1. Peter Burnett Head of Information Sharing National Infrastructure Security Co-ordination Centre www.niscc.gov.uk

2. Background Late 70’s – Programming Evaluation & Certification, CLEFs Compusec, Infosec CNI/CIP Programme CERT Management EU & Intnl Liaison

3. EU Involvement Support DTI (EISO, CSTF) EWIS workshops WISE bid DDSI work CASES CERTs, CSIRTs & WARPs

4. UK CERT Involvement UNIRAS - Govt CERT est. 1992 Incorporated into CIP organisation Links to US/CAN/AUS/NZ European Govt CERTs Forum Participation in TF/CSIRT, FIRST Information Sharing

5. UK Initiatives UK CERTs forum Encouraging new CERTs in UK Encouraging Information Sharing Bodies –SAINT, ISACs Support for EU projects (CASES, EWIS etc) Conceive & promote WARPs –Warning, Advice & Reporting Points –Linked to CyberHood Watch (IAAC) Information Sharing

6. Objectives Increase Awareness, Education : –general e-environment (reduce Viruses, Worms, Trojans, DDoS etc) Provide useful and timely warnings –To small communities (including citizens & SMEs) Gather incident reports –Crime reports (pass on only with consent) –Statistics, Trends –Attack detection Information Sharing

7. Warning, Advice & Reporting Points (WARPs) - Functions Issue Alerts & Warnings from CERT/WARP network (and CASES) Act as helpdesk for Advice on Internet/Infosec problems Gather, sanitise, and share Incident Reports (with CERTs, WARPs, CASES) Geared to SMEs, small organisations & Citizens Information Sharing

8. The WARP model e-COMMUNITY WARP Information Sharing Network Incident Reports Problems Warnings Advice Trade association, interest group, local authority, industry sector

9. Information Sharing Network NISCC/ UNIRAS ISACs CIP orgs Other Sources CSIRTs WARPs CASES

10. WARPs Approach Internet-based –Distributed, User-oriented, Devolved, Cooperative Small is beautiful –In touch with community, Builds trust & confidence Builds on successful ideas –Neighbourhood Watch, Citizens Advice Bureaux A cost effective alternative to CERTs/CSIRTs Fits into most Information Sharing models Information Sharing

11. CASES Cyber-Awareness and Security Enhancement Structure A Coordinating Centre to encourage dissemination of Warning & Awareness materials via National Nodes

12. NCP Dissemination NCP CASES Dissemination National Contact Point (Node)

13. CASES – Transnational approach Builds on elements already there (CSIRTs, WARPs, e- Platforms) Provides Coordination i.e. Cooperation (not control) Aids e-Europe Programmes (confidence) Promotes new national nodes (where they don’t exist) Stimulates national Dissemination network, WARPs Complements R&D work (identifies needs) Provides test-bed CASES

14. WARP e-COMMUNITY WARP CASES e-COMMUNITY National Node

15. Plain Sailing from now on ?

16. No such thing as Plain Sailing !

17. Thank You