/1. 1.2 Distribution List for Notifications The latest version of this profile
The WINS Academy Security Certification Programme: The Route to Demonstrable Competence. Dr Roger Howsley, Executive Director
The WINS Academy Security Certification Programme: The Route to Demonstrable Competence. Dr Roger Howsley, Executive Director IAEA, 14 th May 2014 Key Messages The Nuclear Sector is a long way behind other
Regional Workshop on Frameworks for Cybersecurity and CIIP Feb 2008 Doha, Qatar
Regional Workshop on Frameworks for Cybersecurity and CIIP 18 21 Feb 2008 Doha, Qatar A National Cybersecurity Strategy aecert Roadmap Eng. Fatma Bazargan aecert Project Manager Technical Affairs Department
Network and Information Security Directive
Network and Information Security Directive Provisions + ENISA s activities Dr Evangelos Ouzounis Head of Secure Infrastructure and Services Unit, ENISA European Union Agency for Network and Information
The Case for National CSIRTs
The Case for National CSIRTs ENOG 12 Yerevan 3-4 Oct 2016 What is a CERT (CSIRT)? A Computer Security Incident Response Team (CSIRT) is a service organization that is responsible for receiving, reviewing,
CSIRT capacity building Andrea Dufkova CSIRT-relations, COD1 NLO meeting Athens June 8. European Union Agency for Network and Information Security
CSIRT capacity building Andrea Dufkova CSIRT-relations, COD1 NLO meeting Athens June 8 European Union Agency for Network and Information Security Capacity and community building for CSIRTs 2005 Start up
Defining Computer Security Incident Response Teams
Defining Computer Security Incident Response Teams Robin Ruefle January 2007 ABSTRACT: A computer security incident response team (CSIRT) is a concrete organizational entity (i.e., one or more staff) that
Building an Assurance Foundation for 21 st Century Information Systems and Networks
Building an Assurance Foundation for 21 st Century Information Systems and Networks The Role of IT Security Standards, Metrics, and Assessment Programs Dr. Ron Ross National Information Assurance Partnership
Security frameworks for Gov Clouds: A Technical Analysis
Security frameworks for Gov Clouds: A Technical Analysis Dimitra Liveri EU Network and Information Security Agency (ENISA) Dr. Jesus Luna CSA EMEA Technical University of Darmstadt TUDA www.enisa.europa.eu
CERT community. Recognition mechanisms and schemes. November European Union Agency for Network and Information Security.
CERT community Recognition mechanisms and schemes November 2013 European Union Agency for Network and Information Security www.enisa.europa.eu CERT community Recognition mechanisms and schemes November
ITU. The New Global Challenges in Cybersecurity 30 October 2017 Bucharest, Romania
Cybersecurity @ ITU The New Global Challenges in Cybersecurity 30 October 2017 Bucharest, Romania Rosheen Awotar-Mauree Programme Officer, ITU Office for Europe 2 International Telecommunication Union
2017 PORT SECURITY SEMINAR & EXPO. ISACA/CISM Information Security Management Training for Security Directors/Managers
2017 PORT SECURITY SEMINAR & EXPO ISACA/CISM Information Security Management Training for Security Directors/Managers Agenda Introduction ISACA Information security vs. cybersecurity CISM certification
Directive on security of network and information systems (NIS): State of Play
Directive on security of network and information systems (NIS): State of Play Svetlana Schuster Unit H1 Cybersecurity and Digital Privacy DG Communications Networks, Content and Technology, European Commission
CERT.LV activities, role in Latvia and globally. Baiba Kaskina, CERT.LV , Sofia, Bulgaria
