the role of civil society in the …...low level of cybersecurity readiness lack of trust –misuse...

12

Cissé Kane, PhD President African Civil Society On the Information Society (ACSIS) ITU-ATU Workshop on Cybersecurity Strategy in African Countries Khartoum, Republic of Sudan, 24 – 26 July 2016 THE ROLE OF CIVIL SOCIETY IN THE IMPLEMENTATION OF CYBERSECURITY PROGRAMS IN AFRICA

Upload: others

Post on 21-May-2020

1 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

Cissé Kane, PhD

President African Civil Society On the Information Society (ACSIS)

ITU-ATU Workshop on Cybersecurity Strategy in African Countries Khartoum, Republic of Sudan, 24 – 26 July 2016

THE ROLE OF CIVIL SOCIETY IN THE IMPLEMENTATION OF CYBERSECURITY PROGRAMS IN AFRICA

Page 2: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

Cybersecurity in General Strategic and vital component (critical Internet

infrastructure, health, financial sector, military, intelligence, factories, etc.)

Social component (spam, privacy, online protection, encryption)

Folk and emotional component (cyber attackworlwide, big one…)

Key players (ITU-WSIS-GCA, UN-CGE, USA, Russia, China, Germany, IGF, Council of Europe, OSCE, APEC, ASEAN, Business, Tech)

Trust and confidence for different reasons

Multistakeholderim in cybersecurity ?

21/07/2016 2

Page 3: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

Cybersecurity in Africa: a long way to go…

Africa is quite absent in the global scene

Http://map.norsecorp.com/#/

Low level of cybersecurity readiness

Lack of trust – Misuse and abuse

Lack of multistakeholderim

Weakness of global Policy and agenda on Cybersecurity at a continental level

21/07/2016 3

http://map.norsecorp.com/#/

Page 4: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

National Computer Incident Response Teams (CIRTs), ITU

21/07/2016 4

Page 5: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

National Cybersecurity Strategies, ITU

21/07/2016 5

Page 6: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

Cyberwellness profiles, ITU GCI

21/07/2016 6

Page 7: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

The African Civil Society on the Information Society

The Panafrican Network on ICT4D

Inception 2003 Geneva WSIS

Headquarters Senegal 2008

Militant et voluntarist for inclusion

Network of human resources from all More than 500 organizations including platform organizations

Member of ITU

Suited for visibility and dissemination

7

Page 8: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

ACSIS PRESENTATION : SKILLS High Level Expertise for advocacy, training, research,

sensitization, projects implementation on ICT4D opportunities advantages and threats in Africa: IG, cybersecurity, Gender, human rights, technical aspects, Security, e-waste, climate change, Business orientation, digital Africa

A link between connected and unconnected

Reach grassroots populations at a local level

Local languages

Geographical presence in all regions and countries: eg. For global projects implementation

8

Page 9: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

CHALLENGES SECURITY AND SAFETY

SOVEREIGNTY MILITARY,

DATA MINING AND PRIVACY

ONLINE PROTECTION

STRONG AU POLITICAL VISION AND WILL

OVERALL RESPONSE FROM THE POPULATIONS

TRUST AND INCLUSIVENESS (SENSITIZATION IN LOCAL LANGUAGES)

FINANCING NATIONAL READINESS

9

Page 10: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

Proposed solutions: GLOBAL

DEVELOP A CONTINENTAL AND STRONG LEGAL FRAMEWORK

STRENGTHEN AND BETTER USE LOCAL TECHNICAL CAPACITIES IN CYBERSECURITY ISSUES

MULTISTAKEHOLDER ENGAGEMENT (EG. USA)

TRUST AND CONFIDENCE IN CIVIL SOCIETY

10

Page 11: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

DEVELOPP TECHNICAL CAPACITIES

RELY ON CIVIL SOCIETY NETWORK AND EXPERTISE

FAVOR LOCAL STAFF

DEVELOPP GLOBAL PROGRAM FOR AFRICAN COUNTRIES TO WEIGHT IN THE PROCESSES

GLOBAL TOOL ACSIS-GIPO TO HELP DEVELOPPING MONITORING SYSTEM ON CYBERSECURITY IN AFRICA

FIRST PANAFRICAN SUMMIT ON THE DIGITAL ECONOMY AND SUSTAINABLE GROWTH

21/07/2016 11

Proposed solutions: CIVIL SOCIETY

http://www.acsis-scasi.org/Gipo/gipo/index.html#/dashboard

http://www.acsis-scasi.org/en/category/statement-of-dr-cisse-kane/

Page 12: THE ROLE OF CIVIL SOCIETY IN THE …...Low level of cybersecurity readiness Lack of trust –Misuse and abuse Lack of multistakeholderim Weakness of global Policy and agenda on Cybersecurity

12

Thank You !

