Cyber Security Ecosystem of Georgia. Experience and Challenges Internet Development Initiative IDI Vladimer Svanadze

International Recognition of Georgia’s Cyber Achievements Source: Eka Gordadze, LEPL DEA

Global Cyber Security Index – TOP 10 Source: Global Cyber Security Index 2017 Country GCI Score Legal Technical Organizational Capacity Building Cooperation Singapore 0.92 0.95 0.96 0.88 0.97 0.87 United States 0.91 1 0.73 Malaysia 0.89 0.77 Oman 0.98 0.82 0.85 0.75 Estonia 0.84 0.99 0.94 0.64 Mauritius 0.74 0.70 Australia 0.86 0.44 Georgia 0.81 0.90 France 0.60 0.61 Canada 0.93 0.71

25 Indicators Based on the Five Pillars of the Global Cyber Security Agenda Source: Eka Gordadze, LEPL DEA

Georgia was entered the index in second place by the National Cyber Security Index Source: e – Governance Academy/eGA

Why Georgia Succeed? Comprehensive Approach to All Major Building Blocks Strategic, Policy Alignment and Political Willingness Non – Separation of Information Security and Cyber Security Efforts Pragmatic and Risk – Based Approach Recognizing Importance of Trust and Cooperation, Informal Channels Close Cooperation with Strategic Partners Integration with the EU Information and Cyber Security Frameworks

Georgia's Legal Space of Cyber Security December, 2011 - National Security Concept of Georgia June, 2012 - Law on Information Security October, 2012 – Convention of Budapest May, 2013 - Cyber Security Strategy and Action Plan for 2013 – 2015 2013 - defined critical infrastructure subjects August, 2014 - Association Agreement with the European Union (P7; P14) January, 2017 - Cyber Security Strategy and Action Plan for 2016(7) – 2018

Georgian Cyber Security Strategy 2013 – 2015 & 2017 - 2018 Main directions Research and analysis New legislative - normative base Institutional coordination of cyber security Raising public awareness and formulation of educational base International cooperation Cyber Security Laboratory

Who is the Critical Information System Subject? Critical Information System Subject – 40 Organization are approved by the Government of Georgia Administration of Government Ministries Parliament of Georgia Administration of President General Prosecutor's Office National Bank of Georgia Tbilisi City Hall Different LEPLs (including 112, Public Registry, Public Service Development Agency, Revenue Service, Social Service Agency, …….)

Stakeholders of the Georgian Cyber Security Government LEPL Data Exchange Agency of the Ministry of Justice I LEPL Cyber Security Bureau of the MOD I Department of Combating Cybercrime in the Central Criminal Police Department of the MIA I CERT.GOV.GE I The Personal Data Protection Inspector Office I State Security Services I Civil Society Internet Development Initiative (IDI) I Georgian Research and Educational Networking Association (GRENA) I Private Sector Information Security Operations Center (ISOC – MZE) I UGT I Orient Logic I GreenNet I Academia University of Georgia I Technical Society

Key Motivators for Development of Nation - Wide Cyber Security Framework E - Government and ICT Infrastructure Information Security Cyber Threats and Attacks National Cyber Security Framework

Internet Development Initiative - IDI is a membership-based Non-entrepreneurial (Non-commercial) Legal Entity. It has established in July, 2015, in accordance with the Civil Code of Georgia. Member of APRALO/ICANN, and NCGO/ICANN, also Scientific Cyber Security Association The Objectives of the Organization Activities: Support growth concentration of the internet; Promote the development of standards of cyber security, and support to improve skills in cyber security. Organize trainings and study courses; Study and analysis of threats in cyberspace. Write recommendations for government and private sector. Public awareness raising; Encourage the process of protection and advocacy for internet users' rights; Support the development of online media; Initiative of projects of information and communication technology. Search for new technologies, analysis and promotion for implementation; Initiative of projects with government and private sector in Information technology and innovation; Support for print and online publications, organizing conferences, seminars, forums in ICT and cyber security. Projects Georgian Internet Governance Forum - GeoIGF Tbilisi 2016; The Project for Broadband Rollout in Tusheti Region; The National Cyber Security Strategy of Georgia (2016 - 2018); Studying course on "Investigating DNS Abuse & Criminal use of the DNS“ (X2); The First Cyber Security Festival for Georgian Students; Center for Study & Research of Internet; Raising Awareness of Students – Teenagers in Cyberspace-Related Threas; Cyber Security Laboratory.

Internet Development Initiative IDI Info@indein. net vsvanadze@indein Internet Development Initiative IDI Info@indein.net vsvanadze@indein.net +995322421151 +995577155168 www.indein.net Information Security Operations Center ISOC - MZE