Stronger together? EU Support for Ukrainian Local Authorities Facing Cyber Attacks (2022-2023)

• Autorzy: Fyshchuk Iryna

Identyfikatory

DOI

10.60097/ACIG/190344

• Języki publikacji: EN

Abstrakty

EN

This study attempts to explore the extent to which EU support during the decentralisation process in Ukraine facilitates local authorities’ digitalisation and strengthens their resilience against cyber attacks. The Ukrainian cyber attack cases are becoming more frequent in 2022 and 2023 in terms of war, especially on the websites of local authorities. The article demonstrates that decentralisation with the support of the EU-funded U-LEAD assistance programme provides an opportunity to bring state services closer to citizens and, accordingly, increase the efficiency of their provision. Decentralisation and digitalisation go hand in hand in the process of implementation in Ukraine. The digitalisation in this direction of local administrations becomes a tool for achieving this goal because it allows local administrations to offer more of their services in a digital format, which ensures the resilience of the development of local authorities. At the same time, the local authorities are less protected against cyber attacks, especially during the war. The article employs a semi-structured interview method to analyse data, revealing that representatives from local authorities participate in various training courses to enhance cybersecurity skills. However, the challenges vary and include issues such as lack of personnel, lack of funding, complex application procedures, lack of coordination, and technical capacity limitations. Indeed, Ukraine is still in the process of improving its own model of cyber defence for local authorities and the country as a whole in terms of countering Russian aggression, using among others practices of NATO and EU countries in the specified field.

Słowa kluczowe

EN

cyber attack; cybersecurity; local authorities; digitalisation; decentralization; EU

PL

cyberatak; cyberbezpieczeństwo; władze lokalne; cyfryzacja; decentralizacja; UE

• Wydawca: NASK – National Research Institute
• Czasopismo: Applied Cybersecurity & Internet Governance
• Rocznik: 2024
• Tom: Vol. 3, No. 1
• Strony: 204--226
• Opis fizyczny: Bibliogr. 48 poz., rys., tab., wykr.

