1. NATO CIS Services Agency TechNet International 2009- Keynote Speech Session I – International Threats – Regional Solutions Presented by Lieutenant General Kurt Herrmann, Director NCSA 29 October 2009 Brussels, Belgium PROVISION OF CIS-SERVICES IN A DYNAMICALLY EVOLVING CYBER WORLD

2. NATO UNCLASSIFIED2 Understanding NCSA Free Flow of Information and Knowledge Security in the Cyber World NATO’s Response to Cyber Risks Outline

3. NATO UNCLASSIFIED3 To ensure the provision of secure end-to-end information exchange services and information processing services required for NATO Consultation, Command and Control, using fielded Communications and Information Systems in the most cost effective manner. NCSA Mission

4. NATO UNCLASSIFIED4 NCSA Organisation CIS OperationsStatic CIS Support Service Delivery Systems Management NATO INFOSECSignal Battalions

5. NATO UNCLASSIFIED5 CIS support to NATO Operations Military Committee OPCON (for Operations) SACEUR NAC Policy direction NCSA DCIS elements DCMs CIS Logistic Depot Supporting NATO elements NC3A NAMSA Contractors Supporting National CIS elements CIS support to Static HQ structures SLAsOpPlans/OpOrders C2 for NFS Nations’ customers Consul- tation NATO HQ Brussels C2 for NCS ACT +Sub- structure C2 for NCS ACO +Sub- structure NATO C3 Board NCSA’s Position NCSA “as a whole” (indivisible mission / organisation)  Reach back 

6. NATO UNCLASSIFIED6 Future Area of Responsibility EUFOR KFOR ISAF IRAQ NL. GR Norfolk Mons Brunssum Naples Northwood Heidelberg Ramstein Madrid Lisbon Izmir Sector Norfolk Sector Mons Sector Brunssum Sector Naples Sector Lisbon NCSA Squadron NCSA Detachment NCSA Support Element Stavanger Bydgoszcz Finderup Udem Larissa Poggio Renatico JALLC Monsanto La Spezia Yeovilton

7. NATO UNCLASSIFIED7 Darfur ISAF NTM-I ACTIVE ENDEAVOUR NHQS KFOR NCSA Connecting NATO …

8. NATO UNCLASSIFIED8 Federated & Integrated Architecture for ISAF SIPRNeT (US) CENTRIX S GCTF 80 nations CENTRIX S GCTF 80 nations CENTRIX S ISAF CENTRIX S ISAF ISAF Secret (FOC+, MP4, IOC, Overtask) NATO Secret NATO Secret Shared ISAF Information Domain 41 TCN National Mission Secret National Mission Secret NATO HQ Mission Secret NATO HQ Mission Secret NATO HQ Mission Secret NATO HQ Mission Secret National Mission Secret National Mission Secret National Mission Secret National Mission Secret ISAF General-Purpose Communication System

9. NATO UNCLASSIFIED9 FREE FLOW INFORMATION AND KNOWLEDGE: Network price performance (doubling every 12 months) Source:

10. NATO UNCLASSIFIED10 Globally Applied IP Networking 14 billion devices will be connected to the Internet by 2010 14 Billion 300 Million 2001200620082009201020072002200320042005 Source: / Forrester Research, February 2005

11. NATO UNCLASSIFIED11 The World Is Changing Fast Information flows freely Devices Experience Content/Applications Source:

12. NATO UNCLASSIFIED12 Cloud Computing 12

13. NATO UNCLASSIFIED13 Security Concerns 13

14. NATO UNCLASSIFIED14 Security in the Cyber World: The Social Revolution of the Internet Generation Social Networks Growth Instant Messaging Instant Messaging Social Networking Social Networking Global Collaboration Global Collaboration

15. NATO UNCLASSIFIED15 Spam Malware (viruses, worms, trojans..) Web defacements Denial of Service Active Threats

16. NATO UNCLASSIFIED16 Classified Information Leakage Vulnerabilities exposed by poor maintenance User indiscretions Active Threats (2)

17. NATO UNCLASSIFIED17 Script Kiddie Recreational Hacker Cyber Activist Organized Crime Terrorist Organization Nation-state Insider Threat The Attackers....

18. NATO UNCLASSIFIED18 Cyber Defence in NATO Commitment by Nations Effective Cyber Defence Policies NATO Cyber Defence Management Authority (CDMA) NATO Computer Incident Response Capability

19. NATO UNCLASSIFIED19 DETECT RESPONDRECOVER FEEDBACK PROTECT / PREVENT Security Activities

20. NATO UNCLASSIFIED20 Authorise – Inform – Advise - Report NATO CYBER DEFENCE: Functional View NATO wide CD Mgmt Body Policy Strategic Direction Response Teams Intrusion Detection Security Mgmt

21. NATO UNCLASSIFIED21 Cyber Defence Security Services System Hardening measures NATO-wide anti-malware support Specialist advice to projects Vulnerability Assessments (VA) and Penetration Testing NATO-wide Vulnerability Notification Training and Awareness

22. NATO UNCLASSIFIED22 Cyber Defence Security Services (2) Intrusion Detection System Mail Content Checking Website Monitoring 24/7 Incident Response Capability On and Off-line Computer Forensic Services

23. NATO UNCLASSIFIED23 NATO Core Network Voice Data VTC Land, Air & Maritime Forces Land, Air & Maritime Forces Balkan s NTMI Exercise s Service Interface Nations NATO’s CIS Network ISAF

24. NATO UNCLASSIFIED24 NCSA: NATO’s Driving Force for Efficient CIS Services Questions? NATO CIS Services Agency