How to Enable Rapid Cybersecurity Standards Implementation for Impact – FA 02 Sub 02 2022
21 June 2022 | 15:45 - 16:30 CEST | SISSA Main Auditorium
Consolidated programme 2022 overview / Day 1
Proposals: #12 #26 #63 #67
Get involved!
You are invited to become a member of the session Org Team! By joining a Org Team you agree to that your name and affiliation will be published at the respective wiki page of the session for transparency reasons. Please subscribe to the mailing list to join the Org Team and answer the email that will be send to you requesting your confirmation of subscription.
Is there a practical approach for coordinating cybersecurity standards implementation and who should be driving this – regulators to drive adoption, industry to drive implementation or consumers to drive demand?
Session description
Cybersecurity standards help improve the security of IT systems, networks and critical infrastructures. They typically define both functional and assurance requirements within a product, system, process or technology environment, and well-developed cybersecurity standards help enable consistency among product developers and serve as a reliable metric for purchasing security products. Plus, they need to address user needs, but must also be practical since cost and technological limitations exist. Additionally, a standard’s requirements should be verifiable; otherwise, users cannot assess security even when products are tested against the standard. In this complex landscape, along with increasing complex cybersecurity challenges and complex regulations, once a cybersecurity standard is developed, how should industry, governments and the consumer approach its implementation so that there are strong safeguards and the fundamental rights of people are kept in the forefront? In this session, participants will address:
- How do standards intersect or interact with regulations and frameworks?
- How do they contribute to private-public driven innovation?
- What does a strategy need to contain in order to speed up deployment of standards?
- What might be holding the industry back from deploying standards?
- What might be holding government institutions back from actively supporting existing standards and related best practices?
- What might be holding back consumers from demanding trustworthy solutions backed by collaborative standards?
Format
The moderator will briefly set the stage for the discussion, putting on the table various challenges and factors at play. Following this, there will be a lightning round of questions and scenarios provided to the key participants to unveil various perspectives and diverse thoughts, which will flow into an interactive dialogue with all participants where tangible suggestions surface that stakeholders can consider as they work to implement cybersecurity strategies and solutions.
Further reading
Links to relevant websites, declarations, books, documents. Please note we cannot offer web space, so only links to external resources are possible. Example for an external link: Main page of EuroDIG
People
Possible Participants (max. of 4 in total):
- Humanitarian representative – (Possible Article 19 representative Niels ten Oever Netherlands worked on IETF Human Rights RFC and ICANN Human Rights framework)
- European Commission (DG Connect) - participant to elaborate on European Standardisation Strategy
- Alex Leadbeater (pending), BT representative and TC Cyber Chair, ETSI
- Multistakeholder platform for ICT representative (Standardisation perspective) - Possible: James Gannon (Ireland - Industry) Novias Head Cybersecurity; global perspective)
- Chiara Giovannini, ANEC (confirmed) - Alternative: Thomas Schneider (Switzerland, Regulator OFCOM, also Head of Council of Europe AI Committee)
Co-moderators (name, institution):
- To be determined
Focal Points
- Constance Weise
- Karen McCabe
Focal Points take over the responsibility and lead of the session organisation. They work in close cooperation with the respective Subject Matter Expert (SME) and the EuroDIG Secretariat and are kindly requested to follow EuroDIG’s session principles
Organising Team (Org Team) List Org Team members here as they sign up.
The Org Team is a group of people shaping the session. Org Teams are open and every interested individual can become a member by subscribing to the mailing list.
- Riccardo Nanni
- Vittorio Bertola
- Constance Weise
- Roberto Gaetano
- Alève Mine
- Karen McCabe
- Wout de Natris
- Fotjon Kosta
Key Participants
Key Participants are experts willing to provide their knowledge during a session – not necessarily on stage. Key Participants should contribute to the session planning process and keep statements short and punchy during the session. They will be selected and assigned by the Org Team, ensuring a stakeholder balanced dialogue also considering gender and geographical balance. Please provide short CV’s of the Key Participants involved in your session at the Wiki or link to another source.
Moderator
The moderator is the facilitator of the session at the event. Moderators are responsible for including the audience and encouraging a lively interaction among all session attendants. Please make sure the moderator takes a neutral role and can balance between all speakers. Please provide short CV of the moderator of your session at the Wiki or link to another source.
Remote Moderator
Trained remote moderators will be assigned on the spot by the EuroDIG secretariat to each session.
Reporter
Reporters will be assigned by the EuroDIG secretariat in cooperation with the Geneva Internet Platform. The Reporter takes notes during the session and formulates 3 (max. 5) bullet points at the end of each session that:
- are summarised on a slide and presented to the audience at the end of each session
- relate to the particular session and to European Internet governance policy
- are forward looking and propose goals and activities that can be initiated after EuroDIG (recommendations)
- are in (rough) consensus with the audience
Current discussion, conference calls, schedules and minutes
See the discussion tab on the upper left side of this page. Please use this page to publish:
- dates for virtual meetings or coordination calls
- short summary of calls or email exchange
Please be as open and transparent as possible in order to allow others to get involved and contact you. Use the wiki not only as the place to publish results but also to summarize the discussion process.
Messages
A short summary of the session will be provided by the Reporter.
Video record
Will be provided here after the event.
Transcript
Will be provided here after the event.