Polish Critical Infrastructure Protection System

Legal basis Act of 26 April 2007 on crisis management foto: Kpalion

of key importance to the security of the state and its citizens serving to ensure efficient functioning of public administration authorities, institutions and enterprises Critical infrastructure

1.Energy, fuel and energy resources supply systems, 2.Communication systems, 3.Teleinformation network systems, 4.Financial systems, 5.Food supply systems, 6.Water supply systems, 7.Health protection systems, 8.Transportation systems, 9.Rescue systems, 10.Systems ensuring the continuity of public administration activities, 11.Systems for production, storage and use of chemical and radioactive substances, including pipelines for hazardous substances Critical systems

„it shall be understood as all steps aimed at ensuring the functionality, continuity and integrity of critical infrastructures in order to prevent threats, risks or vulnerabilities and limitations as well as neutralizing their effects and quick reconstruction of the infrastructure in case of failures, attacks and other events disrupting its appropriate functioning” critical infrastructure protection all-hazardsapproach

INFORMATION SHARING INFORMATION SHARING CIP model ISAISA CI OPERATOR protection of objects, devices, installations CI OPERATOR protection of objects, devices, installations first responders Mayor, City president StarostStarost VoivodeVoivode Minister responsible for CI system Support for CI operator in case of disruption of CI Information about disruption of CI

Physical Technical Personnel IT Legal Recovery Plans Critical infrastructure protection

national infrastructure Stage 1 Stage 2 Stage 3 List of CI How critical infrastructure is designated ? Sectoral criteria (preselection) Definition of CI Cross-cutting criteria

protection of critical infrastructure is an operator’s duty

Infrastruktura krytyczna Obligations put on CI operators preparation of critical infrastructure protection plans designation of a contact person responsible for maintaining relations with public administration

National Critical Infrastructure Protection Program

Aim? create conditions for improving the security of CI security

How ? By designating ministers responsible for the systems By defining critieria By outlining priorities, objectives, requirements and standards, which are to ensure the functioning of critical infrastructure

Main document includs: Program recipients Bodies and entities involved in the implementation of the Program, their role and responsibility Elements of the risk assessment The model of cooperation in the protection of CI How to implement and evaluate the effectiveness of the program

identify critical resources, functions and dependencies determine roles and responsibilities assess the risk identify priority actions develop and implement the CI protection system test and review the CI protection system identify scope and objectives to be achieved improve by introducing modifications and corrections ActPlan DoCheck Protection of CI as a cycle

Leading principles of NCIPP Shared resposibility Foto: Sura Nualpradid

Cooperation Foto: tungphoto Leading principles of NCIPP

Trust Okładka książki Piotra Sztompki – Zaufanie. Fundament społeczeństwa – wydawnictwo Znak Leading principles of NCIPP

Critical infrastructure sectorMinister responsible Energy, fuel and energy resources supply Minister of Economy Minister of State Treasury CommunicationMinister of Administration and Digitization Tele-information networkMinister of Administration and Digitization FinancialMinister of Finance Food supplyMinister of Agriculture and Rural Development Water supply Minister of Environment Minister of Administration and Digitization Health protectionMinister of Health TransportationMinister of Infrastructure and Development RescueMinister of Interior Ensuring the continuity of public administration activities Minister of Administration and Digitization Production, storage and use of chemical and radioactive substances, including pipelines for hazardous substances Minister of Environment Ministers responsible for CI sectors

Annex 1 – charactersitic of the CI systems

Annex 2 - standards ensuring efficient functioning of critical infrastructure – best practices and recommendations

Annex 3 – criteria restricted

Challenges and lessons learnt Where is it written (in which the rule of law)? What will be a profit for me? It’s a lot of work and I need help/I have all measures in place Why these criteria? The most important are people!!! The administration has a currency (potential that can be used during the crisis) Organize joint activities (exercises) If you promise something – do it If you know you won’t be able to keep your promise - do not promise anything

Contact: Maciej Pyznar Head of Unit Critical Infrastructure Protection Unit Government Centre for Security Credits: FreeDigitalPhotos.net Thank you for your attention