DEFENCE POLICY AND PLANNING DIVISION NATO’s Cyber Defence Efforts Euro-Atlantic Center, Bratislava 18 June 2009 Erik Breidlid, Defence Policy and Planning Division NATO International Staff

Public websites most exposed THE THREAT On the rise Public websites most exposed NATO has prime responsibilty for its own encrypted and open communications

Policy approved in January 2008 BACKGROUND Protection against cyber attacks not new: creation of NATO Computer Incident Response Capability (NCIRC) in 2002 Decision to develop NATO Cyber Defence Policy followed in the wake of cyber attacks on Estonia in Spring 2007 Policy approved in January 2008 Article 5 of Washington Treaty so far not applied as result of cyber attacks

NATO’S CYBER DEFENCE POLICY NATO must have the ability to support and protect Allies against cyber attack Allies have prime responsibility for protecting their national networks New measures to protect against cyber attack include Single authority to coordinate national and Allied response mechanisms Establishment of consultation mechanism Potential support teams to nations under attack

Cyber Defence Concept approved in February 2008: MILESTONES Cyber Defence Concept approved in February 2008: Assessment of threats, risks, vulnerabilities Concrete counter-measures Cooperative Cyber Defence Centre of Excellence, Tallinn, accredited in October 2008 CONOPs approved in February 2009 NATO Cyber Defence Exercises

COOPERATION BEYOND NATO Guidelines for cooperation with PfP Partners and international organisations adopted in July 2008 Protection of sensitive information Case-by-case basis/individual handling Framework for cooperation between NATO and Partner nations agreed in April 2009: provides guidance to Partners

NATO’S CYBER DEFENCE EFFORTS Questions? Comments?