National Security Strategy of The Netherlands and ICT

National Security Strategy of The Netherlands and ICT disturbance Hans Oude Alink Ministry of Economic Affairs The Netherlands

Short background Netherlands’ Safety and Security Strategy National Strategy published May 2007 There is a need for a more coordinated and integrated approach on National Security More complex society Increased dependence on complex systems Diffuse and changing threats Interdependence dimension of threats International dimension of threats Focus: all-hazard approach

What is National Safety & Security? Focus on 5 vital interests: - Territorial security - Physical security - Economical security - Ecological security - Social & political stability Scope: (Potential) disruption of society throughout the entire security chain

National Security Strategy Which threats do we face? And what is the impact? What do we need to do? need to have? Threat/risk analysis Risk Assessment Horizon scanning National threat progress report (short & long term horizon scanning) National risk assessment Capabilities Tasks (planning assumptions) Advice national capabilities Policy arrangements

National Security at present … Climate change

Energy supply

Pandemic flu

Polarisation and radicalisation

Overall analysis high impact risks: • High impact criteria: Ø costs Ø disruption common life Ø psychological/social impact • Shortage vital products and services Ø Management of vital products and services • In critical phase: government cannot do it alone Ø Self help of citizens

In 2008 ICT-disturbance has been analyzed

IT-security: Is the situation really that bad? ? BBC news : Cyber risk 'equals 9/11 impact' 8 april 2008 US Homeland Security chief Michael Chertoff invoked the attacks of 9/11 as he sought to galvanise IT professionals and security experts at the RSA conference. NATO opens centre of excellence on cyber defence 14 may 2008 Seven NATO nations and the Allied Command Transformation signed the documents for the formal establishment of a Cooperative Cyber Defence (CCD) Centre of Excellence (COE) in Tallinn, Estonia.

National politicians are worried Dutch representative Socialist Party The Netherlands are vulnerable to a digital terroristic attack Dutch representative Socialist Democrats Cabinet should enforce the duty of informing the public whenever a company that has a vital function for society is attacked by hackers Dutch representative Christian Democrats Cabinet should perform exercises in the Netherlands similar to Cyber Storm II

Project ICT-disturbance 1 2 Threatanalysis a 3 b Threat overview (scenario’s) Inventory of present vigilance Risk assessment c Risk overview (probability and impact) 4 Identify possible New measures Overview of present capacities d 5 Strategic agenda Planning, implementation evaluation

Results so far • Developing scenario’s ØDeliberate IP-outage ØHacking of vital sector Capacity analysis

Actions that will be proposed • National response capability • Dependencies • International cooperation Challenges • Trust versus awareness • Different players