Daisy FrancisManager, International Cooperation18 June 2010

Strengthening Cooperation Between Nations to Better Prevent and Defend Against Cyber Threats

Issues and Challenges

2

• Cyber laws between nations are not harmonised

• Many developing nations do not have effective mechanism in handling cyber incidents

• Cybersecurity is a dynamic field – lack of information security professionals and skills

• Evolving cyber threats - The threat landscape has evolved

– Attacks are focused and targeted

– Attacks are motivated by financial gains

– Criminals capitalising on internet technology

• Lack of concerted effort - attacks are borderless and there is a lack of cooperation to effectively combat cyber threats

Role of IMPACT

4

IMPACT

The world’s foremost cybersecurity alliance.

IMPACT brings together governments of the world, industry and the academia to

operationalise cybersecurity initiatives across ITU’s 191 Member States.

Global Coalition

5

IndustryExperts

AcademiaInternationa

l Bodies

191 Partner Countries

ThinkTanks

Cybersecurity services

Expertise Technology Skills Resources Experience

IMPACT’s Global Alliances

6

Partnership with ITU

ITU’s Global Cybersecurity Agenda (GCA) – UN-backed framework for international cooperation to enhance confidence and security in the information society.

IMPACT becomes the physical home of the GCA. IMPACT to operationalise cybersecurity initiatives

across ITU’s 191 Member States.

Global Cybersecurity Agenda (GCA)

7

GCA

Capacity Building

Legal Measures

Organisational Structures

International Cooperation

Technical & Procedural Measures

Cybersecurity Services Deployed

8

No. Partner Countries1 Afghanistan2 Albania3 Andorra4 Austria5 Bulgaria6 Burkina Faso7 Cape Verde8 Costa Rica9 Côte d'Ivoire

10 Democratic Republic of Congo11 Egypt12 Gabon13 Ghana14 Israel15 Italy16 Jordan17 Kenya18 Lao PDR19 Malaysia20 Mauritius21 Moldova

No. Partner Countries22 Montenegro23 Morocco24 Nepal25 Nigeria26 Oman27 Philippines28 Poland29 Romania30 Saudi Arabia31 Serbia32 Seychelles33 Sudan34 Switzerland35 Syrian Arab Republic36 Tanzania37 Thailand38 Uganda39 UAE 40 Vatican41 Vietnam42 Zambia

Cybersecurity Services Deployed

9

IMPACT International Advisory Board

10

Dr. Hamadoun Touré Secretary General of International Telecommunications Union (ITU)

Prof. Fred Piper Cryptologist, Group Founder of the Information Security at Royal Holloway, University of London

Eugene Kaspersky Founder and CEO of Kaspersky Lab

John W. Thompson Chairman of Symantec Corporation

Steve Chang Founder and Chairman of Trend Micro

Mikko Hypponen Chief Research Officer of F-Secure

Ayman Hariri Chairman of Oger Systems

4 Pillars of IMPACT

12

Global Response Centre

• Network Early Warning System (NEWS)

• Collaboration with global industry partners

• Electronically Secure Collaborative Application Platform for Experts (ESCAPE)

• Key experts and personnel from partner countries (law enforcement, regulators, country focal, cybersecurity experts, etc)

13

Centre for Training & Skills Development

• Specialised training programs

• Specialised seminars & workshops

• Scholarship programs – partnership with global certification bodies (SANS & EC-Council)

• Global certification courses (SANS, EC-Council & (ISC)2)

14

Centre for Security Assurance & Research

• Security Assurance:

• IMPACT Government Security Scorecard (IGSS)

• CIRT-Lite (Computer Incident Response Team)

• Professional services (vulnerability assessment, security audits, etc)

• Research:

• Facilitation & coordination of cybersecurity research through IMPACT Research Online Network (IRON)

15

Centre for Policy & International Cooperation

• Policy:

• Harmonisation of policies

• Policy advisory & best practices

• International cooperation:

• Partner country coordination

• Partnership and collaboration with industry, academia & international organisations

IMPACT’s Key Partners

17

IMPACT’s Key PartnersIndustry

18

IMPACT’s Key PartnersInternational Organisations

Academia

200+ universities in Africa

19

IMPACT’s Key PartnersChild Online Protection

IMPACT’s Activities

21

Cybersecurity WorkshopIMPACT conducted cybersecurity workshop for East Africa and West Africa

East Africa - Kenya, Tanzania, Uganda and Zambia

Session conducted in Kampala, Uganda

West Africa - Burkina Faso, Côte d'Ivoire, Ghana, Nigeria, Mali and Senegal

Session conducted in Ouagadougou, Burkina Faso

22

Training & Skills DevelopmentIMPACT-Microsoft Network Forensics & Investigation Course – Brunei Darussalam

Closed session for law enforcement agencies – 5 countries

Class conducted for 22 participants from 5 countries

IMPACT Network Forensics Course – IMPACT Global HQ, Malaysia

23

Training & Skills DevelopmentIMPACT-SANS IPv6 Security Training at IMPACT Global HQ, Malaysia

Training conducted by Dr Johannes Ullrich (SANS) – 72 participants

24

Partner EngagementIMPACT-Trend Micro seminar on “The Botnet Storm: Challenges & Global Cooperation”

Session conducted by Raimund Genes, CTO of Trend Micro

IMPACT-Kaspersky Seminar on Formulating Effective Global Counter-Phishing Efforts

Session conducted by Michael Molsner, Malware Analyst, Kaspersky Lab, Japan

25

Partner EngagementIMPACT-Microsoft Critical Information Infrastructure Protection Seminar at IMPACT Global HQ, Malaysia

Session conducted by Angela McKay & Paul Nicholas – Microsoft Corporation, US

26

Speaking Engagements

IMPACT speaks at global events to share experiences and knowledge in cybersecurity

IMPACTJalan IMPACT63000 CyberjayaMalaysia

T +60 (3) 8313 2020F +60 (3) 8319 2020E contactus@impact-alliance.orgimpact-alliance.org © Copyright 2010 IMPACT. All Rights Reserved.

Thank You