Computer Emergency Response Team (CERT)
Srinivas (Sunny) Chendi Senior Advisor Policy and Community Development
26 Nov 2018 @APT PRFP-11, Apia, Samoa Real World Safety
Accident Theft Vandalism Negligence
Natural Disaster Ransom Fraud
2 Safety Ecosystem (Fire)
Police Health Fire
Regulation Industry Education
3 Incident Response Capabilities
4 Internet Safety
Accident Theft Vandalism Negligence
Natural Disaster Ransom Fraud
5 Safety Ecosystem (CERT)
CERT Police Health
Regulation Industry Education
6 Incident Response Capabilities
7 Circles of Trust
Trusted Circle
Introduction
8 Circles of Trust – intersection
CERT LEA
APCERT community FIRST etc
9 CERT Establishments in the Pacific - 2017 • APNIC was approached to promote and support CERT/CSIRT establishment – provide CERT advice, training and technical support • APNIC worked in Fiji, Papua New Guinea, Tonga, Vanuatu and Solomon Islands – mentoring, technical training and assistance, and community engagements. – Preliminary CERT establishment workshops have been held in Papua New Guinea and Vanuatu • Provided mentoring to Tonga CERT – attending regular conference calls and technical assistance and advice • Tonga CERT and APNIC jointly hosted a one-day cybersecurity workshop for system administrators • APNIC coordinated closely with APCERT, CERT-Australia, the ITU and other national CERTs
10 CERT Establishments in the Pacific - 2018 • In January, APNIC attended the launch of PNG CERT – Also delivered a two-day technical workshop as part of the launch • In April, a two-day CERT engagement session was organized in Samoa • In May, the APNIC Pacific CERT Workshop was conducted in Tonga with participants from multiple Pacific economies, to support CERT development in the Pacific • At APNIC 46, the second Regional Pacific CERT Workshop was conducted in Noumea, New Caledonia – participants also attended the Nouméa 2018 FIRST TC • In September, APNIC provided a three-day technical assistance and support for PNG CERT in Port Moresby • A network security workshop was organized in Port Moresby in October • In October, APNIC helped coordinate a security and system administration workshop for Tonga CERT – workshop was conducted and supported by the FreeBSD Foundation
11 CSIRT Workshop Tonga 1st Regional CSIRT Training (Tonga)
13 CSIRT Engagement Workshop in Samoa 2018 CERT Vanuatu Launch – 2018 2nd Regional CSIRT Workshop, New Caledonia
16 17 Cybersecurity Capacity for Non-Technical People • APNIC security specialists have also conducted several workshops for technical and non-technical people – Samoa, Solomon Islands, Tokelau, Tonga, Tuvalu and Vanuatu • Inclusion of non-technical people, particularly managers, policymakers, and law enforcement agencies helped drive creation of – Pacific Cyber Security Operational Network (PaCSON), which held its first meeting in Brisbane, Australia in May 2018 – A project led by the ITU, the Global Cyber Security Capacity Centre (GCSCC), and the Oceania Cyber Security Centre (OCSC), which is auditing cybersecurity maturity in the region – Workshops for system administrators to help raise security awareness and education (which APNIC has been involved in facilitating)
18 In Conclusion
• A CERT is a multistakeholder process, engaging its community directly • A CERT is part of a bigger Internet multistakeholder community • Expertise must be obtained, and maintained • Trust and neutrality are PARAMOUNT’ • Start small, with a long-term view • Start now!
19 Thank you! [email protected]
20