Overview. Objectives. Components. Information and Communication Technologies Sector Development Project. Project

Similar documents
Implementing a National Strategy : the case of the Tunisian CERT

About Issues in Building the National Strategy for Cybersecurity in Vietnam

National Open Source Strategy

Security and resilience in Information Society: the European approach

CCISO Blueprint v1. EC-Council

Security and resilience in the Information Society: the role of CERTs/CSIRTs in the context of the EU CIIP policy

Fundamentals of Cybersecurity/CIIP. Building Capacity: Using a National Strategy & Self-Assessment

Bradford J. Willke. 19 September 2007

Global cybersecurity and international standards

UNCLASSIFIED. National and Cyber Security Branch. Presentation for Gridseccon. Quebec City, October 18-21

Cybersecurity for ALL

Global Response Centre (GRC) & CIRT Lite. Regional Cyber security Forum 2009, Hyderabad, India 23 rd to 25 th September 2009

NATIONAL CYBER SECURITY STRATEGY. - Version 2.0 -

National Policy and Guiding Principles

NATIONAL STRATEGY:- MALAYSIAN EXPERIENCE

Valérie Andrianavaly European Commission DG INFSO-A3

Information sharing in the EU policy on NIS & CIIP. Andrea Servida European Commission DG INFSO-A3

OAS Cybersecurity Capacity Building Efforts

Romania - Cyber Security Strategy. 6th IT STAR Workshop on Digital Security

State Planning Organization Information Society Department

Itu regional workshop

Welcome to the CyberSecure My Business Webinar Series We will begin promptly at 2pm EDT All speakers will be muted until that time

Forum. Ningbo, China 25 February

Concept Note: GIDC. Feasibility Study(F/S) on Government Integrated Data Center (GIDC) for the Republic of Nicaragua

Government Resolution No of February 15, Resolution: Advancing National Regulation and Governmental Leadership in Cyber Security

National Cyber Security Strategy - Qatar. Michael Lewis, Deputy Director

Global Alliance Against Child Sexual Abuse Online 2014 Reporting Form

Cybersecurity in Asia-Pacific State of play, key issues for trade and e-commerce

The challenges of the NIS directive from the viewpoint of the Vienna Hospital Association

National CIRT - Montenegro. Ministry for Information Society and Telecommunications

"Charting the Course... Certified Information Systems Auditor (CISA) Course Summary

National Coordinator - DRR & Disaster Management

Provisional Translation

Executive Summary CYBER SECURITY COMPETITION SECONDARY SCHOOLS CZECH REPUBLIC The school year 2016 / 2017

Committed to connecting the world

Operations & Technology Seminar. Tuesday, November 8, 2016 Crowne Plaza Monroe, Monroe Township, NJ

Call for Expressions of Interest

CONNECT ARAB STATES SUMMIT

ENISA EU Threat Landscape

INDEPENDENT COMMUNICATIONS AUTHORITY OF SOUTH AFRICA(ICASA) CYBERSECURITY PRESENTATION AT SAIGF. 28 th November 2018

CIRT: Requirements and implementation

Certified Information Security Manager (CISM) Course Overview

Donor Countries Security. Date

Regional Workshop on Frameworks for Cybersecurity and CIIP Feb 2008 Doha, Qatar

Digital government toolkit

The World Conference on Disaster Reduction: Serious commitments and clearer priorities for the next decade

COMESA CYBER SECURITY PROGRAM KHARTOUM, SUDAN

Experience of the Tunisian Participation to the EU s Horizon 2020 Framework Programme as an Associated Country

Developing a National Emergency Telecommunications Plan. The Samoan Experience November 2012

Successful Stories Commitment & Dedication. WSIS 2012 Strategic Partner

The role of COP/ITU on international level. Dr Ibrahim Al dabal chair of child on line council working group

22nd TF-CSIRT Meeting, Porto

Secure Societies Work Programme Call

John Snare Chair Standards Australia Committee IT/12/4

Cybersecurity and Vulnerability Assessment

Emergency Management Response and Recovery. Mark Merritt, President September 2011

The Republic of Korea. economic and social benefits. However, on account of its open, anonymous and borderless

Transformation Initiatives: Status Update

State Governments at Risk: State CIOs and Cybersecurity. CSG Cybersecurity and Privacy Policy Academy November 2, 2017

Directive on security of network and information systems (NIS): State of Play

Brussels, 19 May 2011 COUNCIL THE EUROPEAN UNION 10299/11 TELECOM 71 DATAPROTECT 55 JAI 332 PROCIV 66. NOTE From : COREPER

