Aziza Al Rashdi Oman National CERT Aziza.alrashdi@ita.gov.om Oman National CERT Targeted Segments COP Framework Organizational Structures Capacity Building International Cooperation Technical And Procedural Measures Legal Measures ITU Regional Cyber Security Center Introduction: • OCERT is one of the e.oman national initiatives driven by ITA aiming at addressing cyber security risks, building local cyber security capabilities within the Sultanate of Oman, building cyber security awareness amongst public and private sector organizations, critical national infrastructure and key industries as well general public and ICT users. • OCERT offers Proactive and Reactive cyber security services as well as Training and Awareness services Legal Measures Technical and Procedural Measures International cooperation Organizational Structures Capacity Building Society Educators Parents Teens Kids Legal Measures Technical and Procedural Measures International cooperation Organizational Structures Capacity Building OCERT is leading the National COP initiative - Identification of organizational vulnerabilities - Open a channel between OCERT and all stakeholders to research, suggest, contribute and cooperate . - Develop toolkit for COP. Towards a Safe Cyber Environment Campaign – Lunched in 2009 - School Visits - Teachers Train the trainer programme - Awareness sessions dedicated for Kids - Malls and Internet café visits - First National COP Portal - National event participation Legal Measures Technical and Procedural Measures International cooperation Organizational Structures Capacity Building • • • • • Training • General Cyber Security Trainings • Kids training (School visits) • Teachers sessions (TTT) • Specialized training programs Awareness Events and Exhibitions Oman COP Portal Publication and awareness materials Kids • School Visits • Malls • Social network Parents • Parents Meetings at schools • Women Associations • Malls • Social network Educators • Train the Trainer • School Curriculum • Social network Learning through painting E.Car – Cyber Security Awareness @ a national Festival Stage shows Information Security is every one responsibility campaign - COMEX National Campaign – Mobile Security – Car tour 2013 Kids classes – Train the trainer (Teachers program) Summer School 2013 Summer School 2013 Parents training and meetings Capacity Building Awareness Sessions for employees and their children Information Security Training – People with special needs Awareness Tools: COP Booklet Awareness Tools: COP Portal Awareness Tools: COP Videos Legal Measures Technical and Procedural Measures International cooperation Organizational Structures Capacity Building Regional Arab Forum on Cybersecurity Giza-Egypt, 18-20 December 2011 ITU Regional Workshop on the Legal Aspects of Child Online Protection in the Arab Region Algiers-Algeria, 24-25 June 2012 Meeting with the European Commission Brussel- Belgium, 25-28 June 2012 Internet Governance Forum – Kuwait 2012 World Summit on the Information Society (WSIS) Hosted ITU Regional Workshop on Policy Advocacy & Capacity Building in Child Online Protection for ARB Region (30th & 31st October 2011) Legal Measures Technical and Procedural Measures International cooperation Organizational Structures Capacity Building • • • • Incidents Report Hotline ISP Filter Parental Control www.cert.gov.om Legal Measures Technical and Procedural Measures International cooperation Organizational Structures Capacity Building • The Electronic Transactions Law of the Sultanate of Oman has been issued by His Majesty’s Royal Decree 69/2008. • The Cyber Crime Law of the Sultanate of Oman has been issued by His Majesty’s Royal Decree No 12/2011. • Maximized punishment if the subject matter/victim is a juvenile less than 18 years o age. (The Law of Juvenile Liability (Accountability) issued by RD No 30/2008) www.ita.gov.om 15th December 2012 Signing Ceremony between ITA and ITU Oman is Hosting the ITU Regional Cyber Security Center for the Arab Region Operated and Managed By OCERT Official launch Ceremony 3rd March 2013 The Scope : 22 Arab States Algeria Bahrain Kuwait Lebanon Qatar Saudi Arabia Comoros Djibouti Egypt UAE Libya Mauritania Morocco Oman Somalia Sudan Syria Tunisia Yemen Palesti ne Jordan Iraq >> ITU RCC- Services Cyber security Assessment Aiming at establishing cyber security strategies and security readiness Cyber security Capacity Building Aiming at building cyber security awareness and capacities in the region Information sharing & early warning Aiming at enabling proactive security measures and minimizing the impacts of cyber threats and incidents Milestone Achieved ITU RCC Cyber Drill for the Arab Region, Muscat, Oman 22nd – 24th October 2013 The National Strategy Workshop for Child Online Protection, Muscat, Oman 27th – 28th October 2013 Participation in ITU Telecom World 2013, under the theme of “Conversation that maters”, Bangkok, Thailand 19th – 22nd November 2013 Cyber Drill ITU RCC Cyber Drill for the Arab Region, Muscat, Oman 22nd – 24th October 2013 Objectives •To enhance communication and incident response capabilities •To maintain and strengthen regional cooperation between partner countries and to ensure a continued collective efforts against cyber threats Achievement • 11 participating countries: Sudan, Egypt, Tunis, Morocco, Algeria, United Arab Emirates, Qatar, Kuwait, Saudi, Bahrain, Oman • Biggest cyber drill conducted by ITU involving 11 participating countries ITU RCC Regional Cyber Drill Muscat, Oman 22 – 24th October Milestone Achieved National Strategy Workshop for Child Online Protection Oman 27th – 28th October 2013 Objectives • Identify risks and vulnerabilities to children in cyberspace and promote national awareness on the importance of Child online protection • Introduction of the 5 pillars of child online protection national strategy framework. • Share knowledge and experience with OCERT Stakeholders to build cooperation and launch a partnership. Achievements • A successful partnership inaugurated with the stakeholders National Strategy Workshop for Child Online Protection Muscat-Oman 27th – 28th October 2013 RCC Initiative Regional Cyber Defense Summit 20th to 22nd April 2014 The National Strategy for child online protection Workshop, Bahrain Localizing Electronic Secure Collaborative Platform for Experts, ESCAPE, RCC Web Portal, Distribution of EC Council Scholarships amongst Arab countries www.cert.gov.om www.cop.gov.om