CERT.LV activities, role in Latvia and globally Baiba Kaskina, CERT.LV 30.11.2016., Sofia, Bulgaria CERT.LV Overview CERT.LV Information Technology Security Incident Response Institution of the Republic
ENISA & Cybersecurity. Steve Purser Head of Technical Competence Department December 2012
ENISA & Cybersecurity Steve Purser Head of Technical Competence Department December 2012 Agenda Protecting Critical Information Infrastructure Input to EU & MS Cyber Security Strategies Assisting Operational
EU General Data Protection Regulation (GDPR) Achieving compliance
EU General Data Protection Regulation (GDPR) Achieving compliance GDPR enhancing data protection and privacy The new EU General Data Protection Regulation (GDPR) will apply across all EU member states,
2nd ENISA Workshop German CERT-Activities. 5 th October, 2006 Brussels
2nd ENISA Workshop German CERT-Activities 5 th October, 2006 Brussels Overview Hosting Organisation CERT-Bund Background Projects CERT Services German CERT Activities International Cooperation Lessons
Cybersecurity governance in Europe. Sokratis K. Katsikas Systems Security Laboratory Dept. of Digital Systems University of Piraeus
Cybersecurity governance in Europe Sokratis K. Katsikas Systems Security Laboratory Dept. of Digital Systems University of Piraeus ska@unipi.gr Elements of a national cybersecurity strategy Set the vision,
Cybersecurity in the EU Steve Purser Head of Operational Departments, ENISA Regional Cybersecurity Forum Sofia, Bulgaria 29 th November 2016 European
Cybersecurity in the EU Steve Purser Head of Operational Departments, ENISA Regional Cybersecurity Forum Sofia, Bulgaria 29 th November 2016 European Union Agency for Network and Information Security Positioning
Where is the EU in cloud security certification?: Main findings
WE CAN DO SO MUCH TOGETHER Where is the EU in cloud security certification?: Main findings Certification schemes for cloud computing SMART 2016 / 0029 Leire Orue-Echevarria TECNALIA December 11 th, 2017
Building Global CSIRT Capabilities
Building Global CSIRT Capabilities Barbara Laswell, Ph.D. September 2003 CERT Centers Software Engineering Institute Carnegie Mellon Pittsburgh, PA 15213 Sponsored by the U.S. Department of Defense 1 2003
esignature Infrastructure Marketing Model
www.peppol.eu esignature Infrastructure Marketing Model esignature Long Demo Objectives of PEPPOL esignature The overall objective of PEPPOL esignature is to provide cross European interoperability of
METHODOLOGY AND CRITERIA FOR THE CYBERSECURITY REPORTS
METHODOLOGY AND CRITERIA FOR THE CYBERSECURITY REPORTS The cybersecurity maturity has been assessed against 25 criteria across five themes. Each of the criteria are given a Yes, No, Partial, or Not Applicable
National Cyber Security Strategy - Qatar. Michael Lewis, Deputy Director
National Cyber Security Strategy - Qatar Michael Lewis, Deputy Director 2 Coordinating a National Approach to Cybersecurity ITU Pillars of Cybersecurity as a Reference Point providing the collected best
Be Secure! Computer Security Incident Response Team (CSIRT) Guide. Plan Establish Connect. Maliha Alam Mehreen Shahid
Computer Security Incident Response Team (CSIRT) Guide Maliha Alam Mehreen Shahid Plan Establish Connect Be Secure! CSIRT Coordination Center Pakistan 2014 i Contents 1. What is CSIRT?... 1 2. Policy,
Security Aspects of Trust Services Providers
Security Aspects of Trust Services Providers Please replace background with image European Union Agency for Network and Information Security 24 th September 2013 www.enisa.europa.eu Today s agenda 09:30-10:00
NIS Standardisation ENISA view
NIS Standardisation ENISA view Dr. Steve Purser Brussels, 19 th September 2017 European Union Agency for Network and Information Security Instruments For Improving Cybersecurity Policy makers have a number