SAFETY FIRST: THE FACE OF CYBERSECURITY IN TODAY’S …significant business trends, such as data analytics, the digitization of business functions and the blending ... as lack of

11 LACK OF AWARENESS THE DIRTY DOZEN - Eplica login · LACK OF AWARENESS THE DIRTY DOZEN 1. LACK OF COMMUNICATION 2. COMPLACENCY 3. LACK OF KNOWLEDGE 4. DISTRACTION 5. LACK OF TEAMWORK

2021State of Cybersecurity

CyberSecuring your Work, Home and Life!maui.hawaii.edu/cybersecurity/wp-content/uploads/... · • Lack of focus on security • Absence of training • Consumed by running your home

Cybersecurity Strategy of the Republic ... - staging.itu.intstaging.itu.int/en/ITU-D/Cybersecurity/Documents/National_Strategie… · Policy Document Cybersecurity Strategy of the

Building an Automotive Cybersecurity Testing Lab · Automotive Cybersecurity Summit Importance of Cybersecurity Testing Cannot have safety without cybersecurity. Confirms security

Cybersecurity Law, Strategy, and Policy in Japan … & Policy Framework of Cybersecurity in Japan 2 Law The Basic Act on Cybersecurity [Legal means of “Cybersecurity,” basicprinciples,

IS-BAO and Human Factors · · 2017-05-18HF Dirty Dozen (1994) ... • Lack of Knowledge • Lack of Communication • Complacency • Lack of Teamwork • Lack of Resources •

ISAO 600-1 A Framework for State-Level Information Sharing ......26 undertaken effective cybersecurity threat information sharing, some out of 27 reluctance, others for lack of knowledge

Implementation of Cybersecurity testbed and Overseas ... · PDF fileImplementation of Cybersecurity testbed and Overseas Export Strategy ... Introduction to Implementation of Cybersecurity

Cybersecurity Compliance · •In most cases, 800-171 controls would have prevented a breach or significantly reduced the impact •In particular, •Lack of MFA (3.5.3) •Untrained

Cisco Security – Accelerating Digital Transformation...Lack Of Cybersecurity Hinders Innovation In The Digital Era “Cybersecurity risks and threats hinder innovation in my organization.”

IoT CyberseCurITy “We foCus on beIng “laCk of basIC Infra ... · PDF fileInDIa’S Top TECh SChoolS RankED baSED on SURVEY of CollEgES, STUDEnTS, anD EMploYERS School ... Birla

CHASING EUROPEAN UNICORNSamchamfrance.org/wp-content/uploads/2020/11/AmCham... · Create key innovation fields: cybersecurity, climate, and health. The lack of focus in the innovation

How to use the National Cybersecurity Workforce Framework … · The US workforce lacks cybersecurity experts. Many cybersecurity training programs exist but lack consistency among

IoT CyberseCurITy… “We foCus on beIng “laCk of basIC Infra ...Birla Institute of Technology And Science, Pilani 1 1 Bannari Amman Institute of Technology 2 6 Bharati Vidyapeeth

Lack of Leads Lack of Money Lack of Marketing Training Lack of Duplication

Description of XYZ Manufacturing’s Cybersecurity Risk ... · Description of XYZ Manufacturing’s Cybersecurity Risk Management ... The ompany’s cybersecurity risk management

Cybersecurity - GSMA€¦ · fill these open jobs. One reason for the cybersecurity skills gap is a lack of technical security expertise; another is a lack of business insights.11

Lack of experience Lack of preparation Lack of enthusiasm Negative self-talk Feeling Nervous?

Lack of sleep - Lack of learning in Williams Syndrome?

EUROPEAN CYBERSECURITY aspects of cybersecurity FORUM · EUROPEAN CYBERSECURITY FORUM The 3rd Annual Public Policy Conference dedic ated to str tegic aspects of cybersecurity KRAKÓW,

The State of Cybersecurity and Digital Trust 2016 · The State of Cybersecurity and Digital Trust 2016 Identifying Cybersecurity Gaps ... relationship to the CEO, with cybersecurity

1 LACK OF COMMUNICATION THE DIRTY DOZEN · lack of communication the dirty dozen 1. lack of communication 2. complacency 3. lack of knowledge 4. distraction 5. lack of teamwork 6

DEPARTMENT OF TRANSPORTATION INSPECTOR ......DOT’s monitoring of cybersecurity incidents is ineffective and incomplete due to lack of access to FAA’s systems. Actions Planned for

Cybersecurity: minimising Maritime cost and disruption ......cyber risk poses a lesser threat to the marine sector. Lack of reporting . by organisations within the marine industry

Cybersecurity of students

Cybersecurity Dynamics - University of Texas at San Antonioshxu/socs/hotsos-poster-cybersecurity-dynamics.… · Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity

CYBERSECURITY OF THE FUTURE BSIDES... · CYBERSECURITY OF THE FUTURE November 27th 2018. DUBAI CYBERSECURITY FUTURE TECHNOLOGIES. DUBAI CYBERSECURITY STRATEGY. CYBER SMART SOCIETY

Cybersecurity – Fighting Crime’s Enfant Terrible · 2. Review of the cybersecurity landscape 14 3. Future trends and areas of concern for cybersecurity 18 4. Cybersecurity and

CYBERSECURITY CAPACITY REVIEW · developed a general distrust of the level of security of online services. This ‘blind’ trust or lack of trust is also reflected in the perception

Cybersecurity Workforce CompetenciesIntroduction: Cybersecurity Industry Snapshot Career Opportunities in the Cybersecurity Industry Defining a Common Set of Cybersecurity Professional

3 LACK OF KNOWLEDGE THE DIRTY DOZEN · LACK OF KNOWLEDGE THE DIRTY DOZEN 1. LACK OF COMMUNICATION 2. COMPLACENCY 3. LACK OF KNOWLEDGE 4. DISTRACTION 5. LACK OF TEAMWORK 6. FATIGUE

Configuration Management. Why Is Software Difficult to Build? Lack of control Lack of control Lack of monitoring Lack of monitoring Lack of traceability

Staying One Step Ahead In Cybersecurity · • Lack of timely threat intelligence • Maintaining security at the endpoints and on network devices • Geographic diversity with thousands