Sofia, 09 June 2011

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” WHY THE ATTENTION?  Economic implications  Loss of profit  Loss of trust  Loss of intellectual property  Political implications  Estonia  Georgia

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” INTERNATIONAL ACTIVITIES  USA;  ITU;  NATO;  European Union;  ENISA

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” 4 STEPS IN THE ESTABLISHMENT OF GOV-CERT-BULGARIA  November 2006  a visit of Mr. Andrea Pirotti, Executive Officer of ENISA;  June 2007  setting up cooperation with ENISA, CERT-Hungary and SAITC;  Project for network and information security management – Contractor Lirex Company;  April/June 2008  a two-round training on CERTs in Sofia and Budapest.  1 November 2008  CERT-portal starts functioning  Since 12 July 2009  Certificate of Accreditation from Trusted Introducer

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” KINDS OF CSIRT  Academic Sector CSIRT;  Commercial CSIRT;  Banking CERT;  Governmental CSIRT;  Military Sector CSIRT;  National CSIRT;  Small & Medium Enterprises (SME) Sector CSIRT;  Vendor CSIRT.

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” CORE SERVICES OF THE BULGARIAN GOV-CERT  Alerts and Warnings;  Incident Handling;  Incident analysis;  Incident Response Support;  Incident Response Coordination

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” OUR MISSION … CERT Bulgaria is the Governmental Computer Security Incidents Response Team. Its mission is to provide information and assistance to its constituencies in implementing proactive measures to reduce the risks of computer security incidents as well as responding to such incidents when they occur. The team builds up a Database, providing information on how you can make your IT Environment more secure.

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems”

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” CERT’s IN EUROPE

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” govcert.bg

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” STRUCTURE OF GOV-CERT BULGARIA ADMINI- STRATIVE FINCTIONS TECHNICAL SUPORT EXPERTISE, R&D, CONSULTING

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” INCIDENT ANALYSIS

Sofia, 09 June 2010 MINISTRY OF TRANSPORT, INFORMATION TECHNOLOGY AND COMMUNICATIONS Executive Agency “Electronic Communication Networks and Information Systems” CONCLUSIONS OF THE MINISTERIAL CONFERENCE, APRIL 2011  Adoption of national cyber-security strategy;  Establish a well-functioning network of CERTs at EU level;  Develop cyber-incident contingency plans;  Organise national cyber-incident exercises;  Participation in pan-European cyber- incident exercise

Sofia, 09 June 2011