An overview of the CERT/CC and CSIRT Community
An overview of the CERT/CC and CSIRT Community Jason A. Rafail October 2007 2007 Carnegie Mellon University Overview CERT/CC CSIRTs with National Responsibility Partnerships and Trust Training Conclusion
CSIRT in general CSIRT Service Categories Reactive Services Proactive services Security Quality Management Services CSIRT. Brmlab, hackerspace Prague
Brmlab, hackerspace Prague Lightning talks, November 2016 in general in general WTF is an? in general WTF is an? Computer Security in general WTF is an? Computer Security Incident Response in general WTF
Smart Software Licensing tools and Smart Account Management Privacy DataSheet
Smart Software Licensing tools and Smart Account Management Privacy DataSheet This Privacy DataSheet describes the processing of personal data (or personal identifiable information) by Smart Software Licensing
ENISA s Position on the NIS Directive
ENISA s Position on the NIS Directive 1 Introduction This note briefly summarises ENISA s position on the NIS Directive. It provides the background to the Directive, explains its significance, provides
THE ENERGY MANAGEMENT WORKING GROUP
THE ENERGY MANAGEMENT WORKING GROUP Meeting Climate Goals through Energy Management Policies and Standards 5000&1 SEAPs 4 th Webinar February 23, 2017 Ms. Pamela de los Reyes Energetics Incorporated EMWG
TechSec WG: Related activities overview Information and discussion TechSec WG, RIPE-45 May 14, 2003
TechSec WG: Related activities overview Information and discussion TechSec WG, RIPE-45 May 14, 2003 Yuri Demchenko Outline TechSec WG liaison with CSIRT community! Results and developments
EU Cloud Computing Policy. Luis C. Busquets Pérez 26 September 2017
EU Cloud Computing Policy Luis C. Busquets Pérez 26 September 2017 The digital revolution is built on data Most economic activity will depend on data within a decade Potential of the data-driven economy
Presentation to the ITU on the Q-CERT Incident Management Team. Ian M Dowdeswell Incident Manager, Q-CERT
Presentation to the ITU on the Q-CERT Incident Management Team Ian M Dowdeswell Incident Manager, Q-CERT 2 Q-CERT Mission The Mission of Q-CERT is to be a world-class center of excellence providing expert
Grid-CERT Services. Modification of traditional and additional new CERT Services for Grids
Grid-CERT Services Modification of traditional and additional new CERT Services for Grids Presentation at the Annual FIRST Conference Vancouver, Canada June 26, 2008 Antonio Liu 2000-2008 by PRESECURE
Security Standardization
ISO-ITU ITU Cooperation on Security Standardization Dr. Walter Fumy Chairman ISO/IEC JTC 1/SC 27 Chief Scientist, Bundesdruckerei GmbH, Germany 7th ETSI Security Workshop - Sophia Antipolis, January 2012
EXCiPACT: taking an idea to global reality
EXCiPACT: taking an idea to global reality Kevin McGlue President, EXCiPACT asbl EXCiPACT Certification Workshop Mumbai 29 th November, 2018 EXCiPACT What is it? EXCiPACT is a credible, independent, voluntary,
EUMETSAT EXPERIENCE WITH MULTICAST ACROSS GÉANT
1 EUMETSAT EXPERIENCE WITH MULTICAST ACROSS GÉANT Lothar.Wolf@eumetsat.int Competence Area Manager for Data Services OVERVIEW EUMETSAT Background WAN links Multicast accross GÉANT infrastructure Summary
Policy Category: CPD Policy. Policy Name: CPD Cycle Policy. Policy Code: MOPH/QCHP/AD/CPD/002. Version Number: 4.3. Developed by: QCHP-AD
Policy Category: CPD Policy Policy Name: CPD Cycle Policy Version Number: 4.3 Developed by: QCHP-AD Co-Consultants: Royal College Reviewed by/date: QCHP-AD Team / February 1, 2016 Approved by/ Date: Dr.
