digital security - the impact on business and it

Digital security

Elly van den Heuvel

General Manager, NCSC

27 May 2014

2

Rome 2005

3

Rome 2013

4

5 27 May 2014

6

Vision National Cyber Security Strategy II The Netherlands, together with partners, are committed to create a secure digital domain in which the opportunities of digitalisation are used, threats are confronted an fundemental rights are protected.

Developments

7

Security Space Crime

• Broad approach to “space” means triangle of:

- Security

- Freedom

- Economic/social benefits

• A more international approach and increased

number of actors

• Need for a comprehensive governance model

8

Citizen

Private party

Government

Police

AIVD

Defense

NFI

National

partners

ISP’s

NCC

ISAC’s

Vendors

Academia

Regulators

Insight

Perspective

for Action

Expertise

& Advice

Monitoring

& Response

Public/Private

Partnership

Critical Infrastructure

10

NCSC

Stake-

holders

Govern-

ment

International

Decentralised

government

Vital

Sectors

NCTV

Water

ISAC

Nucleair

ISAC

Multi-

nationals

ISAC

Harbour

ISAC

Energy

ISAC

FI ISAC Telecom

ISAC

Transport

ISAC

Healthcare

ISAC

Insurance

ISAC

Infra

MKB-

Nederland

Comm.Vit.

Infrastruct.

Checkpoint

Fox-IT

Considerati Computale

AIVD – MIVD

Politie

VNO/NCW

Bits of

Freedom

Liaisons

EU-Fin.

ISAC National

government

Cyber

Security

Council

Thuiswinkel

.org

Target audience

Surroundings

ICT-office Experts

McAfee

Hewlett-

Packard NL Ordina

NU.nl

Security.nl

Tweakers

WebWereld

PvIB

Bel.dnst.

CERT

DGOBR ICCIO

Sb.comm.

IB

THTC

SSC-ICT

(BZK-IM)

CERT.EU EGC ENISA

EU DG Europol

Interpol

NATO-

IBM

Banks

VNG

DNB

Equens

Betaal-

verenig.

NVB

Koplopers

Surf-

CERT

KPN-

CERT

CA’s

ISDN

CIBO

CIP

Water-

schaphs.

IPO-

provincien

KING-

IBD

Taskf.

BID

Unie van

Watersch.

Nor-

CERT

ACM AIVD

BuZa

CIBG

Def.

CERT

Ivent

I&M MIVD

NBV

THTC

NFI OM

Taskf.

Cyber

VWS

EC3

27 May 2014

MSP

ISAC

BT

(Shortlisted)

Networking

11 27 May 2014

• National Detection Network

• National Response Network

• National Expertise Network

National Detection Network

12 27 May 2014

Trends in Cybersecurity

13 27 May 2014

14 27 May 2014

Where to go from here

15 27 May 2014

Three requirements to move forward

16 27 May 2014

1. Commitment from upper level management

2. Leadership by organisations and individuals

3. Smart coalitions for public/private participation

That includes you!

17 27 May 2014

18 27 May 2014

27 May 2014

Cloud & security

20 27 May 2014

• Laws and regulations

• Process and system control

• Data protection

• Relations management

• Availability

• User management

• Incident management

• Back-up and recovery

• Transparency!