-
.
- Ελληνικά
The Commissioner for Communications, Mr. George Michaelides welcomed the participants to the Conference of Stakeholders and Authorities in Cybersecurity and outlined the four most important pillars of the Digital Security Authority (DSA), which are:
(1) Security for all - the OSA already covers critical infrastructure (European NIS Directive1) in its activities, will cover critical and key entities as defined under the NIS Directive2 to be implemented in October 2024, but extends security to SMEs and ultimately to citizens.
In more detail, in relation to Security for All - Critical Infrastructure, a security framework has been built for critical infrastructure including:
- the development and implementation of the KID 389/2020 legislation (horizontal framework of security measures),
- recognizing the complexity and challenges to implement the legislation, a toolbox of standards and procedures (guidelines) has been built to assist regulators,
- a platform (iDSAMPL) has been prepared that is used to implement the legislation, as well as incident reporting.
In addition to the security framework, an incident response mechanism has been built which includes a (state of the art) Security Operations Center (SOC) and an Infrastructure Monitoring Center (National SOC). The National SOC does not replace any sectoral or corporate SOCs that may be established.
SMEs:
A security framework for SMEs (cyber-hygiene framework) has also been created, which is a simplified version of the critical infrastructure framework. The National Centre for the Coordination of OHS (NCC) together with the Foundation have announced a grant programme for SMEs to upgrade their cybersecurity in line with the cyber-hygiene framework.
(2) Collaborations both at national and international level.
Memoranda of Understanding (MoUs) have been signed with various agencies in Cyprus and abroad.
MoUs have been signed with various agencies in Cyprus and abroad.
(2) Collaborations both nationally and internationally.
MoUs have been signed with various agencies in Cyprus and abroad. We place particular emphasis on our collaborations with Cypriot academic institutions as well as with leading universities abroad, for example the University of Oxford.
(3) Capacity building
The ICT Academy has been established, which aims to train staff from both Cyprus and abroad. A special Cyber Range platform has been built, with which personnel can be trained in a simulated systems and virtual infrastructure environment, from wherever they are, provided there is an internet connection.
In addition, the National Cyber Security Coordination Centre (NCC) has been built, which includes in its activities the funding of capacity building programmes (among others).
(4) The emergence of Cyprus as a regional centre for Cybersecurity Services
The emergence of Cyprus as a regional centre for cybersecurity services is achieved through the creation of the regional ICT Academy that has been established, as well as through the Cybersecurity Certification Center. The certification centre being built will offer certification services for services and products in both European and third countries, with the certificates issued being automatically recognised in all European Union countries.
In conclusion, the Commissioner said that the cybersecurity sector is full of challenges and, therefore, assured that the OSA in cooperation with the Deputy Ministry of Research, Innovation and Digital Policy is operating in such a way that it can adequately fulfil its tasks and to ensure that it is able to meet the requirements of the European Union.
In conclusion, the Commissioner said that the cybersecurity sector is full of challenges and, therefore, he assured that the OSA in cooperation with the Deputy Ministry of Research, Innovation and Digital Policy is operating in such a way that it can adequately fulfil its tasks and that it is able to meet the requirements of the European Union.