Grid Security Incident Handling and Response Guide
Open Science Grid Open Science Grid Grid Security Incident Handling and Response Guide 20 Nov 2004-1- Version 1.0 Issue Date Comment 0.1 30 Aug 2004 Draft release to the Activity Group 0.2 7 Sept 2004
New cybersecurity landscape in the EU Sławek Górniak 9. CA-Day, Berlin, 28th November 2017
in the EU Sławek Górniak 9. CA-Day, Berlin, 28th November 2017 European Union Agency for Network and Information Security Positioning ENISA activities CAPACITY Hands on activities POLICY Support MS & COM
Third public workshop of the Amsterdam Group and CODECS C-ITS Deployment in Europe: Common Security and Certificate Policy
Third public workshop of the Amsterdam Group and CODECS C-ITS Deployment in Europe: Common Security and Certificate Policy 14 February 2017 Amsterdam Gerhard Menzel European Commission - DG MOVE Scope:
UAE and the NRI A brief introduction. December 2016
UAE and the NRI A brief introduction December 2016 UAE Vision 2021 We aim to make the UAE among the best countries in the world by the Golden Jubilee of the Union. 1 UAE Vision 2021 Gov entities working
Cyber Security Beyond 2020
Paulo Empadinhas Steve Purser NLO meeting ENISA Athens 26/04/2017 European Union Agency for Network and Information Security Main findings ENISA s current tasks and product portfolio shall be retained.
Google Cloud & the General Data Protection Regulation (GDPR)
Google Cloud & the General Data Protection Regulation (GDPR) INTRODUCTION General Data Protection Regulation (GDPR) On 25 May 2018, the most significant piece of European data protection legislation to
Layer Security White Paper
Layer Security White Paper Content PEOPLE SECURITY PRODUCT SECURITY CLOUD & NETWORK INFRASTRUCTURE SECURITY RISK MANAGEMENT PHYSICAL SECURITY BUSINESS CONTINUITY & DISASTER RECOVERY VENDOR SECURITY SECURITY
Achieving Global Cyber Security Through Collaboration
Achieving Global Cyber Security Through Collaboration Steve Purser Head of Core Operations Department December 2013 European Union Agency for Network and Information Security www.enisa.europa.eu Agenda
Third public workshop of the Amsterdam Group and CODECS European Framework for C-ITS Deployment
Third public workshop of the Amsterdam Group and CODECS European Framework for C-ITS Deployment 14 February 2017 Amsterdam Gerhard Menzel European Commission - DG MOVE EU Policy Tools Large-scale deployment
Stakeholders Analysis
Stakeholders Analysis Introduction National Stakeholders ISP citizens CNIIP Media National CIRT Academia ONG, Public And Private Institutions sectoral CSIRTs Law enforcement 2 2 CIRT ISP A specialized
Compliance and Security in a Cloud-First Era
Compliance and Security in a Cloud-First Era Regions: Dublin (EU-West) 3 x Availability Zones Launched in 2007 Frankfurt (EU-Central) 2 x Availability Zones Launched 2014 Edge Locations: Amsterdam,
ISO Professional Services Guide to Implementation and Certification AND
ISO 27001 Professional Services Guide to Implementation and Certification AND 1 DEKRA Company Overview Founded in Stuttgart, Germany in 1925 In more than 50 countries around the world GLOBAL PARTNER FOR
RFC2350 TLP1: WHITE. Έκδοση National CSIRT-CY RFC2350
Έκδοση 1.2-2018.02.14 TLP1: WHITE 1 TLP Sources may use TLP: WHITE when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release.
Thanks for using Dropbox! Here we describe how we collect, use and handle your information when
Dropbox Privacy Policy Posted: October 3December 8, 2016 Effective: February 10, 2017 Thanks for using Dropbox! Here we describe how we collect, use and handle your information when you use our websites,
IRT-Object in the RIPE Database, "interim" meeting
IRT-Object in the RIPE Database, "interim" meeting Overview Ulrich Kiermayr, Wilfried Wöber: ACOnet-CERT TF-CSIRT, 10th meeting Amsterdam, NL September 26, 2003 1 What does the IRT-Object do?? documents
Data Protection and GDPR
Data Protection and GDPR At DPDgroup UK Ltd (DPD & DPD Local) we take data protection seriously and have updated all our relevant policies and documents to ensure we meet the requirements of GDPR. We have
Discussion on MS contribution to the WP2018
Discussion on MS contribution to the WP2018, 30 January 2018 European Union Agency for Network and Information Security Possibilities for MS contribution to the WP2018 Expert Groups ENISA coordinates several
icims Browser & Version Support Policy
icims Browser & Version Support Policy Last Updated Date: Page 1 Proprietary. Copyright 2018 icims, Inc. All rights reserved. Table of Contents Table of Contents... 2 Browser Support Policy for the icims
Workshop on Addressing the Barriers to IPv6 Deployment Spanish use case
Workshop on Addressing the Barriers to IPv6 Deployment Spanish use case Cristina Ramos cristinapilar.ramos@correo.gob.es Agenda Agenda IPv6 addressing plan Barriers Conclusions 1 Background Digital Agenda
CONCURRENT SESSIONS Wednesday 8:30 10:30 KEMPINSKI HOTEL CORVINUS Erzsébet tér 7-8, Budapest V.
