Commentary: The Czech Approach to Supply Chain Security in ICT

• Autorzy: Netolická Veronika

Identyfikatory

DOI

10.5604/01.3001.0016.0867

• Języki publikacji: EN

Abstrakty

EN

Supply chain security is one of the challenges many countries are currently addressing. As this topic is a national security prerogative, the systems for screening also vary. The Czech Republic is preparing a legislative framework to protect strategically important infrastructure from high-risk suppliers. This commentary focuses on the Czech Republic’s progress in this area, particularly in the European context.

Słowa kluczowe

EN

national regulations; security; supply chain; Czech Republic

PL

regulacje krajowe; bezpieczeństwo; łańcuch dostaw; Czechy

• Wydawca: NASK – National Research Institute
• Czasopismo: Applied Cybersecurity & Internet Governance
• Rocznik: 2022
• Tom: Vol. 1, No. 1
• Strony: 1--6
• Opis fizyczny: Bibliogr. 25 poz.

Twórcy

autor

Netolická Veronika

• Masaryk University, Faculty of Social Studies, Department of Political Science and National Cyber and Information Security Agency, Cyber Security Policies Department, National Strategy and Policy Unit, Czech Republic

• https://orcid.org/0000-0001-8991-384X

Bibliografia

• 1.European Court of Auditors. (2022). Special Report 03/2022: 5G roll-out in the EU: Delays in deployment ofnetworks with security issues remaining unresolved. [Online]. Available: https://www.eca.europa.eu/en/Pages/DocItem.aspx?did=60614 [Accessed: Oct. 17, 2022].
• 2. Government of the Czech Republic. (2021). Resolution: The National Security Council. [Online]. Available:https://www.vlada.cz/assets/ppov/brs/cinnost/zaznamy-z-jednani/usn-41-22.pdf. [Accessed: Oct. 17, 2022].
• 3. MPO. (2022). Implementation and development of 5G networks in the Czech Republic towards the digitaleconomy. [Online]. Available: https://www.mpo.cz/assets/cz/e-komunikace-a-posta/elektronicke-komunikace/koncepce-a-strategie/narodni-plan-rozvoje-siti-nga/2020/1/Implementace-a-rozvoj-siti-5G-v-CR-EN.pdf. [Accessed: Oct. 17, 2022].
• 4. CRS. (2022). Supply Chain Act: Act on Corporate Due Diligence Obligations in Supply Chains. [Online].Available: https://www.csr-in-deutschland.de/EN/Business-Human-Rights/Supply-Chain-Act/supply-chainact.html. [Accessed: Oct. 17, 2022].
• 5. European Court of Auditors. (2022). Special Report 03/2022: 5G roll-out in the EU: Delays in deployment ofnetworks with security issues remaining unresolved. [Online]. Available: https://www.eca.europa.eu/en/Pages/DocItem.aspx?did=60614. [Accessed: Oct. 17, 2022].
• 6. NCSI. (2022). Czech Republic. [Online]. Available: https://ncsi.ega.ee/country/cz. [Accessed: Nov. 6, 2022].
• 7. Federal Communications Commission. (2022). List of equipment and services covered by section 2 of theSecure Network Act. [Online]. Available: https://www.fcc.gov/supplychain/coveredlist. [Accessed: Oct. 17, 2022].
• 8. UK Parliament. (2021). Telecommunications (Security) Act 2021. [Online]. Available: https://bills.parliament.uk/bills/2806. [Accessed: Oct. 17, 2022].
• 9. A. Hiroshi. (2022). Japan sets guidelines for protecting critical supply chains. [Online]. Available: https://asia.nikkei.com/Spotlight/Supply-Chain/Japan-sets-guidelines-for-protecting-critical-supply-chains. [Accessed: Oct. 17, 2022].
• 10. NIS Cooperation Group. (2020). Cybersecurity of 5G networks EU Toolbox of risk mitigating measures. [Online]. Available: https://ccdcoe.org/uploads/2020/01/EU-200129-Cybersecurity-of-5G-networks-EUToolbox-of-risk-mitigating-measures.pdf. [Accessed: Oct. 17, 2022].