Twórcy

autor

Fyshchuk Iryna

• Department of Political Science and Management, University of Agder, Norway

• https://orcid.org/0000-0002-7645-3490

Bibliografia

• [1] A. Frandell, M. Feeney, “Cybersecurity threats in local government: A sociotechnical perspective,” The American Review of Public Administration, vol. 52, no. 8, pp. 558–572, 2022, doi: 10.1177/02750740221125432.
• [2] A. Ibrahim, C. Valli, I. McAteer, I. Chaudhry, “A security review of local government using NIST CSF: A case study,” The Journal of Supercomputing, vol. 74, pp. 5171– 5186, 2018, doi: 10.1007/s11227-018-2479-2.
• [3] W. Hatcher, W.L. Meares, J. Heslen, “The cybersecurity of municipalities in the United States: An exploratory survey of policies and practices,” Journal of Cyber Policy, vol. 5, no. 2, pp. 302–325, 2020, doi: 10.1080/23738871.2020.1792956.
• [4] M. Kenney, “Cyber-terrorism in a post-Stuxnet world,” Orbis, vol. 59, no. 1, pp. 111–128, 2015, doi: 10.1016/j.orbis.2014.11.009.
• [5] N. Kostyuk, E. Gartzke, “Why cyber dogs have yet to bark loudly in Russia’s invasion of Ukraine (Summer 2022),” Texas National Security Review. [Online]. Available: https://tnsr.org/wp-content/uploads/2022/06/TNSR-Journal-Vol-5-Issue-3-Kostyuk-Gartzke.pdf. [Accessed: Jan. 12, 2024].
• [6] O. Evsyukova, “Political digitalization for Ukrainian society–challenges for cyber security,” Cybersecurity and Law, vol. 5, no. 1, pp. 139–144, 2021, doi: 10.35467/cal/142199.
• [7] A. Pintsch, “Decentralization in Ukraine and bottom-up European integration,” in Decentralization, Regional Diversity, and Conflict: The Case of Ukraine, H. Shelest, M. Rabinovych, Eds., Palgrave Macmillan Cham, 2020, pp. 339–363.
• [8] V.P. Hordiienko, M.L. Onishchenko, I.S. Malyonkina. (2019). Foreign experience of decentralization of public power and the possibility of its transformation in Ukraine. [В. П. Гордієнко, М. Л. Оніщенко, І. С. Мальонкіна. (2019). Зарубіжний досвід децентралізації публічної влади та можливості його трансформації в Україні]. [Online]. Available: https://essuir.sumdu.edu.ua/handle/123456789/76912. [Accessed: Jan. 12, 2024].
• [9] D.O. Lukin, V.P. Gordienko, G.O. Myroshnychenko, Fundamentals of Power Decentralization: Methodological Recommendations, Council of Young Scientists, Sumy, 2015. [D.O. Лукін, В.П. Гордієнко, Г.О. Мирошниченко, Основи децентралізації влади: методичні рекомендації, Рада молодих вчених, Суми, 2015]. [Online]. Available: https://issuu.com/34462/docs. [Accessed: Jan. 12, 2024].
• [10] H. Wagenaar, Meaning in Action: Interpretation and Dialogue in Policy Analysis, London and New York: Routledge, 2014.
• [11] C. Dyer, P. Rose, “Decentralisation for educational development? An editorial introduction,” Compare: A Journal of Comparative and International Education, vol. 35, no. 2, pp. 105–113, 2005, doi: 10.1080/03057920500129809.
• [12] O. Mikuš, M. Kukoč, M. Jež Rogelj, “The coherence of common policies of the EU in territorial cohesion: A neverending discourse? A review,” Agricultural Economics, vol. 65, pр. 143–149, 2019, doi: 10.17221/229/2018-AGRICECON.
• [13] State Service of Special Communications and Information Protection of Ukraine Report. (Jul. 10, 2022). Report for Q3 2022. [Online]. Available: https://scpc.gov.ua/en/articles/163. [Accessed: Jan. 12, 2024].
• [14] Microsoft Threat Intelligence. (2023). Microsoft Digital Defence Report. Building and improving cyber resilience. [Online]. Available: https://microsoft.com/mddr. [Accessed: Dec. 22, 2023].
• [15] Cybersecurity Tech Accord. (2023). Building a voice for peace and security online. The cybersecurity tech accord’s first five years. [Online]. Available: www.cybertechaccord.org. [Accessed: Dec. 22, 2023].
• [16] Council of Europe. (Sep. 01, 1988). Chart of Signatures and Ratifications of Treaty 122 of the European Charter of Local Self-Government. [Online]. Available: https://www.coe.int/en/web/conventions/full-list?module=treaty-detail&treatynum=122. [Accessed: Dec. 18, 2023].
• [17] Council of Europe. (Oct. 15, 1985). The European Charter of Local Self-Government. [Online]. Available: https://rm.coe.int/168007a088. [Accessed: Dec. 18, 2023].
