1. DEFENCE POLICY AND PLANNING DIVISION
NATO’s Cyber Defence Efforts
Euro-Atlantic Center, Bratislava
18 June 2009
Erik Breidlid, Defence Policy and Planning Division
NATO International Staff

2. Public websites most exposed
THE THREAT
On the rise
Public websites most exposed
NATO has prime responsibilty for its own encrypted and open communications

3. Policy approved in January 2008
BACKGROUND
Protection against cyber attacks not new: creation of NATO Computer Incident Response Capability (NCIRC) in 2002
Decision to develop NATO Cyber Defence Policy followed in the wake of cyber attacks on Estonia in Spring 2007
Policy approved in January 2008
Article 5 of Washington Treaty so far not applied as result of cyber attacks

4. NATO’S CYBER DEFENCE POLICY
NATO must have the ability to support and protect Allies against cyber attack
Allies have prime responsibility for protecting their national networks
New measures to protect against cyber attack include
Single authority to coordinate national and Allied response mechanisms
Establishment of consultation mechanism
Potential support teams to nations under attack

5. Cyber Defence Concept approved in February 2008:
MILESTONES
Cyber Defence Concept approved in February 2008:
Assessment of threats, risks, vulnerabilities
Concrete counter-measures
Cooperative Cyber Defence Centre of Excellence, Tallinn, accredited in October 2008
CONOPs approved in February 2009
NATO Cyber Defence Exercises

6. COOPERATION BEYOND NATO
Guidelines for cooperation with PfP Partners and international organisations adopted in July 2008
Protection of sensitive information
Case-by-case basis/individual handling
Framework for cooperation between NATO and Partner nations agreed in April 2009: provides guidance to Partners

7. NATO’S CYBER DEFENCE EFFORTS
Questions?
Comments?