ANSI – ESOs meeting Washington 21-22 February 2017 CYBERSECURITY ANSI – ESOs meeting Washington 21-22 February 2017

CEN & CENELEC cybersecurity initiatives CEN – CENELEC Cybersecurity challenge Industry – CEN – CENELEC partnership for functional safety standards is long established Industry stakeholder current expectations on CEN-CENELEC for functional safety and security standards for now digitized processes and systems European policy goals support industry cybersecurity needs through quality, interoperable products and solutions (based on standards)

CEN & CENELEC cybersecurity initiatives Recent Cybersecurity Developments in Europe CEN – CENELEC Cybersecurity Focus Group created to identify priority standardization needs CEN – CENELEC response to EC/EFTA M/530 ‘Privacy and personal data protection management in the design and development and in the production and service provision processes of security technologies’. Draft IMCO Committee report on European Standards and implementation of Regulation 1025/2012: Supports EC proposal for trusted IoT label and certification system Cybersecurity Public Private Partnership (cPPP) created - European Cyber Security Organization (ECSO) giving input to European certification framework for cybersecurity certificate and labelling

CEN & CENELEC cybersecurity initiatives CEN - CENELEC Cybersecurity response Address strategic opportunities and challenges for the digital economy Technical and policy-related To be leading organizations supporting European industry and the point of reference for standardization Provide reliable & credible standardization support tools and products for functional safety, cyber- and data-security.

CEN & CENELEC cybersecurity initiatives CEN – CENELEC Cybersecurity Focus Group (CSCG ) Created 2016 to identify industry priority needs for cybersecurity and data protection. Developing standardization roadmap for cybersecurity for trustworthy ICT products, systems and services Recommendations for adoptions of ISO/IEC ‘security techniques’ standards Joint event with ENISA September 2017 ‘Cybersecurity standardization for privacy and data protection for Internet of Everything’ - addressing connected devices, smart vehicles and smart energy grids.

CEN & CENELEC cybersecurity initiatives Workshop ‘Functional safety & Cybersecurity’ 16 March 2017 Engage key European industry sectors directly – identify needs, challenges key issues Understand industry’s needs to ensure the continuity of their operations through prevention, protection and response measures from the organization, process and technology levels.  Define standardization needs of advanced manufacturing and smart energy for protection of sensitive processes, systems, information Outputs will shape CEN-CENELEC Standardization Roadmap for Cybersecurity for Advanced Manufacturing and Smart Energy sectors.

CEN & CENELEC cybersecurity initiatives European Cyber Security Organisation (ECSO) Created by EC as private component of Public Private Partnership for Cybersecurity Imperative initiative aligns with existing policy frame and key organizations including ESOs CEN-CENELEC will participate in ECSO WG1 ‘Standardization, Certification, Labelling, and Supply Chain Management activities, contribute to EC roadmap for certification and labelling of cybersecurity products. CEN-CENELEC & ECSO agreed basis for cooperation and will sign Memorandum of Understanding. ECSO to participate to the CEN-CENELEC Stakeholder Engagement Workshop Functional safety & Cybersecurity on 16 March 2017.  

CEN & CENELEC cybersecurity initiatives Horizon 2020 Protection And Security Advisory Group (PASAG) PASAG mission is to strengthen the European security research framework PASAG provides input on strategic priorities, in view of the Horizon 2020 (the European Research Framework) 2018-2020 work programme CEN and CENELEC are participating in PASAG PASAG proposes ‘visions’ for 5 priorities for proposals and research projects   Borders and external security                      Fighting crime and terrorism                        Secure and resilient societies                       Cybersecurity and privacy  technologies    Promoting a competitive security industry    Specific US innovation and research initiatives taken into consideration (e.g. US Defence Advanced Research Projects Agency (DARPA) challenges http://www.darpa.mil/ ).

CEN & CENELEC cybersecurity initiatives Proposals for cooperation Establish link with the CSCG (or future TC Cybersecurity) regarding common issues and standardization needs   Invite US representatives to participate in the CEN – CENELEC workshop on functional safety and cybersecurity on 16 March 2017 and the CSCG – ENISA event in September 2017. Establish a mechanism for regular exchanges of information and updates on European/US initiatives for cybersecurity.

ETSI Cybersecurity initiatives Horizontal cybersecurity Privacy by design Security controls Information Security Indicators Network and Information Security

ETSI Cybersecurity initiatives Securing technologies and systems (global work, also in cooperation with regional partners): Mobile/Wireless Comms (3G/4G, TETRA, DECT, RRS, RFID…) IoT and Machine-to-Machine (M2M) Network Functions Virtualisation Intelligent Transport Systems Broadcast

ETSI Cybersecurity initiatives Security tools and techniques Lawful Interception and Retained Data Digital Signatures and trust service providers Secure elements Cryptography

ETSI Cybersecurity initiatives ETSI has an international membership including organizations from US US members active in many security-related committees CYBER, ITS, LI, NFV, QSC, SCP, etc ATIS and TIA are partners of 3GPP and oneM2M – these partnership projects have security schemes in them

ETSI Cybersecurity initiatives Cooperation with US entities NIST: LoI, close links on Quantum-Safe Cryptography Center for Internet Security: working with TC CYBER on security controls SAFE-BioPharma: MoU, working with TC ESI on interoperable Global Trust for Digital Signatures OST-R (Office of the Assistant Secretary for Research and Technology (OST-R) of the United States Department of Transport (US DOT)): MoU on Intelligent Transport Systems

ETSI Cybersecurity initiatives Other key cooperations ECSO European Cyber Security Organisation: setting up collaboration OASIS for threat information sharing

ETSI Cybersecurity initiatives New white paper on Tackling the Challenges of Cyber Security published in December 2016 ETSI Security Week (12-16 June 2017) www.etsi.org/securityweek Workshop 1: Making standards in support of cybersecurity legislation Workshop 2: eIDAS one year after entry in application Workshop 3: Registered eDelivery Workshop 4: NFV security (+ NFV tutorial day before) Workshop 5: 5G security Workshop 6: 5G-ENSURE Project Quantum-Safe Cryptography workshop #5 13-15 September 2017, London, hosted by UK Quantum Hub

THANK YOU!