national cybersecurity strategy · 2019-07-11 · protecting critical assets of the uae in 9...
TRANSCRIPT
![Page 1: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/1.jpg)
@THEUAETRA
www.tra.gov.ae
National
Cybersecurity
Strategy
![Page 2: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/2.jpg)
@THEUAETRA
www.tra.gov.ae
Rationale for a
Cybersecurity strategy
![Page 3: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/3.jpg)
Worldwide has doubled in the past year, resulting in a significant cost to the global economy
The number of cybersecurity Incidents
3
2x Number of cybersecurity incidents globally
42%Increase in number of reported data breaches globally
Annual global cost of cybercrime to the
Average total cost of a data breach
($USD Billion, 2014-2017)
(2016-2017)
(2015-2017)
($USD Million, 2017-2018)
608
3.9
![Page 4: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/4.jpg)
The impact of cybersecurityincidents extends beyond economic losses
4
Impact onServices
Direct FinancialImpact
Client Impact ReputationalImpact
![Page 5: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/5.jpg)
To develop the National CybersecurityStrategy for the UAE, we leveraged
3 key sources of insights
5
Benchmarked 10 leadingcybersecurity ecosystem
Analysed +50 globalindices and publications
Global industryreports
Cybersecurityexperts
10 benchmarkcountries
Global panel of experts
with deep knowledge oncybersecurity topics
![Page 6: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/6.jpg)
Our aspirations for the
National Cybersecurity Strategy
![Page 7: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/7.jpg)
7
Our vision for UAE’s National Cybersecurity strategyTo create safe and resilient cyber infrastructure in the UAE that enables
citizens to fulfil their aspirations and empowers businesses to thrive
![Page 8: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/8.jpg)
Our vision will impact all segments of the society
8
Provide confidence to citizens
to securely participate in the digital world
Celebrate contributions to innovation in cybersecurity
Foster a culture of entrepreneurship in cybersecurity
Enable SMEs to safeguard themselves
against most common cyber attacks
Protect critical information infrastructure assets
of the country
Build a world-class cybersecurity workforce in the UAE
Aspirations
![Page 9: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/9.jpg)
Strategy pillars
![Page 10: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/10.jpg)
To achieve these aspirations, we will mobilize the wholeecosystem to deliver ~60 initiatives across 5 pillars
10
Address all types of cybercrimes
Secure existing and emerging technologies
Support protection of SMEs
Cybersecurity laws& regulations
Support startups and promote R&D in cybersecurity
Develop cybersecurity capabilities
Drive citizen cybersecurity awareness
Encourage excellence in cybersecurity
Vibrant cybersecurityecosystem
Single point of contact for victims of cyber incidents
Standardized severity assessment and agency mobilization plan
Cross-agency information sharing
National CyberIncidentResponse plan
Identify critical assets in the UAE
Establish world-class risk management standards
Create robust processes for reporting, compliance and response CIIP program
Public sector
Private sector
Academia
International consortiums
Partnerships
![Page 11: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/11.jpg)
Cybersecurity laws & regulations
![Page 12: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/12.jpg)
Designing a comprehensive cybersecurity legaland regulatory framework
12
Online Child Protection Laws
Procedural Laws
Substantive Laws
Cloud Services Artificial Intelligence
IoT BlockchainDigital Signatures
Laws
Existing and EmergingTechnologies
Will be achieved through a comprehensivelegal and regulatory frameworkOur aspirations
Create legal frameworkto addressall types of cybercrimes
Build regulatory frameworkthat will secure existing andemerging technologies
Data Protection and Privacy Laws
![Page 13: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/13.jpg)
Supporting protection of SMEs in the UAE
13
Provide guidelines to protectagainst most common cyber threats
Our aspirations
Offer incentives to implementthe recommended guidelines
Establish support systems to enableSMEs to implement guidelines
Develop essential cybersecuritystandard for SMEs
Will be achieved through3 key initiatives
Mandate Cybersecurityimplementation certification forgovernment suppliers
Build one-stop portal for SMEs toenable SMEs to implementthe standard
![Page 14: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/14.jpg)
Vibrant cybersecurity ecosystem
![Page 15: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/15.jpg)
Enabling the ecosystem to capture the hugecybersecurity opportunity
15
Drivingdemand
Ease-of-doingbusiness
Culture andmindset
Access tofinancing
Businesssupport
Educationand skilldevelopment
