1. EUROPEAN SECURITY POLICY A SNAPSHOT ON SURVEILLANCE AND PRIVACY DESSI WORKSHOP, CPH 24 JUNE 2014 Birgitte Kofod Olsen, Chair Danish Council for Digital Security

2. Current Security Challenges  Increase in cyber attacks  Easier to conduct cyber crimes  Cyber war replacing conventional war  Impact across borders  Potential risk for critical infrastructures  Effects citizens, consumers, nations, organisations and businesses

3. Threats in Cyber Space 2800 DDOS attacks each day Floods of nuisance traffic (pings), which - slows or crashes the victims’ websites - leaving them offline - unable to send e-mail, process orders, make bank transactions or for governments run the country

4. Surveillance of citizens  Suveillance of critical infra structure by national CERT agencies  Surveillance of data and telecom by National Intelligence Service agencies  Registration of tele and data traffic by Telecom Operators  DK: Willingness among citizens to accept surveillance  USA and EU: citizens oppsing surveillance

5. EU Responses  Cyber Security Strategy of the European Union: An Open, Safe and Secure Cyberspace” (JOIN(2013) 1 final):  Cyber attacks and cyber crime  The protection of fundamental rights is as important in the virtual world as it is in the real world  Trust and confidence should be improved not only between states, but also between private and public sector  Cooperation between different EU policy areas, and promoting coordination between the military and civilian sides

6. Priorities  The strategy articulates the EU's vision of cyber- security in terms of five priorities :  Achieving cyber resilience  Drastically reducing cybercrime  Developing cyber defence policy and capabilities related to the Common Security and Defence Policy (CSDP)  Developing the industrial and technological resources for cyber-security  Establishing a coherent international cyberspace policy for the European Union and promoting core EU values

7. Network and Information Security (NIS) Directive  The proposed Directive lays down measures including:  (a) Member State must adopt a NIS strategy and designate a national NIS competent authority with adequate financial and human resources to prevent, handle and respond to NIS risks and incidents;  (b) Creating a cooperation mechanism among Member States and the Commission to share early warnings on risks and incidents through a secure infrastructure, cooperate and organise regular peer reviews;  (c) Operators of critical infrastructures in some sectors (financial services, transport, energy, health), enablers of information society services (notably: app stores e-commerce platforms, Internet payment, cloud computing, search engines, social networks) and public administrations must adopt risk management practices and report major security incidents on their core services.

8. EU Regulation on Personal Data Draft General Data Protection Regulation 2012  The new proposals will strengthen individual rights and tackle the challenges of globalisation and new technologies  Context:  Rapid technological developments have brought new challenges for the protection of personal data.  The scale of data sharing and collecting has increased dramatically.  Technology allows both private companies and public authorities to make use of personal data on an unprecedented scale in order to pursue their activities.  Individuals increasingly make personal information available publicly and globally.  Technology has transformed both the economy and social life.  Building trust in the online environment is key to economic development.  Lack of trust makes consumers hesitate to buy online and adopt new services.

9. Cyber War – a new challenge?  Cyber actions and attacks against nations and their administrations  Come as part of a coordinated assault on a nation or as a malicious hacker’s idea of a joke  distributed denial of service attacks (DDoS)  computer viruses  spying and infiltration  A need for international regulation of cyber warfare?

10. Contact info www.digitalsikkerhed.dk Chair and Vice Chair birgitte.kofod.olsen@digitalsikkerhed.dk shehzad.ahmad@digitalsikkerhed.dk Secretariat bjorn.kassoe.andersen@digitalsikkerhed.dk