Concept Note: GIDC. Feasibility Study(F/S) on Government Integrated Data Center (GIDC) for the Republic of Nicaragua

Similar documents
Bradford J. Willke. 19 September 2007

The Republic of Korea. economic and social benefits. However, on account of its open, anonymous and borderless

SAINT PETERSBURG DECLARATION Building Confidence and Security in the Use of ICT to Promote Economic Growth and Prosperity

COMESA CYBER SECURITY PROGRAM KHARTOUM, SUDAN

Cybersecurity in Asia-Pacific State of play, key issues for trade and e-commerce

RESOLUTION 130 (REV. BUSAN, 2014)

First Session of the Asia Pacific Information Superhighway Steering Committee, 1 2 November 2017, Dhaka, Bangladesh.

Transport and ICT Global Practice Smart Connections for All Sandra Sargent, Senior Operations Officer, Transport & ICT GP, The World Bank

RFD. for ICERT ( ) RESULTS-FRAMEWORK DOCUMENT. Department of Information Technology. Results-Framework Document (RFD) for CERT-In ( )

Ministerial Meeting 19 th June 2015 Nuku alofa, Tonga

Japanese ODA Loan. Ex-Ante Evaluation

NEW INNOVATIONS NEED FOR NEW LAW ENFORCEMENT CAPABILITIES

Special Action Plan on Countermeasures to Cyber-terrorism of Critical Infrastructure (Provisional Translation)

E Government in Tonga

Cyber Security Technologies

NATIONAL GUIDELINES ON CLOUD COMPUTING FOR GOVERNMENT, MINISTRIES, DEPARTMENTS AND AGENCIES

ENISA EU Threat Landscape

ICT and Disaster Risk Reduction Division ESCAP

INDEPENDENT COMMUNICATIONS AUTHORITY OF SOUTH AFRICA(ICASA) CYBERSECURITY PRESENTATION AT SAIGF. 28 th November 2018

Commonwealth Cyber Declaration

Status of E Government in Tonga. Presented by: Ms. Siasini Petelo Ministry of Communications TONGA

December 10, Statement of the Securities Industry and Financial Markets Association. Senate Committee on Banking, Housing, and Urban Development

Cyber Security Strategic Level Landscape in Poland. Krzysztof Silicki NASK Institute, Poland ENISA MB, EB

First Session of the Asia Pacific Information Superhighway Steering Committee, 1 2 November 2017, Dhaka, Bangladesh.

J.Enhancing energy security and improving access to energy services through development of public-private renewable energy partnerships

Security and resilience in the Information Society: the role of CERTs/CSIRTs in the context of the EU CIIP policy

Cybersecurity for ALL

Commonwealth Telecommunications Organisation Proposal for IGF Open Forum 2017

UNCLASSIFIED. National and Cyber Security Branch. Presentation for Gridseccon. Quebec City, October 18-21

Itu regional workshop

Brussels, 19 May 2011 COUNCIL THE EUROPEAN UNION 10299/11 TELECOM 71 DATAPROTECT 55 JAI 332 PROCIV 66. NOTE From : COREPER

NATIONAL CYBER SECURITY STRATEGY. - Version 2.0 -

GUIDING PRINCIPLES I. BACKGROUND. 1 P a g e

Expanding ICT Infrastructure for Rural Areas in Korea

CYBERCRIME AS A NEW FORM OF CONTEMPORARY CRIME

RESOLUTION 45 (Rev. Hyderabad, 2010)

About Issues in Building the National Strategy for Cybersecurity in Vietnam

Securing Europe's Information Society

CONNECT ARAB STATES SUMMIT

UN General Assembly Resolution 68/243 GEORGIA. General appreciation of the issues of information security

Proposed Regional ehealth Strategy ( )

From the E-readiness Assessment and Analysis to an Action Plan and Policies Recommendations. Gabriel Accascina

Implementing a National Strategy : the case of the Tunisian CERT

Global cybersecurity and international standards

Cybersecurity governance in Europe. Sokratis K. Katsikas Systems Security Laboratory Dept. of Digital Systems University of Piraeus

Promoting Global Cybersecurity

Disaster risk reduction in a changing climate

Position Title: IT Security Specialist

Global Alliance Against Child Sexual Abuse Online 2014 Reporting Form

ICTS for SUSTAINABLE DEVELOPMENT IN ASIA PACIFIC ITU ASIA & THE PACIFIC REGIONAL DEVELOPMENT FORUM

Plan of action for Implementation of the Sendai Framework for Disaster Risk Reduction in Central Asia and South Caucasus Region

Cybersecurity Strategy of the Republic of Cyprus

Cyber Security in Europe

Towards a European Cloud Computing Strategy

National Cyber Incident Response - Architectural Concepts

Overview. Objectives. Components. Information and Communication Technologies Sector Development Project. Project

Building Resilience to Disasters for Sustainable Development: Visakhapatnam Declaration and Plan of Action

Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure

HFA Implementation Review Simplified Version for ACDR2010

DIGITAL AGENDA FOR EUROPE

Netherlands Cyber Security Strategy. Michel van Leeuwen Head of Cyber Security Policy Ministry of Security and Justice

Committed to connecting the world

NATIONAL STRATEGY:- MALAYSIAN EXPERIENCE

UAE National Space Policy Agenda Item 11; LSC April By: Space Policy and Regulations Directory

Resolution adopted by the General Assembly on 21 December [on the report of the Second Committee (A/64/422/Add.3)]

Security and resilience in Information Society: the European approach

Joint Declaration by G7 ICT Ministers

Israel and ICS Cyber Security

Discussion on MS contribution to the WP2018

OAS Cybersecurity Capacity Building Efforts

A Strategy for a secure Information Society Dialogue, Partnership and empowerment

THE CYBER SECURITY ENVIRONMENT IN LITHUANIA

Thailand s Broadband Initiatives and dfuture Plans

Sri Lanka THE JOURNEY OF TOWARDS A CREATIVE KNOWLEDGE BASED ECONOMY

locuz.com SOC Services

National Cyber Security Strategy - Qatar. Michael Lewis, Deputy Director

E-Signature Law of Iraq no. ( 78) of 2012

NATIONAL BROADBAND POLICY AND IMPLEMENTATION STRATEGY. Task Team Leader

National Policy and Guiding Principles

Greg Garcia President, Garcia Cyber Partners Former Assistant Secretary for Cyber Security and Communications, U.S. Department of Homeland Security

THE CONNECT 2020 AGENDA FOR GLOBAL TELECOMMUNICATION/ICT DEVELOPMENT. April 8, 2015

Dr. Emadeldin Helmy Cyber Risk & Resilience Bus. Continuity Exec. Director, NTRA. The African Internet Governance Forum - AfIGF Dec 2017, Egypt

U.S. Japan Internet Economy Industry Forum Joint Statement October 2013 Keidanren The American Chamber of Commerce in Japan

CITY COUNCIL AGENDA REPORT

PAKISTAN HOW TO SPEED UP THE INTRODUCTION OF EHEALTH SERVICES IN DEVELOPING COUNTRIES

Establishing National Incident Response Capability for Viet Nam - VNCERT activities and challenges

2. What do you think is the significance, purpose and scope of enhanced cooperation as per the Tunis Agenda? a) Significance b) Purpose c) Scope

Implementation Strategy for Cybersecurity Workshop ITU 2016

CSIRT in general CSIRT Service Categories Reactive Services Proactive services Security Quality Management Services CSIRT. Brmlab, hackerspace Prague

Industrial control systems

IT SECURITY OFFICER. Department: Information Technology. Pay Range: Professional 18

HOTEL RESILIENT Plan ahead stay ahead. With support from the German Government through

RFC2350 TLP1: WHITE. Έκδοση National CSIRT-CY RFC2350

CCISO Blueprint v1. EC-Council

Doug Couto Texas A&M Transportation Technology Conference 2017 College Station, Texas May 4, 2017

COUNTERING IMPROVISED EXPLOSIVE DEVICES

WSIS Forum 2012-Identifying Emerging Trends and a Vision beyond 2015!

Assessment of the progress made in the implementation of and follow-up to the outcomes of the World Summit on the Information Society

Towards a more secure Cyber Space for South Africa

Creating NIS Compliant Country in a Non-Regulated Environment. Jurica Čular

Transcription:

Concept Note: GIDC 1. Title of Proposed Project Feasibility Study(F/S) on Government Integrated Data Center (GIDC) for the Republic of Nicaragua 2. Organization Nicaraguan Institute for Telecommunications and Post (TELCOR) 3. Project Background A Government Integrated Data Center (GIDC) is a core infrastructure element required to establish effective e-governance. GIDCs, as an exclusive government data center, offers efficient and effective integrated ICT resources including IT systems, infrastructure, integrated operations systems, and human capital as necessary to process electronic public administration services and functions. To carry out the 21 projects drawn from the e-government Master Plan for Nicaragua, it is essential that the Nicaraguan government resolve the issues arising from the implementation and operation of individual systems of each ministry, which leads to redundant investment in information systems, a lack of security measures and an inferior computing environment. Furthermore, it is crucial that the government establishes a GIDC to provide the foundation for reliable and sustainable e- Governance. Implementation and operation of the GIDC will contribute to the integration of necessary ICT resources of different ministries, which will effectively reduce the costs for the government in the long term. 4. Project Description The objective of the main project is to establish a scalable GIDC, which will set the foundation for Nicaragua as the leading countries for e-governance best practices in the region. As a first step, it is necessary to undertake the feasibility study (FS) regarding GIDC, which shall include current status analysis, detailed implementation plan, cost estimation, and relevant components. The estimated cost for each step for GIDC implementation is as follows; (1) Feasibility Study: $200,000 (2) Project Management Consulting(including monitoring and auditing): $1,000,000 (3) Construction & Implementation: $14,000,000. 5. Priority of Project It is one of the top priority projects in the e-government master plan. We plan to implement the GIDC in the near future. 6. Expected Outcomes of Project