• [18] Law of Ukraine On Ratification of the European Charter of Local SelfGovernment of July 15, 1997 [Закон України Про ратифікацію Європейської хартії місцевого самоврядування від 15 липня 1997 року]. [Online]. Available: https://zakon.rada.gov.ua/laws/show/452/97-%D0%B2%D1%80#Text. [Accessed: Dec. 18, 2023].
• [19] Constitution of Ukraine [Конституція України]. [Online]. Available: https://zakon.rada.gov.ua/laws/show/254к/96-вр#Text. [Accessed: Dec. 18, 2023].
• [20] N.V. Vasylieva, O.I. Vasylieva, S.M. Prylipko, S.V. Kapitanets, O.V. Fatkhutdinova, “Approaches to the formation of public administration in the context of decentralization reform in Ukraine,” Cuestiones Politicas, vol 38, no. 66, pp. 301–320, 2020, doi: 10.46398/cuestpol.38e.19.
• [21] O. Keudel, O. Huss, ”Polycentric governance in practice: The case of Ukraine’s decentralised crisis response during the Russo-Ukrainian war,” Journal of Public Finance and Public Choice, vol. 39, no. 1, pp. 10–35, 2024, doi: 10.1332/25156918Y2023D000000002.
• [22] M. Rabinovych, A. Gawrich, “The conflict in Eastern Ukraine and international support for the decentralization reform (2014–2022): Theory-guided observations,” East European Politics and Societies, vol. 37, no. 3, pp. 1036–1058, 2023, doi: 10.1177/08883254221139841.
• [23] Decree of the President of Ukraine, On the Sustainable Development Strategy ‘Ukraine – 2020’ [Указ Президента України, Про Стратегію сталого розвитку ‘Україна – 2020’], Jan. 12, 2015. [Online]. Available: https://zakon.rada.gov.ua/laws/show/5/2015#Text. [Accessed: Dec. 16, 2023].
• [24] Law of Ukraine, On Voluntary Unification of Territorial Communities [Закон України, Про добровільне об’єднання територіальних громад], 2015. [Online]. Available: https://zakon.rada.gov.ua/laws/show/157-19#Text. [Accessed: Dec. 20, 2023].
• [25] Ministry for Communities and Territories Development of Ukraine (MinRegion). (2022). U-LEAD with Europe’s contribution to a transparent, accountable and responsive multi-level governance in Ukraine, February 2022. [Online]. Available: https://www.giz.de/de/downloads/giz2022-en-u-lead-four-pager.pdf. [Accessed: Jan. 04, 2024].
• [26] Monitoring of the reform of local self-government and territorial organization of power of the Ministry of Development of Communities and Territories of Ukraine as of October 7, 2021 [Моніторинг реформи місцевого самоврядування та територіальної організації влади Міністерства розвитку громад та територій України станом на 07 жовтня 2021 року], Apr. 1, 2024. [Online]. Available: https://www.minregion.gov.ua/wp-content/uploads/2019/01/monitoryng-reformy-misczevogo-samovryaduvannya-ta-terytorialnoyiorganizacziyi-vlady-stanom-na-1-zhovtnya-2021r..pdf. [Accessed: Jan. 04, 2024].
• [27] S. Khadzhyradieva, T. Docsenko, M. Sitsinska, Y. Baiun, Y. Pukir, “Prerequisites for process management implementation in the public administration of Ukraine,” International Journal of Criminology and Sociology, vol. 9, pp. 2825– 2833, 2020, doi: 10.6000/1929-4409.2020.09.346.
• [28] T. Almarabeh, A. AbuAli, “A general framework for e-government: Definition maturity challenges, opportunities, and success,” European Journal of Scientific Research, vol. 39, no. 1, pp. 29–42, 2010.
• [29] J.P. Kesan, L. Zhang, “An empirical investigation of the relationship between local government budgets, IT expenditures, and cyber losses,” IEEE Transactions on Emerging Topics in Computing, vol. 9, no. 2, pp. 582-596, 2019, doi: 10.1109/TETC.2019.2915098.
• [30] K.B. Marysyuk, I.O. Tomchuk, M.D. Denysovskyі, I.O. Geletska, B.V. Khutornyi, “Diia. Digital state and E-government practices as anti-corruption tools in Ukraine Institutions,” WSEAS Transactions on Environment and Development, vol. 17, pp. 885-897, 2021, doi: 10.37394/232015.2021.17.83.
• [31] United Nations. (2022). E-government Development Index, [Online]. Available: https://publicadministration.un.org/egovkb/en-us/Data/Country-Information/id/180-Ukraine. [Accessed: Dec. 16, 2023].
• [32] J.A. Lewis, Assessing the Risks of Cyber Terrorism, Cyber War and Other Cyber Threats, Center for Strategic & International Studies, Washington, DC, 2002.
• [33] H. Stambaugh, Electronic crime needs assessment for state and local law enforcement, US Department of Justice, Office of Justice Programs, National Institute of Justice, 2001.
