1. ANSI – ESOs meeting Washington 21-22 February 2017
CYBERSECURITY
ANSI – ESOs meeting
Washington February 2017

2. CEN & CENELEC cybersecurity initiatives
CEN – CENELEC Cybersecurity challenge
Industry – CEN – CENELEC partnership for functional safety standards is long established
Industry stakeholder current expectations on CEN-CENELEC for functional safety and security standards for now digitized processes and systems
European policy goals support industry cybersecurity needs through quality, interoperable products and solutions (based on standards)

3. CEN & CENELEC cybersecurity initiatives
Recent Cybersecurity Developments in Europe
CEN – CENELEC Cybersecurity Focus Group created to identify priority standardization needs
CEN – CENELEC response to EC/EFTA M/530 ‘Privacy and personal data protection management in the design and development and in the production and service provision processes of security technologies’.
Draft IMCO Committee report on European Standards and implementation of Regulation 1025/2012:
Supports EC proposal for trusted IoT label and certification system
Cybersecurity Public Private Partnership (cPPP) created - European Cyber Security Organization (ECSO) giving input to European certification framework for cybersecurity certificate and labelling

4. CEN & CENELEC cybersecurity initiatives
CEN - CENELEC Cybersecurity response
Address strategic opportunities and challenges for the digital economy
Technical and policy-related
To be leading organizations supporting European industry and the point of reference for standardization
Provide reliable & credible standardization support tools and products for functional safety, cyber- and data-security.

5. CEN & CENELEC cybersecurity initiatives
CEN – CENELEC Cybersecurity Focus Group (CSCG )
Created 2016 to identify industry priority needs for cybersecurity and data protection.
Developing standardization roadmap for cybersecurity for trustworthy ICT products, systems and services
Recommendations for adoptions of ISO/IEC ‘security techniques’ standards
Joint event with ENISA September 2017 ‘Cybersecurity standardization for privacy and data protection for Internet of Everything’ - addressing connected devices, smart vehicles and smart energy grids.

6. CEN & CENELEC cybersecurity initiatives
Workshop ‘Functional safety & Cybersecurity’ 16 March 2017
Engage key European industry sectors directly – identify needs, challenges key issues
Understand industry’s needs to ensure the continuity of their operations through prevention, protection and response measures from the organization, process and technology levels. 
Define standardization needs of advanced manufacturing and smart energy for protection of sensitive processes, systems, information
Outputs will shape CEN-CENELEC Standardization Roadmap for Cybersecurity for Advanced Manufacturing and Smart Energy sectors.

7. CEN & CENELEC cybersecurity initiatives
European Cyber Security Organisation (ECSO)
Created by EC as private component of Public Private Partnership for Cybersecurity
Imperative initiative aligns with existing policy frame and key organizations including ESOs
CEN-CENELEC will participate in ECSO WG1 ‘Standardization, Certification, Labelling, and Supply Chain Management activities, contribute to EC roadmap for certification and labelling of cybersecurity products.
CEN-CENELEC & ECSO agreed basis for cooperation and will sign Memorandum of Understanding.
ECSO to participate to the CEN-CENELEC Stakeholder Engagement Workshop Functional safety & Cybersecurity on 16 March 2017.

8. CEN & CENELEC cybersecurity initiatives
Horizon 2020 Protection And Security Advisory Group (PASAG)
PASAG mission is to strengthen the European security research framework
PASAG provides input on strategic priorities, in view of the Horizon 2020 (the European Research Framework) work programme
CEN and CENELEC are participating in PASAG
PASAG proposes ‘visions’ for 5 priorities for proposals and research projects  
Borders and external security                     
Fighting crime and terrorism                       
Secure and resilient societies                      
Cybersecurity and privacy  technologies   
Promoting a competitive security industry   
Specific US innovation and research initiatives taken into consideration (e.g. US Defence Advanced Research Projects Agency (DARPA) challenges ).

9. CEN & CENELEC cybersecurity initiatives
Proposals for cooperation
Establish link with the CSCG (or future TC Cybersecurity) regarding common issues and standardization needs
Invite US representatives to participate in the CEN – CENELEC workshop on functional safety and cybersecurity on 16 March 2017 and the CSCG – ENISA event in September 2017.
Establish a mechanism for regular exchanges of information and updates on European/US initiatives for cybersecurity.

10. ETSI Cybersecurity initiatives
Horizontal cybersecurity
Privacy by design
Security controls
Information Security Indicators
Network and Information Security

11. ETSI Cybersecurity initiatives
Securing technologies and systems (global work, also in cooperation with regional partners):
Mobile/Wireless Comms (3G/4G, TETRA, DECT, RRS, RFID…)
IoT and Machine-to-Machine (M2M)
Network Functions Virtualisation
Intelligent Transport Systems
Broadcast

12. ETSI Cybersecurity initiatives
Security tools and techniques
Lawful Interception and Retained Data
Digital Signatures and trust service providers
Secure elements
Cryptography

13. ETSI Cybersecurity initiatives
ETSI has an international membership including organizations from US
US members active in many security-related committees
CYBER, ITS, LI, NFV, QSC, SCP, etc
ATIS and TIA are partners of 3GPP and oneM2M – these partnership projects have security schemes in them

14. ETSI Cybersecurity initiatives
Cooperation with US entities
NIST: LoI, close links on Quantum-Safe Cryptography
Center for Internet Security: working with TC CYBER on security controls
SAFE-BioPharma: MoU, working with TC ESI on interoperable Global Trust for Digital Signatures
OST-R (Office of the Assistant Secretary for Research and Technology (OST-R) of the United States Department of Transport (US DOT)): MoU on Intelligent Transport Systems

15. ETSI Cybersecurity initiatives
Other key cooperations
ECSO European Cyber Security Organisation: setting up collaboration
OASIS for threat information sharing

16. ETSI Cybersecurity initiatives
New white paper on Tackling the Challenges of Cyber Security published in December 2016
ETSI Security Week (12-16 June 2017)
Workshop 1: Making standards in support of cybersecurity legislation
Workshop 2: eIDAS one year after entry in application
Workshop 3: Registered eDelivery
Workshop 4: NFV security (+ NFV tutorial day before)
Workshop 5: 5G security
Workshop 6: 5G-ENSURE Project
Quantum-Safe Cryptography workshop #5
13-15 September 2017, London, hosted by UK Quantum Hub

17. THANK YOU!