Guest Editorial for Eucrim 3-2011
Dear Readers,
One of the fastest growing needs in information management for global networks is cybersecurity and its related policies. The leading role of information technology and the growth of e-commerce have made cybersecurity essential to the economy and the operation of infrastructure systems.
In the past year, the European Network and Information Security Agency (ENISA) has been actively strengthening bridges with fellow EU agencies that are part of its “Justice, Freedom and Security” cluster. With its mission to protect information, ENISA has been called upon to provide insight, expert advice, and guidance to its fellow agencies in order to deal with the continually expanding need for cybersecurity. We are now aiming to assist in the way cybercrime is perceived and handled on the European and international legal digital frontline.
Cyberthreats are a global reality, which is developing in
increasingly rapid, sophisticated, and sinister ways, and we believe
international coordination of the networks focusing on the security
policy landscape is essential. This includes cooperation throughout
Europe as well as worldwide, both in the public and private sectors. In
many ways, it is this international dimension that distinguishes
cybersecurity from what we have referred to in the past as information
security.
The alignment of European and international legislative frameworks and
procedures as well as collaboration models will ensure adequate policy
implementation.
As announced by US Homeland Security Secretary, Janet Napolitano, and
European Commission Vice President for the Digital Agenda, Neelie Kroes,
a joint effort to deal with cybersecurity and cybercrime issues will
result in a cyber-exercise between EU Member States and the US in
2011.
Its code name was recently agreed upon: “Cyber Atlantic 2011.” ENISA
will facilitate the organisation and management of this project.
Worldwide, military communities are debating matters such as cyberwar
and cyberdefence; law and enforcement networks are analysing threats and
solutions related to cybercrime; and intelligence task forces are
concerned with cyber-espionage. In today’s information society, we are
concerned with the way in which new threats affect infrastructures,
applications, and information data related to internal markets as well
as the EU’s Information Society.
Information security involves the protection of digital information from
accidental or unauthorized access, destruction, modification, or
disclosure. Now, the ever expanding dimension of the cyber highways
means the magnitude of breaches is alarming, unregulated, and needs to
be tackled with new strategies.
One of ENISA’s tasks is to bridge the gap between policy and operational requirements; it does so by being an impartial European platform for information exchange amongst EU Member States and also with their international counterparts. The agency is working hard in the relevant fields of information security management in order to be in the unique position of brokering the way forward.
ENISA is currently supporting the establishment of the EU Institutional CERT (Computer Emergency Response Team). The level of cyberthreats for European institutions is very high, and multiple incidents have already occurred, as recently as March/April 2011 when European Commission IT experts identified an intrusion into their systems.
A joint commitment at the international level will result in a brand new and common understanding of cyber policy implementation, ensuring consistent cross-border defence mechanisms for a safe and sound European digital society.
Prof. Udo Helmbrecht
Executive Director of ENISA