June 22, 2011 (Wednesday) 55th EOQ Congress CONCURRENT SESSIONS Wednesday 8:30 10:30 KEMPINSKI HOTEL CORVINUS Erzsébet tér 7-8, Budapest V. SALON BANDINI/MARZINO Wednesday 11:00 12.30 16.1. ACCREDITATION
Introduction to AWS GoldBase
Introduction to AWS GoldBase A Solution to Automate Security, Compliance, and Governance in AWS October 2015 2015, Amazon Web Services, Inc. or its affiliates. All rights reserved. Notices This document
INTERNATIONAL STANDARD
INTERNATIONAL STANDARD This is a preview - click here to buy the full publication ISO/IEC 9594-8 Eighth edition 2017-05 Information technology Open Systems Interconnection The Directory Part 8: frameworks
22nd TF-CSIRT Meeting, Porto
22 nd TF-CSIRT Meeting Building National CERT of the Czech Republic 20-21 September 2007 Porto Introduction Participants Andrea Kropáčová (CESNET-CERTS), know-how Robert Malý (NESS), start up, professional
By 2020, a corporate no-cloud policy will be as rare as a no-internet policy is today. 1
By 2020, a corporate no-cloud policy will be as rare as a no-internet policy is today. 1 The question is no longer: How do I move to the cloud? Instead, it s Now that I m in the cloud, how do I make sure
INTERNATIONAL STANDARD
INTERNATIONAL STANDARD ISO/IEC 27039 First edition 2015-02-15 Corrected version 2016-05-01 Information technology Security techniques Selection, deployment and operations of intrusion detection and prevention
Cloud is the 'Only' Way Forward in Information Security. Leveraging Scale to Make the Unknown Known, in Dev, Sec & Ops.
George Gerchow, Sumo Logic Chief Information Security Officer Cloud is the 'Only' Way Forward in Information Security. Leveraging Scale to Make the Unknown Known, in Dev, Sec & Ops. Agenda Sumo Security
Siemens view and approach on critical infrastructure resilience against cyberthreats Joint OECD-JRC Workshop, Paris September 2018
Siemens view and approach on critical infrastructure resilience against cyberthreats Joint OECD-JRC Workshop, Paris 24-25 September 2018 Unrestricted https://www.siemens.com/press/charter-of-trust Cybersecurity
BSI C5 Status Quo. Dr. Clemens Doubrava, BSI,
BSI C5 Status Quo Dr. Clemens Doubrava, BSI, 11.12.2017 Expectations Cloud Service Provider Customers, more customers, An Everything-is-secure -Certification Preferably including data protection (GDPR)
How do you decide what s best for you?
