aecert Roadmap Eng. Mohammed Gheyath Director, Technical Affairs TRA
Agenda Introduction aecert Vision & Mission The need to establish a UAE National CERT Constituent Framework & Service Catalog National Security Awareness Campaign Way Forward Summary
Introduction (1/2) aecert: United Arab Emirates Computer Emergency Response Team The national CERT in the UAE An initiative by the UAE Telecommunications Regulatory Authority (TRA)
Introduction (2/2) To detect, prevent and respond to the current and future cyber security incidents in the UAE To promote & help build a Safer Cyber Culture Consists of highly competent and innovative UAE Nationals
Vision & Mission Vision To be the leading trusted secure cyber coordination center in the region Mission To help build a secure and safer cyber culture in the UAE To sustain a resilient and vigilant ICT Infrastructure against the cyber security threats
Why build a UAE National CERT? (1/3) The future sustained development of the UAE & the region is heavily technology dependant. As vital as the technology is; so is the effective means to address technology-related threats that we as a nation will face. To help build, and promote a safer cyber culture in the UAE; To build a world class national structured and proactive approach to address current and future cyber security threats.
Why build a UAE National CERT? (2/3) To brainstorm ways on how to mitigate and reduce the potential impact on private and governmental sectors; To help further build and enhance the national response capability and security expertise in the country; To enhance the cyber security law and assist in creation of other cyber laws; To increase cooperation between government, business and global entities on matters relating to cyber security, and response.
Why build a UAE National CERT? (3/3) To establish a national early warning center that will disseminate information, alerts, advice regarding threats, vulnerabilities and cyber security incidents; To provide a central trusted point of coordination for cyber security incident reporting in the UAE; To foster the establishment of CSIRTs and provide trusted advisor assistance to constituents; To coordinate between and assist domestic, regional and international CERTs;
aecert s Constituent Framework Will serve UAE government, Telecoms, Utility, Law Enforcement and Financial Services sectors, key businesses and the GCC inter- CERT goals and objectives. Will include multiple levels of constituents customized according to their requirements via the constituent s charter and corresponding service catalog.
The National Security Awareness Campaign 1st Public Service: The first aecert unique and visionary public service. Why? To help promote a safer cyber culture in the UAE To educate business and general users on matters relating to Cyber-Safety. Addressing? General Users, Businesses, Youth and (in future) Children. Through? E-Learning Modules, Seminars, Workshops, National Outreach Program
E-Learning Modules The e-learning modules will target: Business Users Arabic Version Business Users English Version General Users Arabic Version General Users English Version All developed in the UAE, for the UAE
E-Learning.. Sample Snapshot (1/2)
E-Learning (2/2)
What s Next? Structured Early Warnings and Alerts National Incident Response Framework Digital Forensics Laboratory Bespoke Research and Development Projects Cyber Security Technical Center Of Excellence 24x7 Operations
Summary aecert (1/2) Is the National CERT in the UAE Aims to be the central trusted point of coordination in the UAE Realizes that the necessity to promote safer cyber culture in the UAE is as important as Security Technologies deployed within the UAE.
Summary aecert (2/2) Will follow a national, proactive structured approach to address current and future cyber security threats Will serve the UAE Government, Telecoms, Utility, Law Enforcement and Financial Services Sectors, and the country as a whole. A Centre of Excellence (CoE) within the GCC
Q & A Visit aecert @ www.aecert.ae