Defining Computer Security Incident Response Teams

Emergency Operations Center Management Exercise Evaluation Guide

The NIS Directive and Cybersecurity in

2014 ITU Plenipotentiary Conference PP-14 SNAPSHOT OF SOME OF THE KEY ISSUES

2nd ENISA Workshop German CERT-Activities. 5 th October, 2006 Brussels

Commonwealth Cyber Declaration

Cyber Security Strategic Level Landscape in Poland. Krzysztof Silicki NASK Institute, Poland ENISA MB, EB

The GenCyber Program. By Chris Ralph

European Union Agency for Network and Information Security

Cybersecurity Strategy of the Republic of Cyprus

13967/16 MK/mj 1 DG D 2B

Network and Information Security Directive

Status of E Government in Tonga. Presented by: Ms. Siasini Petelo Ministry of Communications TONGA

Information Technology Information Sharing and Analysis Center. First Symposium Barcelona, Spain Feb. 2, 2011

ASEAN REGIONAL COOPERATION ON DISASTER MANAGEMENT

CSIRT in general CSIRT Service Categories Reactive Services Proactive services Security Quality Management Services CSIRT. Brmlab, hackerspace Prague

National Disaster Risk Management Plan Disaster Management Centre Ministry of Disaster Management

RESOLUTION 130 (REV. BUSAN, 2014)

GLobal Action on CYbercrime (GLACY) Assessing the Threat of Cybercrime in Mauritius

Best Practices in Public Information Management in Sri Lanka. Presented by Nimal Athukorala D.C. Dissanayake

Netherlands Cyber Security Strategy. Michel van Leeuwen Head of Cyber Security Policy Ministry of Security and Justice

THE CONNECTING EUROPE FACILITY

Cyber Security in Europe

The UNISDR Private Sector Alliance for Disaster Resilient Societies

The Office of Infrastructure Protection

E-guide Getting your CISSP Certification

Resolution adopted by the General Assembly. [without reference to a Main Committee (A/62/L.30 and Add.1)]

Incident Response. Is Your CSIRT Program Ready for the 21 st Century?

Resolution: Advancing the National Preparedness for Cyber Security

UN General Assembly Resolution 68/243 GEORGIA. General appreciation of the issues of information security

NEW INNOVATIONS NEED FOR NEW LAW ENFORCEMENT CAPABILITIES

FIRE REDUCTION STRATEGY. Fire & Emergency Services Authority GOVERNMENT OF SAMOA April 2017

Introducing Architecture into the North Rhine-Westfalia State Government

IMPACT Global Response Centre. Technical Note GLOBAL RESPONSE CENTRE

Establishing National Incident Response Capability for Viet Nam - VNCERT activities and challenges

Resolution adopted by the General Assembly on 21 December [on the report of the Second Committee (A/64/422/Add.3)]

Progress of Regional Cooperation in the Field of Disaster Risk Reduction in Asia

Department of Homeland Security Updates

Research Infrastructures and Horizon 2020

Transcription:

Ministry of Communication Technologies Information and Communication Technologies Sector Development Project Video conference on from strategy to implementation: Lessons learned in World Bank funded ICT for Development projects ADB, Tuesday, November 15, 2005 Overview Cost : 10.800.000 Euro Starting date : 18 January 2005 ATI INT CIFOD COM P. Ministry M. Of Culture M. Of Justice MTC - MDE SUP COM ISET Com ANSI CNI M. Social Affairs Objectives Components To assist the Tunisian Government in promoting & developing ICT sector by : Supporting the sectoral and institutional reforms in ICT improving mechanisms in electronic security Developing e-goverment applications Promoting the participation of the private sector ICT Strategy, policy & regulation E-Security E-Government Strategy services & applications Project management & support for the preparation of the WISIS End ICT Strategy, policy & regulation 1.1 Strategic plan for the ICT sector ( MTC) 1.1 Strategic plan for the ICT sector ( MTC) 1.2 Assistance in additional licenses award ( MTC) Technical assistance to help the Government to design a mid-term plan for the strategy and development of the telecommunications and ICT sector 1.3 Assistance to telecommunication sector (INT)

1.2 Assistance in additional licenses award ( MTC) Technical assistance In the short term, to provide consultants to assist the Government in preparing and awarding additional telecommunications licenses. 1.3 Assistance to telecommunication sector regulation (INT) Technical Assistance in the following areas: Internal organization (strengthening INT s internal personnel, budget, procedures and organizational capacity, including the identification of training needs) Interconnection, tariff policy, accounting, numbering plan and analysis of the ICT market Comparative (benchmarking) analysis in telecom regulation 2. E-Government strategy, services & applications 2.1 Development of an e-government strategy (PM) technical assistance 2.1 Development of an E-Government strategy technical assistance 2.2 E-Justice Implementation Involving : Benchmarking of Tunisia in the area of e- government services 2.3 E-Culture 2.4 E-Disabled 2.7 Development of an Arabic DNS 2.5 Virtual ICT library E-government strategy assessing the current status of e-government services & the organizational arrangements for planning and delivering services 2.2 E-Justice Implementation ( Ministry of Justice) providing: Justice and Human Rights Portal Legal precedents documentary database Developing distance Justice services Acquisition and implementation of library software and security softwares Training of users of the new applications 2.3 E-culture ( Ministry of Culture) Creation of a Portal for promotion of the Tunisian Cultural Capital (Ministry of Culture) for promoting the Tunisia's cultural heritage

