NATO MultiNational Smart Defence Project on Cyber Defence Education & Training (Project 1.36) Project Manager: Lt Col Paulo Viegas Nunes nunes.pfv@mail.exercito.pt
Agenda MN CD E&T Objective Working Plan State of Play Synergies and Coordination Way-ahead 2
MN CD E&T Objective To fulfill Nations and NATO s CD E&T shortfalls identified in the GAP analysis that will be performed in cooperation with ACT, in order to support Nations and NATO to comply with NDPP Capability Targets Added Value Offers Allies CD E&T Activities (from strategic to technical level) not available through NATO, National, bilateral or commercial arrangements; Contributes to the future NCI & Cyber School Capability Enhancement links ACT Gap Analysis with NCISS future activities; Promotes NATO Certification high quality of courses and interoperability of experts; Multinational Character greater flexibility and benefits with participation of EU, Industry and Partners; Open and Inclusive New members could join at later stage. 3 3
Competencies and Skills Development : Integrated Model NDPP Cap Targets (E5308) NATO CD Awareness and E&T Concepts NATO CD E&T Plan Smart Defence Projects: MNCD2 and MISP NATO and Allied Nations Courses Education CD Personnel Cyber Lab Professional Development Training Exercises CD Battle Lab (Training) Cyber Range (Exercises) Operational Test Bed Jornadas CD, 26May16 4
Working Plan: Phases & Deliverables Inputs Phases Deliverables 2014 Cap Targets NATO CD E&T Plan, Definition of ToR and Working Plan (Phase 0) ToR and PoW 2015 NATO CD Aw and CD E&T Concepts Definition of CD Competencies & Skills (Phase 1) Report on Required Competencies& Skills CD E&T Requirements (Phase 2) Common E&T Curriculum NATO and Nations Analysis of CD E&T Offer (Phase 3) List of Available CD E&T Activities 2016 Inputs and Proposals Gap Analysis (Phase 4) Report on Gap Analysis CD E&T Shortfalls Proposed Solutions (Phase 5) CDE&TCoord Platform (IOC) New Proposals CD E&T 2017 New Initiatives (Phase 6) New CD E&T Initiatives Final Report Preparation (Phase 7) CDE&TCoord Platform(FOC) + Final Report 5
Project 1.36 - MN CD E&T PURPOSE To create a CD E&T Coordination Platform and provide new initiatives to fulfil Nations and NATO s CD E&T shortfalls Participating Nations (Formal Statement of Interest): Albania Belgium Bulgaria Czech Republic Estonia France Finland Georgia Germany Netherlands Poland Main Stakeholders: Portugal Romania Slovenia Spain Turkey United Kingdom United States ACT NCISS Other Stakeholders and Interested Nations: ACO NSO Interested Partners: NIAG NMSG -117, IST Panel Luxembourg Canada Denmark Greece Hungary EU Japan Ukraine Moldova FYROM Austria Italy Ireland Switzerland Latvia Lithuania Norway Slovakia
7
CD E&T Requirements Analysis Methodology Cyber Force Development is mainly focused in defining Capability Needs Training Requirements Analysis (TRA) 8
E&T Requirements Analysis Challenge : What CD E&T is required? Organization Job Analysis Training Audiences CD Value Chain Tasks Group Task 1 Training Audiences Strategic Technical DoK DoK 1 2 3 4 1 2 3 4 1.1 X X 1.2 X X 2.1 X X For 2 each competency/skill to be developed and for each training audience 2.2 answer X the question: X 3 3.1 X X What Education & Training is required to ensure that the Organization is able to perform its tasks as needed? 4 4.1 X X
Cyber Curriculum New CD E&T Initiatives 10
CD E&T A hand full of candies? 11
Cyber Curriculum : Modular Approach Generation of Competencies Education Level BASIC INTERMEDIATE ADVANCED Specialization Level Cyber User (Individuals) Cyber Law (Cyber-Lawyer) Cyber Leader (Leadership /Staff) Operational Cyber Security (Cyber-Specialist) Tech Assistant Cyber Defence (Cyber-Warior) Tactical Technical Strategic Lawyers All Users A A A A B1 B1 C1 C1 D1 E1 A1 A2 A1 A2 A3 B2 C2 D1 B3 C3 E1 D2 D3 E1 E2 E3 Academic Programs
MNCDE&T New Initiatives Cyber Awareness Course Cyber Law, CS and CD Master Cyber Security & Cyber Defence Master CD Workforce Career Path Cyber Range Technical Courses CD Staff Officers Course (Cyber Advisor) Courses Accreditation Process CD Capability Development Course Cyber Intelligence Course 13
Cyber Security and Cyber Defence International Master Program - WP 05#01 15
