MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT COL. PIOTR GRZYBOWSKI, Director, Classified Information Protection Department 1UNCLASSIFIED

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Agenda Polish National System of the Cyber Defence - structures and operation, Policy, doctrine, resource and armaments related issues of the development and operation of the Cyber Defence System of the POL MoND. UNCLASSIFIED2

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Cyber Security capabilities - how to get? UNCLASSIFIED3 Legal framework Military regulations National regulations International regulations Legal framework Military regulations National regulations International regulations Organizational structures MIL-CERT GOV-CERT Organizational structures MIL-CERT GOV-CERT Technical enhancement IT security measures Technical enhancement IT security measures CYBERSECURITYCYBERSECURITY

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Cyber Defence in Military Sphere UNCLASSIFIED4 Critical Infrastructure CyberSpace IT CI

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT MoND Response for computer and IT systems incidents CyberCrime CyberTerrorism, CyberWar National Cyber Defence System UNCLASSIFIED5 MCIS Internal Security Agency FOCUS POINT OF CONTACT Internal Security Agency FOCUS POINT OF CONTACT MILITARY POLICE POLICE CERT GOV CERT Teams (eg. ABUSE Forum) CERT Teams (eg. ABUSE Forum) CERT PL MIL CERT

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Legal basis of POL Military CIRC MoND Decision No 357/MON dated 29 Jul 2008 about organization and functioning Computer Incident Response System in MoND. MoND Decision No 38/MON dated 16 Jan 2012 – which established the role of Representative of the Minister of National Defence for Cyber Security Guidelines and Directions of Military Counter-Intelligence Service. Computer Incident Response Capability Handbook – in co-ordination with Military Counter-Intelligence Service. CIRC Standard Operational Procedures in MoND. Strategy of IT development within Ministry of National Defence Republic of Poland. Vision of Polish Armed Forces UNCLASSIFIED6

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Responsibilities UNCLASSIFIED7 Polish Military Contingent MIL-CERT military sphere CERT.gov.pl Internal Security Agency CERT Polska Research and Academic Network in Poland (NASK) NCIRC TC NATO MILITARY POLICE Military Counter- Intelligence Service MOU between NATO CDMA and POL NSA concerning cooperation on Cyber Defence POC for military network is MCISA Agreement between DoD of US and MoND the Republic of Poland concerning cooperation on IA and CND MILREP

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Cyber Defence Structure in POL MoND UNCLASSIFIED8 Coordination Centre ======================= IT&T DEPARTMENT Coordination Centre ======================= IT&T DEPARTMENT Technical Support Centre division of MCISA Technical Support Centre division of MCISA IT Systems Administrators military units (Div, Brig) and organizational cells of MoND IT Systems Administrators military units (Div, Brig) and organizational cells of MoND three-layered organisational structure RAPID REACTION TEAM The Polish computer incident response system has been created as NATO initiative

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Information sharing of military CERT related to Cyber Defence UNCLASSIFIED9 Governmental entities POLICE HQ MILITARY POLICE HEADQUARERS International bodies NATO CIRC Coordination Centre and Technical Support Centre Non - governmental organisations CERT PL NASK NATO agencies Internal Security Agency CERT GOV PL Service of military counter intelligence ABUSE Forum Other CSIRT (CERT Team) US agencies ….but not only. Other CSIRT

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Cyber Security activities International cooperation: – Information Assurance/Computer Network Defence MoU (signed in June 2010) with DoD US - forms basis for cyber defence cooperation – sharing information with NATO CIRC TC; – Cooperative Cyber Defence Centre of Excellence - planned. Exercises: – International Cyber Defence Workshops; – Cyber Endeavor; – NATO Cyber Defence workshops ; – EU Cyber Defence workshops; – National Cyber Defence workshops. Courses, symposia, conferences, and other form. UNCLASSIFIED10

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Nearest future…  Development of „National Policy for Cyberspace Security ” and „Security Policy for Cyber Defence”;  Reorganization and extending MIL CERT Poland;  Introducing Early Warning System;  Implementation of (dynamic modification) Incident Handling Manual with Standard Operational Procedures. UNCLASSIFIED11

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT Final remarks on POL CIRC activities Close cooperation among governmental and non- governmental organizations (corporations and ISP’s); Synergy of technical, legal and organizational actions is the key issue; Necessity of fast adaptation to new threats and conditions; Users’ awareness enhancement in the field of current threats and ways of protection; Critical infrastructure protection – essential to assure security of the country. UNCLASSIFIED12

MINISTRY OF NATIONAL DEFENCE REPUBLIC OF POLAND CLASSIFIED INFORMATION PROTECTION DEPARTMENT UNCLASSIFIED13