Cybersecurity of spatial information

• Autorzy: Besiekierska Agnieszka , Czaplicki Kamil

Identyfikatory

DOI

10.57599/gisoj.2022.2.2.23

• Języki publikacji: EN

Abstrakty

EN

Services related to the broadly understood spatial information are subject to constant and intensive digitization. In addition to many positive sides, such as broad access to services, digitization also brings negative phenomena such as cyber attacks, which have intensified in recent years. Responsibilities in the area of cybersecurity are subject to legal provisions, including the act on the national cybersecurity system. Unfortunately, these obligations are still not sufficiently fulfilled, which is reflected in the results of the Supreme Audit Office (NIK). Advice on safety measures can be found in the letter of the Surveyor General of Poland dated 24 February 2022. The measures indicated in the letter should be considered insufficient.

Słowa kluczowe

EN

spatial information; cybersecurity; Surveyor General; GIS

PL

informacja przestrzenna; cyberbezpieczeństwo; Główny Geodeta; GIS

• Wydawca: SILGIS Association ; Croatian-Polish Scientific Network
• Czasopismo: GIS Odyssey Journal
• Rocznik: 2022
• Tom: Vol. 2, no. 2
• Strony: 23--30
• Opis fizyczny: Bibliogr. 21 poz.

Twórcy

autor

Besiekierska Agnieszka

• Cardinal Stefan Wyszyński University, Faculty of Law and Administration, Warsaw, Poland

• https://orcid.org/0000-0002-1223-1442

autor

Czaplicki Kamil

• Cardinal Stefan Wyszyński University, Faculty of Law and Administration, Warsaw, Poland

• https://orcid.org/0000-0002-3777-4339

Bibliografia

• 1. Act of 5 July 2018 on national cybersecurity system Dz. U. (Journal of Laws) of 2018, item 1560.
• 2. Act of 4 March 2010 on spatial information infrastructure. Dz. U. (Journal of Laws) of 2021, item 214.
• 3. Act of 17 February 2005 on computerization of the activities of entities performing public tasks Dz.U. (Journal of Laws) of Dz. U. of 2017, item 570, with changes.
• 4. Besiekierska A. (2019). Ustawa o krajowym systemie cyberbezpieczeństwa. Komentarz (Act on cybersecurity system. Commentary). C.H. Beck, Warsaw.
• 5. Czaplicki K. (2018). Security of geographical information systems - how to ensure their confidentiality, integrity, availability and resilience. 25th Anniversary Conference, Geographic Information Systems Conference and Exhibition GIS Odyssey 2018.
• 6. Decision of UODO of 13 July 2021, https://uodo.gov.pl/pl/138/2130 [access: 28.10.2022].
• 7. Gminy na celowniku przestępców (Municipalities targeted by criminals), https://wartowiedziec.pl/serwis-glowny/aktualnosci/62785-gminy-na-celowniku-cyberprzestepcow [access: 28.10.2022].
• 8. Gryszczyńska A., Szpor G. (2020). Internet, Cyberpandemia. Cyberpandemic. C.H. Beck, Warsaw.
• 9. Informacja o wynikach kontroli NIK, Realizacja usług publicznych dla obywateli z wykorzystaniem platformy ePUAP (2021) (Information on the results of the NIK audit, Implementation of public services for citizens using the ePUAP platform), https://www.nik.gov.pl/kontrole/P/20/004/ [access: 28.10.2022].
• 10. Informacja o wynikach kontroli NIK, Zarządzanie bezpieczeństwem informacji w jednostkach samorządu terytorialnego (2019) (Information on the results of the NIK audit, Information security management in local government units), https://www.nik.gov.pl/kontrole/P/18/006/ [access: 28.10.2022].
• 11. Informacja o wynikach kontroli NIK, Bezpieczeństwo informacji w pracy na odległość i mobilnym przetwarzaniu danych (2022) (Information on the results of the NIK audit, Information security at remote work and mobile data processing), https://www.nik.gov.pl/kontrole/P/21/081/LOL/ [access: 28.10.2022].
• 12. Kaczyńska A., Kanduła S., Przybylska J. (2021). Transformacja cyfrowa z punktu widzenia samorządu terytorialnego - wybrane zagadnienia (Digital transformation from the point of view of local government - selected issues). Nierówności Społeczne a Wzrost Gospodarczy, 65 (1/2021).
• 13. Laurisz M., Gmina która padła ofiarą cyber-ataku dzieli się doświadczeniami i radzi innym samorządowcom, jak i gdzie szukać pomocy (A municipality that has fallen victim to a cyber-attack shares its experience and advises other local government officials on how and where to seek help) 5.01.2022, https://itreseller.com.pl/gmina-ktora-padla-ofiara-cyber-ataku-dzieli-sie-doswiadczeniami-i-radzi-innym-samorzadowcom-jak-i-gdzie-szukac-pomocy/ [access: 28.10.2022].
• 14. Letter of Surveyor General of Poland dated 24.02.2022, https://www.geoportal.gov.pl/documents/10179/1113443/zabezpieczenie+danych+w+powiatach.pdf/28071ba3-9af4-4956-99a4-3d089243299a [access: 28.10.2022].
• 15. Ladysz J. (2015). Technologia GIS w inżynierii bezpieczeństwa (GIS technology in security engineering). Wrocław.
• 16. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the European Union L 119/1.
• 17. Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act), Official Journal of the European Union L 151/15.
• 18. Regulation of the Council of Ministers on the National Interoperability Framework, minimum requirements for public registers and electronic information exchange and minimum requirements for ICT systems, Dz.U. (Journal of Laws) of 2017, item 2247.
• 19. Regulation of the Minister of Development, Labor and Technology of 2 April 2 2021 on the organization and management of the state geodetic and cartographic resource, Dz.U. (Journal of Laws) 2021, item 820.
• 20. Szpor G., Grochowski L., Fischer B. (2021). Tom XXII - Prawo Informatyczne (Volume XXII - Informatics Law). Fundacja Ubi societas, Ibi Ius, Warsaw.
• 21. W miesiąc od cyberataku w małopolskim urzędzie marszałkowskim wciąż nie działa system informatyczny (One month after the cyberattack, the IT system in the Małopolska Marshal's Office is still not operational), 10.03.2021, https://samorzad.pap.pl/kategoria/e-urzad/w-miesiac-od-cyberataku-w-malopolskim-urzedzie-marszalkowskim-wciaz-nie-dziala [access: 28.10.2022].

Uwagi

PL

Opracowanie rekordu ze środków MEiN, umowa nr SONP/SP/546092/2022 w ramach programu "Społeczna odpowiedzialność nauki" - moduł: Popularyzacja nauki i promocja sportu (2022-2023).