Objectives

The Cyber Security Awareness seminar will allow participants to gain insights on emerging cyber challenges. The seminar will focus on threat landscape, malicious actors, challenges to securing cyberspace and building resilience in context of existing and emerging technologies (Internet of Things, Artificial Intelligence, Cloud Computing, 5G, Cryptocurrencies, etc.).

The speakers will explain the building blocks of an effective national cyber security organisation, describe potential trends in cyber threat arena, and draw from recent cyber incidents. The seminar will also share incident response and critical infrastructure protection good practices.

Deliverables

• As a result of this 1-day seminar the participants will:
• Be familiar with the general framework of digital transformation, key stakeholders, trends and challenges
• Know the threat landscape and challenges to securing cyberspace in context of emerging technologies
• Realize how to deter and build resilience, national cyber crisis management plans, national cybersecurity strategies, international collaboration
• Be aware of the fight against cybercrime from national and global perspective, incl. the main regulatory instruments
• Understand the Policy and Legal Frameworks for a safer cyberspace – UN GGE and OEWG discussions on cyber norms, Internet Governance and its relation to cyber diplomacy
• Get an intro about the services and resources the EU CyberNet has to offer

Covered topics

Disclaimer:

The seminar day will consist of four thematic blocks with the main keywords below.
The list of sub-topics given for each topic is subject to the choice of the lecturer and some sub-topics may not be covered due to time constraints.

Digital transformation and cyber threat environment

• Digitalisation and technology trends, challenges, secure digital identity, data interoperability, connectivity, data protection, digital services, cybersecurity
• Cybersecurity threats landscape, vulnerabilities, cyber-attacks, hybrid threats, information sharing, key actors
• Cybercrime key concepts, intensity and sophistication, challenges, practical examples
• The EU’s Cybercrime Policy, EU Legislation on Cybercrime, EU coordination efforts against Cybercrime, Budapest Convention, Cybercrime-related EU-funded initiatives, UN Cybercrime Convention

Cyber security ecosystem & cyber resilience 

• Minimum cyber-capacities (CIRT-s, standards, CIIP, incident management, strategy), crisis management, awareness campaigns; national vs international perspective, organisational elements of combatting cybercrime nationally and internationally
• Legislation and national strategies, trust services, NIS and cyber security act, 5G, data governance, supply chain security, cyber hygiene and awareness, disinformation, bug bounty/responsible disclosure
• EU role and players, strategic landscape (ENISA, EU Joint Cyber Unit, CERT-EU, Europol EC3)

Cyber Diplomacy

• Cyber Diplomacy Toolbox and other cyber diplomacy priorities in the EU Cybersecurity Strategy of 2020, key elements of the framework of responsible state behaviour (RSB) in cyberspace and main dilemmas of global cyber diplomacy (Internet governance, International Cyber Norms in UN GGE and OEWG, CBM, sanctions, attribution, CCB)

Scenario-based group-work

• Introduction of a fictional scenario of a cyber incident/crisis
• Compact practical group-work exercise to demonstrate a need for a pre-coordinated incident handling procedure for the escalation of a cyber incident and the complexity of management decisions therein