• [34] M.S. Mahmoud, M.M. Hamdan, U.A. Baroudi, ”Modeling and control of cyber-physical systems subject to cyber attacks: A survey of recent advances and challenges,” Neurocomputing, vol. 338, pp. 101–115, 2019, doi: 10.1016/j.neucom.2019.01.099.
• [35] J.J. Plotnek, J. Slay, “Cyber terrorism: A homogenized taxonomy and definition,” Computers and Security, vol. 102, 2021, doi: 10.1016/j.cose.2020.102145.
• [36] J. Reason, E. Hollnagel, J. Paries, “Revisiting the Swiss cheese model of accidents,” Journal of Clinical Engineering, vol. 27, no. 4, pp. 110–115, 2006.
• [37] Dzerkalo Tuzhnya. (Mar. 3, 2022). In five oblasts, the websites of local authorities were hacked: The Russian Federation spreads fakes on the. [Дзеркало Тижня. (3 березня 2022). В п›ятьох областях зламано сайти місцевої влади: РФ розповсюджує на них фейки]. [Online]. Available: https://zn.ua/ukr/UKRAINE/u-volinskij-ta-vinnitskij-oblastjakh-zlamano-sajti-mistsevoji-vladi-rfrozpovsjudzhuje-na-nikh-fejki.html. [Accessed: Jan. 12, 2024].
• [38] Uman News. (May 25, 2023). Virtual damage for defeats at the front: a cyber attack continues on the official websites of hromadas of the Uman district. [Online]. Available: https://umannews.city/articles/289379/virtualna-shkoda-za-porazkina-fronti-trivaye-kiberataka-na-oficijni-sajti-gromad-umanskogo-rajonu. [Accessed: Jan. 14, 2024].
• [39] Ministry of Digital Transformation of Ukraine. (2023). Research on digital skills in Ukraine. [Міністерство цифрової трансформації України. (2023). Дослідження цифрової грамотності в Україні]. [Online]. Available: https://osvita.diia.gov.ua/uploads/1/8800-ua_cifrova_gramotnist_naselenna_ukraini_2023.pdf. [Accessed: Jan. 04, 2024].
• [40] European Parliamentary Research Service. (2022). Russia’s war on Ukraine: Timeline of cyber-attacks. [Online]. Available: https://www.europarl.europa.eu/RegData/etudes/BRIE/2022/733549/EPRS_BRI(2022)733549_EN.pdf. [Accessed: Jan. 03, 2024].
• [41] A. C. Lindholst, D. O. Torjesen, ”Special issue introduction: Boundary spanning in the age of collaborative governance – Insights from Nordic local governments,” Scandinavian Journal of Public Administration, vol. 28, no. 1, pp. 1–10, 2024, doi: 10.58235/sjpa.2024.22522.
• [42] C. Brumfield. (May 06, 2022). Why local governments are a hot target for cyberattacks. [Online]. Available: https://www.csoonline.com/article/3391589/whylocal-governments-are-a-hot-target-forcyberattacks.html. [Accessed: Nov. 11, 2021].
• [43] A. Guchua, T. Zedelashvili, “Challenges arising from cyber security in the dimension of modern global security (on the example of the Russia-Ukraine war),” Eastern Review, vol. 11, no. 2, pp. 79-88, doi: 10.18778/1427-9657.11.18.
• [44] B. W. Wirtz, J. C. Weyerer, “Cyberterrorism and cyber attacks in the public sector: How public administration copes with digital threats,” International Journal of Public Administration, vol. 40, no. 13, pp. 1085–1100, 2017, doi: 10.1080/01900692.2016.1242614.
• [45] D.F. Norris, L. Mateczun, A. Joshi, T. Finin, “Cyberattacks at the grass roots: American local governments and the need for high levels of cybersecurity,” Public Administration Review, vol. 79, no. 6, pp. 895–904, 2019, doi: 10.1111/puar.13028.
• [46] D.F. Norris, L. Mateczun, A. Joshi, T. Finin, “Managing cybersecurity at the grassroots: Evidence from the first nationwide survey of local government cybersecurity,” Journal of Urban Affairs, vol. 43, no. 8, pp. 1173–1195, 2020, doi: 10.1080/07352166.2020.1727295.
• [47] A. Choodakowska, S. Kańduła, J. Przybylska, “Cybersecurity in the local government sector in Poland: More work needs to be done,” Lex Localis, vol. 20, no. 1, pp. 161–192, 2022, doi: 10.4335/20.1.161-192(2022).
• [48] D.E. Whitehead, K. Owens, D. Gammel, J. Smith, “Ukraine cyber-induced power outage: Analysis and practical mitigation strategies.” 70th Annual Conference for Protective Relay Engineers (CPRE), College Station, TX, USA, 2017, pp. 1–8, doi: 10.1109/CPRE.2017.8090056.

Uwagi

Opracowanie rekordu ze środków MNiSW, umowa nr POPUL/SP/0154/2024/02 w ramach programu "Społeczna odpowiedzialność nauki II" - moduł: Popularyzacja nauki (2025).