Cyber Security and Cyber Defence International Master Program - WP 05#01 Duration: 1 Academic Year + 1 Credits: 60 ECTS (120 ECTS) 1st Year - 5 Modules (Common): CYBER SECURITY AND CYBER DEFENCE FRAMEWORK (10 ECTS) INFORMATION SECURITY (16 ECTS) CYBERSPACE OPERATIONS (16 ECTS) CRISIS MANAGEMENT (12 ECTS) INDIVIDUAL PROJECT (6 ECTS) 2nd Year - 3 Modules (Specialization): RESEARCH METHODOLOGY (4 ECTS) SPECIALIZATION 3 Areas (12 ECTS) THESIS (44 ECTS) The 3 Specialization Areas are: Cyber Security Cyber Defence Cyber Management/R&D. 16
Cyber Security and Cyber Defence International Master Program MODULE ECTS DISCIPLINES HOURS ECTS Demonst of Interest CYBER SECURITY AND CYBER DEFENCE FRAMEWORK INFORMATION SECURITY CYBERSPACE OPERATIONS 10 16 16 CRISIS MANAGEMENT 12 CYBER SECURITY AND CYBER DEFENCE INTRODUCTION 15 2 CYBERSPACE AND CYBER CONFLICTS LEGAL FRAMEWORK 20 4 INFORMATION WARFARE 20 4 INFORMATION SECURITY MANAGEMENT 20 4 SOFTWARE AND APPLICATIONS SECURITY 15 3 PENETRATION TESTING AND ETHICAL HACKING 25 5 FORENSIC ANALYSIS 20 4 OPERATIONAL PLANNING OF CYBERSPACE OPERATIONS 20 4 SOCIAL ENGINEERING 20 4 CYBER INTELLIGENCE AND CYBERSPACE SITUATIONAL AWARENESS 25 5 CYBER SECURITY AND CYBER DEFENCE CAPABILITY DEVELOPMENT 15 3 RISK AND INCIDENTS MANAGEMENT 20 4 CRITICAL SYSTEMS AND INFRASTRUCTURES PROTECTION 20 4 SCENARIO DEVELOPMENT AND CYBERSPACE CRISIS MANAG. EXERCISES 20 4 INDIVIDUAL PROJECT 6 PROJECT OR PROFESSIONAL STAGE REPORT (ON JOB TRAINING) 40 6 OTHER SESSIONS VISITS, CONFERENCES AND SEMINARS Total Year 1 310 60 RESEARCH METHODOLOGY 4 RESEARCH METHODOLOGY 20 4 SPECIALIZATION (3 AREAS) 12 OPTION 1: CRYPTOGRAPHY AND DATA SECURITY (TBC) 20 4 OPTION 2: DIGITAL CRIME AND INVESTIGATION (TBC) 20 4 OPTION 3: DIGITAL ECONOMY AND INNOVATION MANAGEMENT (TBC) 20 4 THESIS 44 THESIS 160 44 Total Year 2 240 60 Total 550 120 17 The 3 possible Specialization Areas are: Cyber Security, Cyber Defence and Cyber Management/R&D. The specialization module will include 3 different disciplines: 2 disciplines of the specialization Area and 1 discipline to be freely chosen by the student.
Cyber Law, Cyber Security and Cyber Defence International Master Program - WP 05#02 18
Master Program Next Steps Governance (SoI/Protocol Executive Board and Scientific Commission) Institutional Framework (Professors, Resources, Facilities) University X (International) University Y (International) University Z (Internacional) University A (National) University B (National) University C (National) University N (National) Disciplines (Consolidated & Certified) Discipline A Discipline C Professional Stage CS Centre Organization A Discipline B CDef Centre Industry Y Industry X Organization A Visits, Conferences and Seminars International Cooperation and National Sinergies (NATO, EU, Bilateral) Federated Academia Environment Presential (On-Site) B-Learning Mobile Training Cyber Range (CD&E, Simulation, etc) CD E&T Cloud ( Academic Cloud )
NATO CD Smart Defence Projects (Coordination and Cooperation with other SD Projects) Coordination and Cooperation: Participation at other SDP Workshops/Meetings Identification of Common Areas of Interest (CAI) Coordination of Activities CYBER DEFENCE PROJECTS NATO SMART DEFENCE 1 st NATO CD SDP Conference (Lisbon, 09 April 2015) 2 nd NATO CD SDP Conference (Lisbon, 28 April 2016) 20
MNCDE&T Synergies and Coordination of Efforts Apr 15 Dec 15 Dec 16 PT CD EDA Apr15 Dec 15 EU EUMTG CD Discipline National Feb 15 MNCDE&T National Masters Cyber Range Taxonomy Courses May 14 NATO PoW Common Vision CD E&T Common Curriculum 21
Way-Ahead 22
Way Ahead Cyber Curriculum Build a Skilled Cyber Defence Workforce New Initiatives Link to ACT and NCI & Cyber Academy Hub for a Web of E&T activities Coordination node of a federation of E&T institutions Academia and Industry Involvement New Challenges and a Window of Opportunity NATO, National and EU Alignment of Efforts National synergies and international Cooperation Common vs. tailored solutions Smart Wins - C3 Coherence, Capability Building and Cost Reduction Next Events: Workshop #9 (Brussels, 19-20 July 16 TBC) Workshop #10 (Brussels: October16 - TBC) 23
MN CD E&T A Smart Project for a Smarter Cyber Defence 24