19
www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello @itu.int

Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst [email protected]

Embed Size (px)

Citation preview

Page 1: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

www.itu150.org

Cybersecurity @ ITU

Carla LicciardelloPolicy [email protected]

Page 2: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Where are we coming from…Specialized agency of the UN for telecommunications and ICTs

Page 3: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Some more info about ITU

Page 4: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

What we are talking about ?

Page 5: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Everyone if affected

Page 6: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

6

The importance of Cybersecurity• Security is about subjectively perceived threats/risks. • From industrial age to information societies

- Increasing dependence on the availability of ICTs- Number of Internet users growing constantly (now 40% of world’s population)

• Statistics and reports show that cyber-threats are on the rise- The likely annual cost to the global economy from

Cybercrime is estimated at more than $455 billion (Source: McAfee Report on Economic Impact of Cybercrime, 2013).

• Developing countries most at risk as they adopt broader use of ICTs

- E.g. Africa leading in Mobile-broadband penetration: almost 20% in 2014 - up from less than 2% in 2010 (Source: ITU ICT Statistics)

• Need for building cybersecurity capacity- Protection is crucial for the socio-economic wellbeing of a

country in the adoption of new technologies Source: Symantec 2015 Internet Security Threat Report

Page 7: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

7

Handling Cyber Security – over the years

Ministry of Telecommunications/I

CTs

Ministry of Foreign Affairs

Ministry of Interior

Ministry of Telecommunic

ations/ICTs

Ministry of Education

Ministry of Defense

Ministry of Health

Ministry of Finance

Page 8: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

Multitude of “Global” processes/forums: Sample Snapshot

8

UN Governmental

Group of Experts

UNGA Discussions in

various committees

The London process

Wuzhen Summit

Internet Governance

Forum

Global Forum On Cyber Expertise

East West Institute Annual

Summits

World Economic

Forum processes

UNODC forums

UNODC forums

UNESCO forums

HRC forumsOHCHR forums

ITU Study Groups and

forums

Annual Garmish Forum

UN Governmental

Group of Experts

IAEA forums

ISO/IEC

OASIS

Page 9: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

WSIS Action Line C5 : Building confidence and security in the use of ICTs

2003 – 2005WSIS entrusted ITU as sole facilitator for WSIS Action

Line C5

2007

ITU launched the Global Cybersecurity Agenda (GCA). A framework for international cooperation in

cybersecurity

9

Page 10: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

ITU’s Role as a Technical Agency – Building Trust in Networks

10

Neutral Global Convener Technical Assistance / Capacity Building

Developing Technical Standards

Serving as a Global Knowledge Base

Page 11: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

11

Legal Measures

- Legal Measures Strategy

- Adequate and harmonized legal frameworks

Technical/Procedural Measures- National Cybersecurity

Goals and Framework- International

Cybersecurity Standards

- Secure Government Infrastructure

- Global Technical Collaboration

Organizational Structures

- Government Coordination

- National Focal Point- National CIRT- Public-Private

Partnerships

Capacity Building

- Cybersecurity Skills and Training

- Culture of Cybersecurity

- Cybersecurity Innovation

International Cooperation

- Enhanced collaboration (multistakeholder, Bi/Multi lateral)

- Inter-Agency Collaboration

Holistic Approach- Five areas of action

Page 12: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

12

Page 13: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

13

• CIRT assessments conducted by ITU in 65 countries

• CIRTs currently in operation and established with the support of ITU in 11 countries

• CIRT projects under execution with ITU in 4 countries

• 11 cyber drills conducted by ITU with participation of over 100 countries

ITU National CIRT Programme: National CIRTs - first line of cyber-response

ITU is working with Member States to facilitate the deployment of capabilities to build capacity at

national and regional level, in addition to establishing National Computer Incident

Response Teams (CIRTs).

92 Countries with no CIRTs

Page 14: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

ITU Study Groups A platform for information exchange between ITU Member States

and Sector Members (industry, academia etc.)

ITU-T Study Group 17 : Security Standardization work on cybersecurity; Over 300 standards (ITU-T

Recommendations) relevant to security

ITU-T Study Groups 5 and 20 Smart Cities & IoTs and Security

ITU-D Study Group 2 Question 3/2: Securing information and Communication networks: Best practices

for developing a culture of Cybersecurity 14

Page 15: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Tools and Guidelines

Capacity Building and Education

Laws and LegislationsTechnology Solutions

Awareness and Advocacy

Children’s use of the internet*• More than one in three 3-4 year-olds use the internet• 91% of children live in households with internet access • A greater proportion of children aged 12-15 own smartphones than adults• Risks and evidence: Cyberbullying, Sexual images/sexting, Grooming and Harmful content and much more…

Small group of entities

Working togetheron project-basis

Working togetherto maximize impact

today

• Building the partnership network

• Joining forces to develop and implement an action plan

• Setting the global vision for child online protection• Enhancing synergies to

achieve our goals

The Child Online Protection (COP) Initiative

Child Online Protection (COP) Initiative

* OECD countries

34 Partners …

Page 16: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

16

Best practices in cybercrime legislations, joint technical assistance to Member States, information sharing

Tap into expertise of globally recognized industry players and accelerate info sharing with ITU Member States

Building a global multistakeholder partnership

Collaboration with ABI Research – The Global Cybersecurity Index (GCI)

Collaboration with FIRST – To share best practices on computer incident response, engage in joint events, facilitate affiliation of national CIRTS of Member States

Collaboration with Member States – Regional Cybersecurity Centres

Founding Member and Co-initiator of CSIRT Maturity initiative

Joint activities to combat the proliferation of SPAM

Capacity building initiatives, joint consultations and more.

Collaboration on Study Group 2 Question 3 and in Cyberdrills

8 JUNE 2015 : MoU to jointly enhance Cybersecurity capacity in the ECOWAS region

Page 17: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Committed to Connecting the World

UN-wide cooperation mechanisms

UN-wide Framework on Cybersecurity and Cybercrime (2013)

Developed by ITU and UNODC together with 33 UN Agencies. Enables enhanced coordination among UN entities in their response to

concerns of Member States regarding cybercrime and cybersecurity

UN System Internal Coordination Plan on Cybersecurity and Cybercrime (2014)

Developed through close coordination of different UN agencies/bodies building on the UN-wide Framework on Cybersecurity and Cybercrime upon request by the UN Secretary-General, Mr. Ban Ki-moon

Designed as a guide to improve the internal coordination activities of the UN system organizations on related matters

17

Page 18: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

Are we far from this ?

Page 19: Www.itu150.org Cybersecurity @ ITU Carla Licciardello Policy Analyst Carla.licciardello@itu.int

19

Thank [email protected]

www.itu.int/cybersecurity www.itu150.org

itu150.org