Security and Protection of Information 2009 BUILDING CIRC CAPABILITIES IN THE CZECH ARMY 6/5 2009, BRNO IDET 2009 LtCol. Roman SEKANINA, Cpt. Milan DANĚK

LtCol. Roman SEKANINA (Specialist-CIS security section, CIS Division) Cpt. Milan DANĚK (Head of the CERT Department, CZ MoD CIRC Centre)

CONTENTS 1.Position of the CZ MoD CIRC. LtCol. Roman SEKANINA 2.CZ MoD CIRC Centre, CERT Department, present state and future CIRC. Cpt. Milan DANĚK Questions, discussion. (Demonstration – Exhibition hall „G1“, stand No.33)

CZ MoD approach to CD/CIRC Definitions CYBER DEFENCE (CD) - involves wide scale of security measures (from different areas) to protect cyber environment, especially to protect components of Critical Information Infrastructure (CII) against cyber attacks CIRC (Computer Incident Response Capability) - is the part of the INFOSEC effort that provides the capability to respond to computer security threats rapidly and effectively. It provides a means for handling and reporting incidents and disseminating important incident-related information to system and security management and users. It should be part of the emergency (contingency) planning to restore system after attack. CERT (Computer Emergency Response Team) - comprises the technical staff providing the direct technical assistance as requested or as needed.

Relationship between IA, INFOSEC, CD and CIRC Information Assurance INFOSEC Cyber Defence (program) CIRC (capability)

Structure of the CZ MoD CIRC SKIS MO, OB MO CZ MoD CIRC Coordination centre CZ MoD CIRC Technical Centre CIS Operating Authorities Level 1 Level 2 Level 3 (CERT) NCIRC (CC), CCc,… NCERT, CSIRT, … KEY SKIS MO - CIS section at CIS Div. OB MO – INFOSEC branch at MoD 34.zKIS – CIS base 34.zKIS