Ministry of Defence of Georgia LEPL Cyber Security Bureau Cyber Security Policy Speaker: Tamar Shapatava Address: Tsotne Dadiani Str. 30 Tbilisi, Georgia Cyber Security Bureau Cyber Security Bureau (CSB) was established in 2014 under supervision of Ministry of Defence of Georgia “Law of Georgia on Information Security” defines the roles and responsibilities in the field of cyber security: MIA - Cyber Crime; CSB - Defence Sector; DEA - Public Sector. The Goal of the CS Bureau To Build and Maintain Robust Cyber Security For Georgian Defence Sector. Cyber Security Bureau Critical Infrastructure System Subjects in Defense Sector in peace: • Critical Infrastructure System Subjects: Ministry of Defense of Georgia; Military Hospital of MoD; Cadets’ Military Lyceum under MoD; National Defense Academy; Cyber Security Bureau. • Where is Cyber Security Bureau in warfare situation? Educational Programs and Training Enhancement of Cyber Security Capabilities Legislative Initiatives TASKS Cyber Security Cyber Security PolicyPolicy • The GOAL of the document is to describe MoD’s vision how to build and maintain robust Cyber Security in the defence sphere of Georgia. This keynote document defines priorities, approaches and methods necessary for effective development and enhancement of cyber security capabilities in reaction to worldwide challenges in cyber space; • Document was elaborated by LEPL Cyber Security Bureau and signed by the Minster of Defence of Georgia on November 4, 2014; • The document was elaborated in consideration with NATO cyber experts in Brussels and other foreign and local partner recommendations; • Cyber security development is one of the integral components of the commitments taken by Georgia in NATO and European integration process; • The document has strategic significance, through which Ministry of Defence of Georgia confirms cyber security implementation importance and defines bureau as core exercising entity. Basis of the Document • The experience of partner countries in cyber security sphere; • “Strategic Review of Defence 2013-2016”; • “Threat Assessment Document of Georgia 2010-2013”; • “Cyber Security Strategy and Action Plan for Implementation of Cyber Security Strategy of Georgia 2013-2015”; • “National Security Concept of Georgia”; • “Minister’s Vision for 2013-2014”; • “National Military Strategy of Georgia”. All Necessary Components for Policy Implementation 1. Cyber security capability enhancement and cyber capabilities integration into military operations; 2. Provision of educational programs & trainings for Bureau staff in cyber security field; 3. Strong collaboration on international level - establishing bilateral and multilateral relations; 4. Promote and raise awareness in defence and private sectors; 5. Establish cyber discipline along with other disciplines in defence educational system; 6. Legislation harmonization; 7. Interagency cooperation. Cyber Security Policy Main items covered by the policy: • • • • • • • • Establishment and enhancement of 24/7 services; Rapid identification of threats and risks; Response and prevention; Crisis management through predictive, protective and recovery mechanisms; Elaboration of conceptual documents; Research and analysis of threats, risks and challenges; Educational and awareness programs and trainings; Legislative initiatives; National and international relations. Further Step after Cyber Security Policy Cyber Security Policy Related Action Plan: Second commitment against NATO – more comprehensive document providing detailed information in regard with the implementation of the objectives set forth is Cyber Security Policy. The document is under elaboration process and is expected to be finalized by the end of 2014. Cyber Security Bureau Current Activities Strengthen 24/7 CSIRT Services; Cooperation on International Level; Information Technology System Assessment, Security Systems Preliminary Audit in the Defense Sector of Georgia; Promote Technical Team Professional Development & develop awareness raising programs in Defense and Private Sectors; Participation in Annual Military Exercises Organized by MoD; Establish and Strengthen Relations with Governmental and Non-governmental Organizations. Thank you for your attention Contact Information for Cyber Security Bureau: Cell: +599 598 55 70 22 E-mail: tshapatava@mod.gov.ge Web: www.mod.gov.ge