Pacific CERT Pac CERT By Pac CERT Working

Pacific CERT (Pac. CERT) By: Pac. CERT Working Group

Background ITU Pacific Ministerial Forum, 19 -20 Feb 09, Tonga Ministers recognised the growing incidence of cyber threats and the need for Pacific CERT Telecommunications ICT Policy and Regulation Meeting, 29 April – 1 May 2009, Fiji Forum officials endorsed setting up the Pac. CERT to be hosted at USP Establish the Pac. CERT Working Group(PWG). 2 Pac. CERT

Pac. CERT 1 st Pac. CERT Working Group Meeting 25 th Nov 2009 Establishing the Pac. CERT will require partnerships and cash and in-kind supports from partners. Countries should have their own national CERT. IMPACT plays an important role in assisting ITU Member States in establishing national CERTs. The Pac. CERT should promote and support Pacific Islands Countries and Territories to establish national CERTs. 3 Pac. CERT

PWG Outcomes � Location �Confirmation of USP to host Pac. CERT at the Japan Pacific ICT Centre subject to official approval � Governance �Pac. CERT governed by an independent Board �Members of the Board: �Japan-Pacific ICT Centre �PITA (communication operators) �PICISOC (users) �SOPAC �SPC �A representative from Polynesian countries �A representative from Melanesian countries �A representative from Micronesian countries �A representative from Finance Sector 4 Pac. CERT

PWG Outcomes Governance cont. Board to be chaired by USP TOR of the Pac. CERT to be developed Pac. CERT Board Manager Pac. CERT Tech Officer 5 Pac. CERT Tech Officer Partnership

PWG Outcomes Membership Open to organisations in Pacific countries and teritories Pac. CERT to use Aus. CERT eligibility criteria as a guide to developing its eligibility criteria Services Phase 1 – Initial services Point-of-contact database Outreach programme (awareness raising) Advisory services PACCERT Portal Training/Mentoring 6 Pac. CERT

PWG Outcomes Services cont. Phase 2 Incident response coordination and action plan Technical assistance Staff Minimum 3 staff comprising of a manager and two technical persons. Staff salary should be competitive in order to attract staff with appropriate qualifications and skills. 7 Pac. CERT

PWG Outcomes Financing: The Working Group to seek support from governments, development agencies and Industry such as, but not limited to, Australian Government, ITU, ADB, The World Bank, JICA, Microsoft, and CISCO. USP will explore possible contributions for accommodation and provision of equipment. Costs of Training and Mentoring component should be supported by the ITU-EC project and other partners such as, but not limited to, PITA and IMPACT 8 Pac. CERT

Milestones �Aus. CERT be commissioned to develop a Business plan and Project plan �Pac. CERT multi-partnership initiative �Consultations with IMPACT and other CERTs �Supervised by Pac. CERT Working Group �Completed by end of January 2010 � 2 nd Pac. CERT Working Group meeting �Held tentatively in the 2 nd week of February 2010. �Business Plan and Project Plan to be presented �Tentative residency of the Pac. CERT at the Japan Pacific ICT Centre to starts in April 2010. 9 Pac. CERT

Recommendations for ICB 4 PIC Considerations 1. Support the Pac. CERT Working Group to develop and roll out awareness raising programme that may include: 1. 2. National workshops in partnerships with local stakeholders Radio/Video/Newspaper 2. Build cyber security capacity of PICs 1. 2. 3. Regional Train of Trainers (To. T) Specialised CERT training (e. g TRANSIT) IMPACT Training 3. Partner in hosting a Pacific ICT Officials meeting followed by ICT Ministerial Meeting in early to mid 2010 10 Pac. CERT

Vinaka Vakalevu