WORLD BANK DONOR PERSPECTIVE ON CYBER SECURITY Transport and ICT Global Practice Smart Connections for All Sandra Sargent, Senior Operations Officer, Transport & ICT GP, The World Bank
MYTH NUMBER ONE: CYBER SECURITY IS ABOUT SECURITY The truth is: Cyber Security is about ECONOMY Cyber Security is about GOOD GOVERNANCE Cyber Security is about CITIZENS Cyber Security is about COMPANIES Cyber Security is about BANKS Cyber Security is about HOSPITALS Cyber Security is about LIVES Cyber Security is about GROWTH Cyber Security is about DEVELOPMENT
World Bank Mission and Role of ICTs in Accelerating Development The World Bank s Twin Goals to end extreme poverty and boost shared prosperity cannot be achieved without ensuring affordable broadband access for all, and fully embracing the transformative powers of Information and Communication Technologies (ICT). The recently approved Sustainable Development Goals (SDGs) underscore the need to ensure universal and affordable access to internet in low income countries by 2020. The potential for digital technologies to yield enormous digital dividends to the extreme poor is further highlighted in the recently published World Development Report 2016 which articulates the potential transformational impact of digital technologies, in particular mobile phones and the internet, on inclusion, efficiency and innovation. More access to universal and affordable technologies and internet, also mean, more vulnerabilities to cyber threats or cyber attacks. In this context we work to also provide SAFE ICTs.
Importance of Promoting Cybersecurity Countries Rely on ICT Infrastructure Therefore Governments must Ensure a Secure & Trusted ICT Environment Broadband e-id Privac y Securit y Systems & Networks Services Cloud and Data The Transport & ICT Global Practice, stands committed to help countries to build this Trusted and Secure Environment by strengthening their capacity in cybersecurity to address cyber-threats.
Cybersecurity is crucial for key sectors within the World Bank Specially those categorized as Critical Infrastructure Vertical Practice: Broadband-internet and crosscutting ICT applications for service provision Agriculture Water Finance & Markets Governance Poverty Education Energy & Extractives Transport & ICT Urban, Rural & Resilience Social Protection & Labor Environment & Natural Resources Health, Nutrition & Population Macroecono mics & Fiscal Management Trade & Competitivenes s ICT Components across the Sectors 80% of the World Bank s projects have an ICT component Horizontal Practice: ICT innovations and solutions in all the other Global Practices
Cybersecurity in the ICT Unit Project Portfolio The World Bank s ICT Unit is offering integrated solutions in the ICT project portfolio to address cybersecurity gaps in our country clients. We have different projects and activities in which we develop integrated solutions in order to increase countries response capacity to cyber-threats menacing their public systems and infrastructure, especially those projects that have egovernement, eservices, eids, Cloud, among other components. Country Specific Technical Assistance Global Studies Reimbursable Advisory Services Lending
Cybersecurity Integrated Solutions in the ICT Unit Project Portfolio Policy, Legal, and Regulatory Enabling Framework: Technical Assistance and strategic advice on policy/law formulation based on national cybersecurity gaps/priorities. Awareness and capacity building: Implementing tools, trainings and processes to help clients to strengthen their abilities to combat cyber-attacks. Developing knowledge-sharing activities to share best practices and good international case studies. Looking at best institutional arrangements and internal procedures for implementing cyber security Establishing institutional agreements and coordination mechanisms Responsible for detecting, investigating, and monitoring cyber-incidents and loss of data such as Computer Emergency Response Teams (CERTs) Governance and Institutions: Establishment of Response and Recovery Mechanisms:
MYTH NUMBER TWO: DONOR COMMUNITY IS NOT WELL EQUIPED TO DEAL WITH THE ISSUE OF CYBER SECURITY The Truth is: Donor community has cross-disciplinary expertise needed to address the challenged posed by cyber security. Donor community has world wide coverage, country presence and in-depth knowledge of the local conditions needed to reach the most disadvantaged and the least ready to address cyber security threats. Donor community has financial resources that can close the gaps in cyber readiness if applied in a coordinated manner. Donor community has the use of international frameworks and agreements to bring greater collaboration and consensus.
How to approach Cybersecurity: World Development Report Conceptual approach to Cybersecurity Threats to cybersecurity are undermining confidence in the internet and increasing the costs to businesses and governments, resulting in economic losses as well as higher security spending, - WDR2016
Digital Development Partnership (DDP) A platform for digital innovation and development financing Objectives Standardize, replicate, scale up: advance digital development from experimentation to a standardized, replicable and scalable work program with clear results expectations. Partner with clients, private sector and donors: jointly shape the agenda and integrate private sector innovations and real-life expertise in projects. Leverage World Bank and IFC representation in more than 130 country offices. Modalities Multi-donor Trust Fund co-mingling bilateral and private sector contributions. Bank-executed work programs aimed at improving the enabling environment for digital development and private sector activity. Governance mechanism with yearly partnership meetings and informal technical working groups. Current partners: Microsoft, GSMA, Finland, Korea, Japan. Scope Data and indicators: benchmark the readiness of client countries to reap digital dividends. Digital economy enabling environment: remove barriers and bottlenecks for the digital ecosystem and support global, common rules for the digital economy. Cyber security: support developing countries with ensuring trusted and secure cyber space. Internet access for all: support policy, regulatory, and technical reforms to enhance connectivity. Digital government: mainstream interoperable digital platforms, services, and solutions.
Digital Development Partnership Call for Action and our Opportunity Analytical Foundation: World Development Report 2016 Digital Dividends Digital Development Partnership (DDP) Work Areas: Work Area 1: Data and Indicators Work Area 2: Digital Economy Enabling Environment Work Area 3: Cyber Security Work Area 4: Internet Access for All Work Area 5: Digital Government Work Area Work Area 6: Mainstreaming Digital Innovation Partnering Opportunities
Fostering Cybersecurity Program DDP will help advance the capacity of World Bank clients in the development of cybersecurity policies and standards, and support good practices in the use of cybersecurity tools, safeguards, and risk management instruments. Capacity Technical Assistance Assesments Frameworks
Cyber OPS Toolkit Cyber Guide for Public Sector CIIP Guide in WB Investments FRAMEWORKS SAR EAP ECA AFRICA ASSESMENTS WB Capacity Client Capacity CAPACITY Technical TTL/CMU Study Tours Clinics Internal Processes Collaboratio n M&E OPS / Projects OPS / Projects OPS / Projects OPS / Projects TECHNICAL ASSISTANCE
Partners
DONOR CHALLANGE Dispel Myth N1 Need for standardized and comparable datasets Need for a robust analytical work showing cost benefit of investments into cyber security and costs of not investing. Dispel Myth N2 Need for greater coordination of activities at a country level Need for standard set of tools and mechanisms
THE NEW BEGINNINGS Global Forum for Cyber Expertise Digital Development Partnership National Cyber Security Guide (ITU) Cyber Crime Toolkit Project (WB) Cyber Security Capacity Project (WB)
Thank you