2.4 E-Disabled (Ministry of Social Affairs and Solidarity) A plateform allowing access to disable persons to new ICTs,in order to facilitate access to education, information, culture; and distance services 2.5 Virtual ICT library (MTC) providing electronic storage and online availability of publications and documents about ICT, to be accessed by third parties (including the private sector, academia ) 2.6 Strengthening the ICT training capacity (Iset Com) - Acquisition of a distance learning platform 2.7 Development of an Arabic DNS (ATI) A solution to have domain names in Arabic characters (including studies & equipments ) - Digitalization of new content for future training programs (in a second stage).

E-Security 3.1 Computer Risks Prevention (ANSI) 3.1 Computer Risks Prevention (ANSI) 3.2 IT Security Lab for Research an Education (SUP'COM) Implementation of a computer risk (virus, cyber-crime, etc.) prevention strategy, in particular by creating within the new National Agency of ICT security (ANSI) a Computer Emergency Response Team (CERT) 3.3 Data Backup Center (CNI) Main Activities of the Tunisian CERT (CERT/TCC) Provides assistance (24h/24 and 7 days/7) in handling computer security incidents, via a call center and via e- mail. Hosts an ISAC (Information, Sharing and Analysis Center ), for the early detection of mass attacks on the Tunisian cybernetic space and a CSIRT (Computer Security Incident Response Team) for the handling of incidents. Provides information about risks (vulnerabilities, virus,..) and best practices, via specialized security mailing-lists and Web site. Provides awareness activities for IT users, by the production of didactic and information material (CDs, Brochures), organization of awareness events (booths, workshops,..) and animation of awareness events (Radio rubrics, exhibitions,..). Promotes the availability of high level training in the various trends of computer security (training of trainees). Promotes communication and synergy between professionals (support for associations specialised in computer security, animation of technical forums and workshops, ) World Bank CERT-TCC Projects Three Projects : Project 3.1.a): Technical assistance for the organization of activities of the CERT/TCC Object : Review of the internal organization and processing of events (assistance, reaction, ) and training of the CSIRT team. (In phase of final negotiation of the contract with Cert-IST) Project 3.1.c) : Acquisition of equipments for the CERT/TCC (finalized) Acquisition of a call center, servers for the ISAC system, tools for Incident forensics and recovery and Didactic equipments (CD duplicators, ) World Bank CERT-TCC Projects Project 3.1.b) Training of Trainees : Organization of 3 training sessions for trainees (from the private and public sector) in the main fields of computer security : Techniques of network security, Techniques for application security and security assessment techniques and methodologies. (In phase of signature of the contract with 3 training centers : MIS, Auditware, HSC) 3.2 IT Security Lab for Research an Education (SUP'COM) the acquisition of equipment, software and specialized equipment for research and practical teaching in online security and training to teacher-researchers

3.3 Data Backup Center (CNI) Project management & support for the preparation of the WISIS To ensure continuity of critical Government systems and applications by the identification of critical systems and the development of a computer disaster recovery plan 4.1 Stimulating private sector participation in WSIS (MTC) 4.3 Support to ICT strategy implementation (MTC) 4.2 Monitoring of the ICT sector and related Government Initiatives (MCT) 4.4 Strengthening of the PMU (MTC) 4.1 Stimulating private sector participation in WSIS (MTC) 4.2 Monitoring of the ICT sector and related Government Initiatives (MCT) - Benchmarking of Tunisia ( dynamism, competitiveness an development of ICT companies ) - Identification of best practices ( competitive participation of Tunisian enterprises in global production an distribution chains) - workshops (one for each study before) - high-level roundtable and exhibition on ICT and outsourcing Technical assistance aimed at strengthening MCT s capacity to monitor the ICT sector 4.3 Support to ICT strategy implementation (MTC) 4.4 Strengthening of the PMU (MTC) Studies, assistance & training relevant to the strategic plan for the ICT sector Recruitment of an expert in procurement to support the PMU and the participating entities with the procurement processes and offers selection for all activities of the project Training the PMU members Acquisition of equipments for projects management activities

Thank you for your attention Mohamed.Abida@sei.gov.tn PMU Coordinator - Project of development of ICT sector in Tunisia Ministry of Communication Technologies n.sahli@ansi.tn CEO of National Agency for Computer Security