ITU Workshop on ICT Security Standardization for Developing

ITU Workshop on “ICT Security Standardization for Developing Countries” (Geneva, Switzerland, 15 -16 September 2014) Session 4 – ICT role in critical infrastructure protection Antonio Guimaraes Geneva, Switzerland, 15 -16 September 2014

Session Objectives Critical infrastructure is a term used by governments to describe assets that are essential for the functioning of a society, such as energy, transportation, telecommunication, water supply, agriculture, public health, financial services, etc. Most critical infrastructures rely on Information and Communication Technologies (ICTs), including industrial control systems (ICS), to perform essential functions. This dependency represents potential vulnerabilities and risks to operations. This section will focus in existing ICT security standards, guidelines, methodologies, and practices to enable critical infrastructure providers to achieve the resilience required. Geneva, Switzerland, 15 -16 September 2014 2

Speaker/presenter line-up Slot Presentations 12 min 1 Critical telecommunication infrastructure protection in Brazil Timing 2 3 4 Presentations Speakers Antonio Guimaraes - Anatel, Brazil [ Biography] Critical telecommunication infrastructure protection in Brazil Critical Information Infrastructure Martin Koyabe, Commonwealth Protection (CIIP): A Telecommunication Organization Commonwealth Perspective [ Biography ] Critical infrastructure protection: Vyacheslav Zolotnikov standardization to protect critical Kaspersky Lab [Biography] infrastructure objects Security by Design in Smart Grids Carsten Strunge – A Need to Rethink ICT in Power Energinet. dk, Denmark [Biography ] System Controls 5 Towards a partnership-based framework for establishing secure ICT infrastructure in developing countries Bill Mc. Crum Telecom Consulting [Biography] 6 ICT Regulator Role on National Security and Critical Infrastructure Protection Suliman Alsamhan CITC, Saudi Arabia, [Biography] Geneva, Switzerland, 15 -16 September 2014

Questions for the roundtable In your view, what should be the respective roles of sector specific regulators (e. g. telecom, power, etc. ) and ICT generic regulators (e. g. ICT security agencies) on critical infrastructures protection ? What do you consider as important security gaps and collaboration opportunities to enable critical infrastructure providers in developing countries to achieve the resilience required ? What do you see as important ICT standardization issues (including industrial control systems-ICS) related to the protection of critical infrastructure assets ? In your view, which of these issues could be good candidates for standardization within ITU-T SG 17 ? Geneva, Switzerland, 15 -16 September 2014 4