Innovation andtechnology adoption
Tap into the AED 1.8bnUAE cybersecurity market
Our aspirations
Capture the AED 18bn MENAcybersecurity market
Will be achieved through24 initiatives across 7 pillars
![Page 16: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/16.jpg)
Developing capabilities of +40,000 cybersecurity professionals
16
Encourage professionals andstudents to pursue a career incybersecurity
Individuals
Trainingproviders
Our aspirations
Develop necessary cybersecuritycapabilities to meet aspirations ofthe country
Foster a vibrant ecosystem ofcybersecurity training providers
7 initiatives
Will be achieved through12 initiatives
5 initiatives
![Page 17: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/17.jpg)
Creating cybersecurity citizen awareness in the UAE
17
Enable citizens to realizethe risks related to the cyberspace
Children & Teens
College students
Professionals
Homemakers & Senior citizens
Our aspirations
Influence citizen mindsets topractice cyber hygiene
Encourage institutions to activelyspread cyber awareness
Will be achieved through 12 initiatives
targeting citizen segments
People with determination
![Page 18: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/18.jpg)
Rewarding excellence in cybersecurity througha national awards program
18
Encourage organizations to drivecybersecurity programs
Entities
Individuals
6 awards
6 awards
Our aspirations
Inspire entrepreneurs to innovatein cybersecurity
Support cutting-edge researchundertaken by academic institutions
Will be achieved through 12 initiativestargeting citizen segments
Motivate students to pursuecybersecurity careers
![Page 19: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/19.jpg)
National Cyber Incident Response plan
![Page 20: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/20.jpg)
Establishing a robust National Cyber Incident Response plan toenable swift and coordinated response to cyber incidents in the UAE
20
Streamline cybersecurity incidentdetection and reporting
Single Point of Contact
Advisories to protectagainst threats
Active Monitoring forcyber threats
Cross-Agency IntelligenceSharing
Establish standardized severityassessment matrix to mobilize therequired support
Build world-class capabilities torespond to all types ofcyber incidents
Will be achieved through4 key initiativesOur aspirations
![Page 21: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/21.jpg)
CIIP program
![Page 22: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/22.jpg)
Protecting critical assets of the UAE in 9 sectors
22
To safeguard assets in 9 critical sectorsof the UAE:
Our aspirations
Identify critical sectors,assets and associated risks
Will be achieved through a robustCIIP program
Establish world-class riskmanagement standards
Implement robust processesfor reporting, complianceand response
Food &Agriculture
Electricity &Water
Finance &Insurance
GovernmentEnergy ICT
Emergencyservices
TransportationHealthServices
![Page 23: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/23.jpg)
Partnerships
![Page 24: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/24.jpg)
Mobilizing the whole ecosystem through localand global partnerships
Partnerships are a core enabler in jointly achieving cybersecurity goals and ambitions
24
Public sector Private sector
Academia International consortiums
Types ofpartnerships
![Page 25: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/25.jpg)
Governance
![Page 26: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/26.jpg)
For successful implementation of the National Cybersecuritystrategy, we will establish multiple governance vehicles
26
9 sector committees to implementthe CIIP program…
And 2 vehicles for the NationalIncident Response plan
Take strategic decisionsrelated to the NationalIncident Responseprogram
Enable intelligence sharingbetween agencies forbetter visibility overcybersecurity threats
NationalIncident
ResponseCommittee
(NRC)
CyberIntelligenceUnit (CIU)
Food &Agriculture
Electricity &Water
Finance &Insurance
GovernmentEnergy ICT
Emergencyservices
TransportationHealthServices
![Page 27: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/27.jpg)
TRA will monitor progress and impact of the National Cybersecuritystrategy through ~20 clearly defined key performance metrics
27
Internal TRA data – Data outputsfrom TRA initiative teams, aeCERT,etc.
1
2 Strategic KPIs
National Cybersecurity strategyProgress update
17 Operational KPIs
Collate data frommultiple sources
Ecosystem data- CIIP sectorcommittees, NRC, CIU, lawenforcement agencies, etc.
Global data - Reports, threatintelligence, etc.
Will enable TRA to track the progressof the strategy
2
3
![Page 28: National Cybersecurity Strategy · 2019-07-11 · Protecting critical assets of the UAE in 9 sectors 22 To safeguard assets in 9 critical sectors of the UAE: Our aspirations Identify](https://reader030.vdocuments.us/reader030/viewer/2022040920/5e9851511533056b4b31afc5/html5/thumbnails/28.jpg)
www.tra.gov.ae