The document discusses cybersecurity and the work of NRD Cyber Security, a company that builds cybersecurity centers (CSIRTs/SOCs) globally to confront cyberattacks and cyber crime. It notes that NRD Cyber Security is controlled by INVL Technology, which implements projects in over 50 countries worldwide. The document provides an overview of NRD's mission to partner with countries in constructing cybersecurity centers, lists some of the countries it has worked with, and discusses establishing trusted cybersecurity networks around the world.

1. NRD Cyber Security - by Dr. Vilius Benetis, vb@nrd.no, 9:40-10:20 April 26, 2018
Cybersecurity is about:
Enemies or Fraudsters?

2. BUILDING CYBERSECURITY
CENTERS (CSIRTS) FROM 1998.
CSIRT/SOC TEAMS
ESTABLISHMENT GLOBALLY TO
CONFRONT CYBERATTACKS
AND CYBER CRIME.
CURRENTLY FULLY-PACKAGED
TEAM TRUSTED BY ITU FOR
THE JOB, GLOBALLY.
P R O J E C T
G E O G R A P H Y
NRD Cyber Securi ty is contro ll e d by INVL Techno logy . INVL Techno lo gy managed
compani es implem e n t proje cts in 50+ countries worldw ide .
South &
Southeast
Asia
Sub-Saharan
Africa
Central
America

3. MISSION
PARTNERSHIPS
IN CONSTRUCTING
CYBERSECUR IT Y
CENTERS
Lithuania Moldova Rwanda
Latvia Norway Uganda
Estonia Tanzania Bangladesh
Cyprus Bhutan Peru

4. TRUSTED CYBER SECURITY NETWORKS AROUND THE WORLD

5. 5 I WWW.NRDC S. L T

6. 6 I WWW.NRDC S. L T
Digital threat perspectives
Enemigos Estafadores

7. 7 I WWW.NRDC S. L T
Who is he?

8. 8 I WWW.NRDC S. L T

9. 9 I WWW.NRDC S. L T
I n f o r m a t i o n
I n f o r m a t i o n
S y s t e m
P r o c e s s
IntegrityConfidentialityAvailability
C y b e r s e c u r i t y F o c u s M i s p l a c e m e n t

10. 10 I WWW.NRDC S. L T
• Intelligence-led security (fraud handling fusion centres – CSIRTs/SOCs)
• Resilient ICT and information designs, expectation of attack paths
• Always ready to be breached and respond, focus on managing your trust!
• Develop your partner network for handling incidents
• Be reserved on relying on ML and AI
Updated Security Doctrine for Digital World

11. SITUATION IN ORGANISATIONS, GOVERNMENTS
Information security managers are confused about what to do

12. 1 2 I n r d c s . l t

13. RESILIENCE –being able to reach the goals...
…despite the Environment.

14. 14 I WWW.NRDC S. L T
Metrics for digital security
ISO/IEC 27001:2013,
ISO/IEC 27002:2013
ISO/IEC 27004:2016
NIST SP 800-53, NIST SP
800-53A, NIST SP 800-30
NIST SP 800-55
COBIT 5
COBIT 5 for Information
Security
Critical Security Controls
Critical Security
Controls
CSIRT/SOCs FIRST.org

15. 15 I WWW.NRDC S. L T
What knowledge to use?
ISO/IEC 27004:2009 if you have ISMS and using
ISO/IEC 27001
COBIT 5 for
Information Security
If important assurance of
„secure“ IT management
NIST SP 800-55 If you are interested in
experience of friendly nation
Critical Security
Controls
If focus is in cybersecurity
National laws If important is compliance
FIRST.org / SIM3 /
SOC CMM
If CSIRT/SOCs is currently
chosen path

16. 16 I WWW.NRDC S. L T
SOC Capability Maturity Model (SOC CMM)

17. 17 I WWW.NRDC S. L T
Congratulations, SECURE SOFT SOC!
Thank You All for Your Attention!
Prof. Dr. Vilius Benetis, CISA, CRISC
vb@nrd.no, NRD CIRT
https://www.linkedin.com/in/viliusbenetis