How do you decide what s best for you? Experience Transparency Leadership Commitment Cost reduction Security Trustworthiness Credibility Confidence Reliability Compliance Privacy Expertise Flexibility
The emerging EU certification framework: A role for ENISA Dr. Andreas Mitrakas Head of Unit EU Certification Framework Conference Brussels 01/03/18
The emerging EU certification framework: A role for ENISA Dr. Andreas Mitrakas Head of Unit EU Certification Framework Conference Brussels 01/03/18 European Union Agency for Network and Information Security
The EU Cybersecurity Package: Implications for ENISA Dr. Steve Purser Head of ENISA Core Operations Athens, 30 th January 2018
The EU Cybersecurity Package: Implications for ENISA Dr. Steve Purser Head of ENISA Core Operations Athens, 30 th January 2018 European Union Agency for Network and Information Security Outline 1. Cybersecurity
DESCRIBING, DEVELOPING & CERTIFYING DIGITAL COMPETENCE
ECDL AND DIGCOMP DESCRIBING, DEVELOPING & CERTIFYING DIGITAL COMPETENCE 02 We live in an increasingly digital world where people work, socialise, and receive public and private services online. According
falanx Cyber ISO 27001: How and why your organisation should get certified
falanx Cyber ISO 27001: How and why your organisation should get certified Contents What is ISO 27001? 3 What does it cover? 3 Why should your organisation get certified? 4 Cost-effective security management
ITU Global Cybersecurity Index
ITU Global Cybersecurity Index Joint ALERT Cyberdrill for Europe & CIS regions,chisinau 2017 Rosheen Awotar-Mauree Programme Officer ITU Office for Europe 2 ITU Overview 3 Services in Cybersecurity ITU
BQC Certification Body Corporate Presentation. Athens, 2018
BQC Certification Body BQC Certification Body 96, D. Gounari str & Kifissias Av., GR15125 Maroussi, Athens, Τ. +30 2112213726 info@bqc.gr www.bqc.gr Contents About us Our results Our moto Our services
Once-Only Principle Reducing Administrative Burden for Citizens and Businesses
Funded by the European Union Once-Only Principle Reducing Administrative Burden for Citizens and Businesses www.scoop4c.eu Tallinn e-governance Conference 2017 and SCOOP4C stakeholder workshop Tallinn,
EU Cybersecurity Certification Framework
EU Cybersecurity Certification Framework Conference: Towards an EU Cybersecurity Certification Framework for Products and Services 01 March 2018 Dr. Andreas Steinhorst www.european-accreditation.org ABOUT
Protecting your data. EY s approach to data privacy and information security
Protecting your data EY s approach to data privacy and information security Digital networks are a key enabler in the globalization of business. They dramatically enhance our ability to communicate, share
Quick Start Guide. Professionals. for. 1 - Set Up Your LibreView Account page 2 Sign up for an account Set up your practice Download device drivers
Quick Start Guide for Professionals Welcome to LibreView - the all-in-one, web-based data management platform for FreeStyle Libre Pro*, FreeStyle Libre, and most major blood glucose meters. Connect your
Friedrich Smaxwil CEN President. CEN European Committee for Standardization
Friedrich Smaxwil CEN President CEN European Committee for Standardization www.cen.eu www.cencenelec.eu Friedrich Smaxwil, CEN President 1. Standards & standardization 2. CEN s role in European Standardization
Federated Access. Identity & Privacy Protection
Federated Access Identity & Privacy Protection Presented at: Information Systems Security Association-Northern Virginia (ISSA-NOVA) Chapter Meeting Presented by: Daniel E. Turissini Board Member, Federation
RFC 2350 YOROI-CSDC. Expectations for Computer Security Incident Response. Date 2018/03/26. Version 1.0
RFC 2350 YOROI-CSDC Expectations for Computer Security Incident Response Title RFC 2350 YOROI-CSDC Document Type Specification Date 2018/03/26 Version 1.0 Yoroi S.r.l. Parte del gruppo MAM www.yoroi.company
NIS-Directive and Smart Grids
NIS-Directive and Smart Grids Workshop on European Smart Grid Cybersecurity: Emerging Threats and Countermeasures Marie Holzleitner Table of Content Aims & Objectives Affected Parties Selected Requirements
