WELCOME TO THE CONTINUITY CENTRAL ARCHIVE SITE

Please note that this is a page from a previous version of Continuity Central and is no longer being updated.

To see the latest business continuity news, jobs and information click here.

Business continuity information

ENISA issues final report on Cyber Europe 2010

ENISA, The European Union’s cyber security agency, has issued the final report on the first Pan-European cyber security exercise for public bodies, ‘Cyber Europe 2010’.

The report highlights the need for:

• More cyber security exercises in the future,
• Increased collaboration between Member States,
• The importance of the private sector in ensuring security.

Cyber Europe 2010 was conducted on the 4th of November 2010. Its objective was to trigger communication and collaboration between countries to respond to large-scale cyber-attacks. Over 70 Experts from the participating public bodies worked together to counter +300 simulated hacking attacks aimed at paralysing the Internet and critical online services across Europe. During the exercise, a simulated loss of Internet connectivity between the countries took place, requiring cross border cooperation to avoid a total network crash.

The evaluation of the exercise was conducted at three levels: National; Pan-European; and Overall.

Key findings include that:
• Member States Information Technology bodies communicate in a wide variety of ways. Harmonisation of standard operating procedures would lead to more secure and efficient communication between them.
• The ability to find the relevant points of contact within organizations varied. In the event of a real crisis, some 55 percent of countries were not confident they would be able to quickly identify the right contact, even with the available directories.
• Participants were evenly divided on whether a ‘Single Point of Contact’ (SPOC) or ‘Multiple Points of Contact’ (MPOC) would be better. A SPOC would be easier, but realistically, today there are multiple points of contact. MPOC also avoids a single point of failure.

The main recommendations include:
• Europe should continue to hold exercises in critical information infrastructure protection (CIIP): 86 percent of the participants found the ‘dry run’ ‘very’ or ‘extremely’ useful.
• The private sector should provide value in future exercises by increasing levels of realism.
• ‘Lessons Identified’ should be exchanged with those holding other (national or international) exercises.
• Member States should be well organized internally, for example, by developing and testing national contingency plans and exercises.
* European countries are organized nationally in a variety of ways. Given the differences in structures and process, it is vital to know whom to contact.
* The dialogue on the necessity of Single Point of Contact or Multiple Points of Contact at the EU level should continue, and ENISA can be the facilitator of this.
• A roadmap for pan-EU exercises should be created. This would include a definition of standard procedures and structures for large scale events.

Read the full report (PDF).

•Date: 20th April 2011 • Region: Europe / UK •Type: Article • Topic: ISM

Business Continuity Newsletter Sign up for Continuity Briefing, our weekly roundup of business continuity news. For news as it happens, subscribe to Continuity Central on Twitter.
   

How to advertise How to advertise on Continuity Central.

To submit news stories to Continuity Central, e-mail the editor.

Want an RSS newsfeed for your website? Click here