(1) Feasibility Study Consulting Report including As-Is status analysis, To-Be model, establishment and implementation plan (2) Financial Analysis to initiate main project 7. Expectations on Korean Experts (1) Experts or companies who have experiences in ICT and/or GIDC projects (2) Experts or companies who have experiences in ICT and/or International Cooperation and Development projects (3) Experienced on businesses in Central and South America with coordination of local consultants and regional experts who speaks Spanish 8. Others The Nicaraguan government is executing the National Human Development Plan (NHDP) for poverty reduction and national development. It deploys various infrastructure projects and social welfare programs to provide benefits to the poor for national socio-economic transformation. Through the national plan, the Nicaraguan government is going to utilize ICT for country modernization in the public administration, education and health sectors to increase quality of life for our citizens. One of the strategic pillars is the National Broadband Plan to increase accessibility and affordability of connectivity to those in the rural areas.

Concept Note: NicaCERT 1. Title of Proposed Project Feasibility Study (F/S) on CERT(Computer Emergency Response Team) for the Republic of Nicaragua 2. Organization Nicaraguan Institute for Telecommunications and Post (TELCOR) 3. Project Background Nicaragua expects to have a specific plan to implement a national CERT infrastructure and develop human and institutional capacity for CERT operation by benchmarking KR- CERT best practices and solutions. Nicaragua is aiming to implement a national CERT in conjunction with the national fiber optic network deployment to leverage synergies; reducing the cost of implementation, improving the protection of new critical infrastructure, improving response time to address incidents by enabling a real-time integrated management system for the benefit of the central and local government, private sector, and citizens. Ultimately, Nicaragua expects to establish an Integrated Security Operation Center for the integrated monitoring to protect the country s information systems and critical infrastructures. Through the findings of the E-Government Master Plan (M/P), successfully executed by NIPA in 2014, TELCOR became aware of the importance and necessity of a national CERT program. Additionally, in October 2014, TELCOR has visited KISA (Korea Internet Security Agency) to understand the best practices and lessons learned from Korea s CERT exerience. Hence, the Republic of Nicaragua shall take the necessary first steps to implement a national CERT with the support of the Korean government and its experts, which is also supported by the MOU framework signed between our two coutntries for ICT cooperation. 4. Project Description (1) Objective - The project will provide a feasibility study on the implementation of CERT in Nicaragua for crisis management in response to attacks on critical information infrastructures and advise on appropriate preventive and protective measures and countermeasures. (2) Scope - As-Is analysis on national cyber security policies, infrastructure and related status in Nicaragua - To-Be Model suggestion on CERT scheme, law and regulations - Implementation plan of CERT with roadmap, governance structure, hardware and software recommendations, training plan, financial analysis (CAPEX/OPEX) (3) Functions and Services

- Consulting on CERT feasibility and sustainability in Nicaragua - Survey on the As-Is status related to cyber security and prioritized requirements for security emergency response - Review on the best practices in Korea - Guides on prerequisites for national CERT operation such as resources, training, management and operation (4) Estimated Cost - Roughly around $200,000 for consulting activities by Korean and local experts for a feasibility study project on CERT in Nicaragua 5. Priority of Project Based on the Master Plan for the national information strategy and planning of Nicaragua established in 2014, a national Security Emergency Response (SER) capability is urgently required to prevent and address cyber-attacks on Nicaraguan critical infrastructures and mitigate the national ICT vulnerability. Also, the Nicaraguan government strongly needs a national CERT infrastructure to minimize risks and to reduce recovery time from cyberattacks when it does occur. Specific criminal legislation on cybercrime, regulation & compliance related to cyber security has been enacted recently, but Nicaragua does not have any official CIRT (Computer Incident Response Team), standards or frameworks on cyber security. There are academic institutions offering specialized training in the field of information security and computer forensic, but Nicaragua still needs experts/professionals certified by internationally recognized certification programs in cyber security. Also, Nicaragua needs to introduce R&D programs in order to operate and maintain a CERT program. 6. Expected Outcomes of Project 1. Feasibility Study including an As-Is analysis, To-Be model and implementation plan 2. Financial Analysis to initiate main project 3. Project Concept Paper preparation 7. Expectations on Korean Experts 1. Experts or companies who have experiences in ICT and/or Cyber Security consulting projects 2. Experts or companies who have experiences in ICT and/or International Cooperation and Development projects 3. Experienced on businesses in Central and South America with coordination of local consultants and regional experts who speaks Spanish 8. Others The Nicaraguan government is executing the National Human Development Plan (NHDP) for poverty reduction and national development. It deploys various infrastructure projects and social welfare programs to provide benefits to the poor for national socio-economic transformation. Through the national plan, the Nicaraguan government is going to utilize ICT for country modernization in the public administration, education and health sectors to increase quality of life for our citizens. One of the strategic pillars is the National Broadband Plan to increase

accessibility and affordability of connectivity to those in the rural areas. * Please fill-in the template accordingly within 3 pages