The Role of ENISA in the Implementation of the NIS Directive Anna Sarri Officer in NIS CIP Workshop Vienna 19 th September 2017
The Role of ENISA in the Implementation of the NIS Directive Anna Sarri Officer in NIS CIP Workshop Vienna 19 th September 2017 European Union Agency for Network and Information Security Positioning ENISA
THE NATIONAL CME/CPD FRAMEWORK FOR HEALTHCARE PRACTITIONERS
THE NATIONAL CME/CPD FRAMEWORK FOR HEALTHCARE PRACTITIONERS Accreditation and Health Profession Education Department Qatar Council for Healthcare Practitioners (QCHP) DISCLOSURE The presenters have no
Cisco Webex Messenger
Cisco Webex Messenger This describes the processing of personal data (or personal identifiable information) by Cisco Webex Messenger. 1. Overview of Cisco Webex Messenger Capabilities Cisco Webex Messenger
CONCLUSIONS OF THE WESTERN BALKANS DIGITAL SUMMIT APRIL, SKOPJE
CONCLUSIONS OF THE WESTERN BALKANS DIGITAL SUMMIT 2018 18-19 APRIL, SKOPJE CONCLUSIONS OF THE WESTERN BALKANS DIGITAL SUMMIT 2018 At the Trieste Western Balkans Summit, we stressed the importance of the
Securing Your Digital Transformation
Securing Your Digital Transformation Security Consulting Managed Security Leveraging experienced, senior experts to help define and communicate risk and security program strategy using real-world data,
The Critical Importance of CIIP to Cybersecurity
The Critical Importance of CIIP to Cybersecurity Without CIIP there is no Cybersecurity Peter Burnett GFCE-Meridian Coordinator The Global Forum on Cyber Expertise Focus: cyber capacity building (awareness
Your Data and Artificial Intelligence: Wise Athena Security, Privacy and Trust. Wise Athena Security Team
Your Data and Artificial Intelligence: Wise Athena Security, Privacy and Trust Wise Athena Security Team Contents Abstract... 3 Security, privacy and trust... 3 Artificial Intelligence in the cloud and
Countdown to GDPR. Impact on the Security Ecosystem and How to Prepare
Countdown to GDPR Impact on the Security Ecosystem and How to Prepare Susan Kohn Ross, Esq. Mitchell Silberberg & Knupp LLP Jasvir Gill Alert Enterprise Lora Wilson Axis Communications Affected Countries
The Arab ICT Organization
The Arab ICT Organization UNCITRAL, 21-22 April, 2016 The Arab ICT Organization SUMMARY I. About AICTO : creation, organs, membership II. objectives III. Action Plan IV. Working groups V. Projects : the
Automate sharing. Empower users. Retain control. Utilizes our purposebuilt cloud, not public shared clouds
EXECUTIVE BRIEF SHAREBASE BY HYLAND Automate sharing. Empower users. Retain control. With ShareBase by Hyland, empower users with enterprise file sync and share (EFSS) technology and retain control over
Certified Associate in Project Management (CAPM) Exam Prep Boot Camp - Brochure
Certified Associate in Project Management (CAPM) Exam Prep Boot Camp - Brochure Your first step to a Rewarding Career in Project Management Course Name : CAPM Version : IINVL_CAPM_BR_02_061_1.2 Course
Netherlands Cyber Security Strategy. Michel van Leeuwen Head of Cyber Security Policy Ministry of Security and Justice
Netherlands Cyber Security Strategy Michel van Leeuwen Head of Cyber Security Policy Ministry of Security and Justice 1 Netherlands: small country, big time vulnerable #1 80% online banking 95% youth uses
HVAC & REFRIGERATION.
HVAC & REFRIGERATION www.lennoxemea.com Who we are... LENNOX EMEA, part of Lennox International Incorporated, is the result of the recent merger (October 2012) in between Lennox EMEIA (HVAC) and Heatcraft
The NIS Directive and Cybersecurity in
The NIS Directive and Cybersecurity in ehealth Dr. Athanasios Drougkas Officer in NIS Belgian Hospitals Meeting on Security Brussels 13 th October European Union Agency For Network And Information Security
E-CoAT. European Cooperation of Abuse fighting Teams. Lessons learnt and a pragmatic way forward. ENISA Gathering in Brussels, December 2005
European Cooperation of Abuse fighting Teams Lessons learnt and a pragmatic way forward ENISA Gathering in Brussels, December 2005 Don Stikvoort (e-coat workshop chair) Abuse a massive problem (i) Computer/network