Strategy and Policy Unit: Current Activities and Future Tasks + new NCSS (2015 - 2020) Daniel P. Bagge Head of Unit (NSA CZE/NCSC)

ORGANIZATIONAL FRAMEWORK TOP level Government Cyber Security Council National Security Authority National Cyber Security Centre Governmental CERT (GovCERT.CZ) Strategy and Policy Unit National CERT (CSIRT.CZ) Ministry of Defence Military CERT (CIRC Centre) memorandum Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 CURRENT ACTIVITIES Fulfilling international obligations (ENISA, OSCE, EU, NATO, CCDCOE , CECSP, etc.) Presenting and promoting NCSC activities at both the national and international levels Participating in cyber security exercises Mapping and defining CII and IIS Strategy and Policy Unit + new NCSS --- 27th November 2014

CURRENT ACTIVITIES (cont'd) Giving strategy advice and policy analysis on cyber security issues Creating and updating strategic and policy documents Supporting GovCERT activities Etc. Strategy and Policy Unit + new NCSS --- 27th November 2014

FUTURE ACTIVITIES (NCSS 2015-2020) Cyber security awareness / educational programmes R&D Deeper cooperation with CII and IIS subjects Risks and threats analysis Legal and other support to Police (cybercrime) Etc. Strategy and Policy Unit + new NCSS --- 27th November 2014

CURRENT NCSS (2012 – 2015) - EVALUATION about to expire main goals have already been met / ongoing 2 milestones: NCSC The Act on Cyber Security shift from elementary to more holistic/comprehensive approach Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 NCSS drafted by NSA CZE and coordinated with stakeholders (legal advisors, experts, relevant ministries, police, military and intelligence agencies, etc.). NCSS will be submitted to the National Security Council soon and later to the Government for approval. NCSS will be effective from JAN 15 and valid till 2020. Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 OUTLINE OF THE NCSS Introduction Visions (long-term vision, exceeds the timeframe of the NCSS) Principles (basic principles which shall be followed by the State IOT ensure cyber security) Challenges (specific challenges both for the Czech Republic and international environment) Main goals (main strategic goals facing the challenges) Implementation of NCSS Annex (acronyms, glossary) + Action Plan (being drafted, definition of its implementation by the NSA CZE) Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 1) VISIONS Smooth functioning of information society Raising cyber security knowledge and capabilities to face the latest cyber security threats Focus on security of industrial systems that are included in critical information infrastructure, IOT get strong expertise and knowledge in this area Become a state with major position in cyber security both within its region and whole Europe Active assistance to alliance partners, fulfillment of commitments for the collective defense and support security in other countries of the world Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 2) PRINCIPLES Protection of fundamental human rights, freedom and democratic principles Comprehensive cyber security approach based on the principle of subsidiarity and cooperation Confidence building and cooperation between public, private sector and civil society Capacity development for ensuring cyber security Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 3) CHALLENGES The Czech Republic as a test bed Insufficient cyber security protection of small and medium enterprises Malware is increasingly sophisticated Botnets and DDoS/DoS attacks Increased cyber crime APTs Etc… Strategy and Policy Unit + new NCSS --- 27th November 2014

Strategy and Policy Unit + new NCSS --- 27th November 2014 4) MAIN GOALS Ensuring the efficiency and strengthening of existing structures, processes and cooperation in the area of cyber security Effective international cooperation National critical information infrastructure and important information systems protection Cooperation with the private sector Research & Development Education support, awareness raising and development of the information society Cybercrime: Promoting the development of capabilities of the Czech Police to investigate and prosecute cybercrime Cyber security legal framework creation and active participation in the European and international legislation development and implementation. Strategy and Policy Unit + new NCSS --- 27th November 2014

Thank you for your attention! Daniel P. Bagge e-mail: d.bagge@nbu.cz www.GovCERT.CZ