• 11. Council of the EU. (2022). The Council agrees to strengthen the security of ICT supply chains. [Online]. Available: https://www.consilium.europa.eu/en/press/press-releases/2022/10/17/the-council-agrees-tostrengthen-the-security-of-ict-supply-chains. [Accessed: Oct. 17, 2022].
• 12. NUKIB. (2018). Warning. National Cyber and Information Security Agency. [Online]. Available: https://www.nukib.cz/download/uredni_deska/Varovani_NUKIB_2018-122-17.pdf. [Accessed: Oct. 17, 2022].
• 13. MPO. (2022). Implementation and development of 5G networks in the Czech Republic towards the digitaleconomy. [Online]. Available: https://www.mpo.cz/en/foreign-trade/investment-screening. [Accessed: Oct. 17, 2022].
• 14. MV ČR. (2022). EGovernment Cloud. [Online]. Available: https://www.mvcr.cz/clanek/katalog-cloudcomputingu.aspx. [Accessed: Oct. 17, 2022].
• 15. Government of the Czech Republic. (2019). Prague 5G security conference announced series ofrecommendations: The Prague Proposals. [Online]. Available: https://www.vlada.cz/en/media-centrum/aktualne/prague-5g-security-conference-announced-series-of-recommendations-the-prague-proposals-173422 [Accessed: Oct. 17, 2022].
• 16. NUKIB. (2021). Prague proposals on cyber security of EDTs. [Online]. Available: https://www.nukib.cz/download/Prague_Proposals_on_Cyber_Security_of_EDTs.pdf. [Accessed: Oct. 17, 2022].
• 17. NUKIB. (2021). Prague proposals on telecommunications supplier diversity. [Online]. Available: https://www.nukib.cz/download/Prague_Proposals_on_Telecommunications_Supplier_Diversity.pdf. [Accessed: Oct. 17, 2022].
• 18. Government of the Czech Republic. (2022). Resolution: The National Security Council. [Online]. Available: https://www.vlada.cz/assets/ppov/brs/cinnost/zaznamy-z-jednani/usn-33_2.pdf. [Accessed: Oct. 17, 2022].
• 19. NUKIB. (2022). Recommendation for assessing the trustworthiness of technology suppliers of 5Gnetworks in CZ. [Online]. Available: https://www.vlada.cz/assets/ppov/brs/cinnost/zaznamy-z-jednani/usn-33_2.pdf. [Accessed: Oct. 17, 2022].
• 20. Government of the Czech Republic. (2021). Resolution: The National Security Council. [Online]. Available: https://www.vlada.cz/assets/ppov/brs/cinnost/zaznamy-z-jednani/usn-41-22.pdf. [Accessed: Oct. 17, 2022].
• 21. NUKIB. (2022). Warning against using smart meters from countries with untrustworthy legal environments.[Online]. Available: https://www.nukib.cz/download/uredni_deska/2022-05-30_varovani-smartmetering_final_1.0_podepsno.pdf [Accessed: Oct. 17, 2022].
• 22. NUKIB. (2022). Warning in the context of economic sanctions associated with the Russian Federation.[Online]. Available: https://www.nukib.cz/download/uredni_deska/2022-03-21_varovani_rusti-dodavatele.pdf[Accessed: Oct. 17, 2022].
• 23. NUKIB. (2022). Increasing the supply chain security of the state’s strategic infrastructure is in the interestof the Czech Republic. [Online]. Available: https://www.nukib.cz/en/infoservis-en/news/1886-increasing-the-supply-chain-security-of-the-state-s-strategic-infrastructure-is-in-the-interest-of-the-czech-republic.[Accessed: Oct. 17, 2022].
• 24. M. Coleman. (2020). NIST highlights palo alto networks supply chain best practices. [Online]. Available: https://www.paloaltonetworks.com/blog/2020/06/policy-supply-chain-best-practices. [Accessed: Oct. 17, 2022].
• 25. Microsoft. (2022). Supply chain security. [Online]. Available: https://www.microsoft.com/en-us/research/project/supply-chain-security/publications. [Accessed: Oct. 17, 2022].

Uwagi

Opracowanie rekordu ze środków MEiN, umowa nr SONP/SP/546092/2022 w ramach programu "Społeczna odpowiedzialność nauki" - moduł: Popularyzacja nauki i promocja sportu (2022-2023).