CERT PSE oraz E-CERT sektorowy elementem cyberbezpieczeństwa dla sektora energetycznego

• Autorzy: Sordyl J.

Warianty tytułu

EN

CERT PSE and E-CERT as a part of energy sector cyber security pilar

• Języki publikacji: PL

Abstrakty

EN

The analysis of the current situation in the area of development of cyber threats and cyber attack systems suggest that each organisation is a potential target for the attacking cyber criminals or professionals, often supported by foreign governments. We indirectly or directly depend on the management and monitoring systems based on IT solutions. The situation is similar in PSE SA which, due to the special place in provision of the energy safety of Poland, treat the problem of cyber security as a priority. Therefore, it is necessary to assign particular meaning to the proactive actions and protective actions. Especially now, when the development of the equipment for monitoring, management of industrial systems is based e.g. on the exchange of information/data via all kinds of devices, e.g. IIoT (Industrial Internet of Things)1 which are connected to the Internet, cyber threats and cyber security takes on a different meaning, not that applicable to industrial areas. The tasks related to the prevention of cyber threats and incident management in organisations around the world are carried out by specialized IT security cells — the so-called CERT/CSIRT (Computer Emergency Response Team/Computer Security Incident Response Team). Their role is not only to respond to the incidents, but also to prevent and conduct actions among users raising awareness about current cyber threats and the methods of protection against them. These teams are also responsible for establishing broad cooperation in the area of IT security with other CERTs in similar organisations, because only the fast exchange of information is a prerequisite for adequate and appropriate response to the threat. Taking into account the development of the situation in the surrounding space in PSE, it was decided to set up a CERT team whose tasks are focused on ensuring the proper and effective response to IT incidents. At the same time, due to the real threats to IT systems and their dependent critical infrastructure, steps have been taken to strengthen the cooperation in the energy sector. This initiative aims at creating a dedicated team for the entire energy sector i.e. E-CERT, based on CERT of PSE.

Słowa kluczowe

PL

cyberbezpieczeństwo; bezpieczeństwo energetyczne; CERT; Computer Emergency Response Team

• Wydawca: Polskie Sieci Elektroenergetyczne S.A.
• Czasopismo: Elektroenergetyka : współczesność i rozwój
• Rocznik: 2018
• Tom: Nr 1(18)
• Strony: 74--78
• Opis fizyczny: Bibliogr. 9 poz.

Twórcy

autor

Sordyl J.

• PSE Departament Bezpieczeństwa

Bibliografia

• [1] A. Keeve, ESET discovers dangerous malware designed to disrupt industrial control systems, (w:) www.eset.com, data dostępu: 26.07.2017 r.
• [2] https://exatel.pl/cyberbezpieczenstwo/security-operations-center/
• [3] http://cert.pse-online.pl/cert-4/
• [4] https://www.trusted-introducer.org/
• [5] https://ics-cert.us-cert.gov/About-Industrial-Control-Systems-Cyber-Emergency-Response-Team
• [6] http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A52013AE1414
• [7] https://www.enisa.europa.eu/publications/csirt-setting-up-guide-in-polish
• [8] https://www.iso.org/standard/60803.html
• [9] https://www.nist.gov/