cyber risk management: estonia and the digital society€¦ · #16 ease of doing business . world...

32
Cyber Risk Management: Estonia and the Digital Society Klaid Mägi and Lauri Luht RIA Cyber Security branch

Upload: others

Post on 21-Sep-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Cyber Risk Management: Estonia and the Digital Society Klaid Mägi and Lauri Luht RIA Cyber Security branch

Page 2: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

ESTONIA IN FACTS

OECD #1 Tax Competitiveness

Freedom House #2 Internet Freedom

EUROPEAN COMMISSION #1 EU Digital Economy and Society Index

FREEDOM HOUSE #9 Index of Economic Freedom

UNITED NATIONS #15 E-Government Index

WORLD BANK #16 Ease of doing business

WORLD ECONOMIC FORUM #22 Networked Readiness Index

Page 3: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Simple Everything can be done online except for marriage, divorce and selling your house

ONCE-ONLY PRINCIPLE

NO LEGACY

DIGITAL BY DEFAULT

SINGLE POINT OF ENTRY

USER FRIENDLINESS

OMNI-CHANNEL SERVICES

OPEN STANDARTS

24/7

Page 4: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Easy e-Solutions simplify and benefit our lives.

E-CABINET: 5 HOUR MEETINGS TO 30

MIN

TAXES DECLARATION TAKES 3 MINUTES

99% OF STATE SERVICES AVAILABLE

ONLINE

BANKING IS ONLINE 99.8%

PAPER-FREE ADMINISTRATION

INVISIBLE GOVERNANCE

EASY BUSINESS IN 18 MINUTES

I- VOTING 30% COME ONLINE

E-TAXES 98% ONLINE

E-PRESCRIPTIONS 99%

Page 5: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Time-efficient electronic solutions save money DIGITAL SIGNATURE SAVES 2% OF GDP

PER YEAR

50 TIMES MORE EFFICIENT POLICE

INTERNET VOTING IS 2.5 TIMES CHEAPER

1/3 LESS QUEUES IN THE HOSPITALS

SAVING TIME: 1 WEEK PER CAPITA

Efficient

Page 6: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Everywhere

Broadband in 88% of homes, 100 MB by 2018 3G, 4G cover the whole country, 5G pilot in 2018 WIFI areas all around

Internet is a social right

Page 7: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online
Page 8: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online
Page 9: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

IDENTIFICATION

TRAVELLING

DIGITAL

SIGNATURE

STATE SERVICES

HEALTHCARE

VOTING

BUSINESS, BANKING

DRIVING LICENSE

PUBLIC TRANSPORT

LOYALTY CARD

e-Identity It all relies on collaboration through engagement.

ID-card penetration is over 94% Mobile-ID

Page 10: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online
Page 11: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

e-Residency Become an e-Resident like >10 000 others

Page 12: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Future The future starts with E

SMART CITY

X-ROAD THROUGH EUROPE

E-RESIDENCY

INVISIBLE GOVERNMENT

CROSS-BORDER COOPERATION

REAL-TIME ECONOMY

INDUSTRY 4.0

DATA EMBASSY

Page 13: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Technology is never perfect.

CYBER THREATS

DATA PROTECTION

RIGHT BALANCE

Page 14: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

5 Myths of Cyber Security • Cybersecurity Is Unlike Any Challenge We Have

Faced • Every Day We Face “Millions of Cyber Attacks” • This Is a Technology Problem • The Best (Cyber) Defense Is a Good (Cyber)

Offense • “Hackers” Are the Biggest Threat to the Internet

Today Peter W. Singer and Allan Friedman (http://www.wired.com/2014/07/debunking-5-major-cyber-security-myths/ )

Page 15: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Defend your values!

Page 16: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Critical Infrastructure and PPP “ICT” dependency >95% >40% >20%

Page 17: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Solution: Smart & proactive cyber security

• Monitoring, incident analysis, reporting

• Situational awareness • Preparedness • Smart risk management –

smart decision-making

Page 18: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

The Future of Cyber Security • Complexity growth → Challenges • Growing dependency (& interdependencies) • New “Pearl Harbour” will happen (K. Alexander) • Isolation creates stagnation

• Building the “Collective Brain”

Page 19: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Information System Authority (RIA)

- Central e-government systems - Coordination of national cyber security - Funds for IT development 2016

Page 20: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

RIA-OAS MoU 2014

Page 21: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Colombia: 2014 and 2015 • Developing cyber policy

Page 22: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Dominica: 2014 • Technical training, supporting CSIRT development

Page 23: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Trinidad ja Tobago: 2014

• National cyber security center development support

Jamaica: 2014 • Law enforcement training

Page 24: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Tallinn 2015: Experts from Americas • Training for Central and South America cyber

experts and introducing Estonian set-ups • CSIRT training

Page 25: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Peru 2015: Risk management support

Page 26: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Washington DC 2015: OAS and FIRST cooperation

• OAS–FIRST TC

Page 27: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Mexico 2015: Cyber policy support

Page 28: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Visit of Estonian President 2015

Page 29: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

2016 • St Kitts and Nevis – risk management • Dominican Republic – cyber strategy support • OAS high level experts in Tallinn

Page 30: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

Trinidad and Tobago 2016: CARICOM support

• Regional CSOC/CSIRT development

Page 31: Cyber Risk Management: Estonia and the Digital Society€¦ · #16 Ease of doing business . WORLD ECONOMIC FORUM #22 Networked Readiness Index. Simple . Everything can be done online

– Economic development – Transparency through

efficiency – Modernization by Government

innovation and efficiency

Why digitalization matters?