CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND 5.2 Enhancing the efficiency of the functioning of the national cybersecurity system The efficiency of the national cybersecurity system shall be enhanced by means of launching by 1 January 2021, by the minister competent for digitalisation, an ICT system supporting: 1. 2. 3. 4. 5. cooperation of entities of the national cybersecurity system; generation and transfer of recommendations of activities increasing the level of cybersecurity; incident reporting and handling; risk assessment at the national level; cyber threat warnings. Competent authorities responsible for supervision of ICT systems in sectors where essential and digital services are provided shall take actions to support the operators and providers in ensuring the security of their services. To this end, the competent authorities shall have a right to issue organisational and technical recommendations and provide tools and knowledge regarding the best sectoral and cross-sectoral practices which increase cybersecurity. Development of the national cybersecurity system also entails the further increasing of capacity of institutions dealing with cybersecurity at the operational level, including the three CSIRTs at the national level and cooperating with them sectoral cybersecurity teams as well as information sharing 14 and analysis centres. It is necessary to set up systemic solutions to share information and e knowledge about vulnerabilities, threats and incidents between all stakeholders. Within the framework of cooperation of government administration and local administration, the government shall recommend and act for local administration units in the area of increasing their competences in designing cybersecurity enhancing processes, specifically the selection, deployment and maintenance of technical assets that increase cybersecurity, including the utilise of state-of- the-art and secure cloud computing models, development of secure applications and utilise of secure mobile systems. Efficiency of the functioning of the national cybersecurity system shall also be increased by introducing standardisation of security solutions, including introduction of minimum security requirements for ICT networks and systems operated by the public administration. The standardisation and cybersecurity requirements, developed and used by the public administration as part of the National Cybersecurity Standards, should also become a determinant of good practices for the private sector and citizens. Sectoral and national exercises, initiated by the Government Plenipotentiary for Cybersecurity, shall verify the efficiency of the functioning of the national cybersecurity system. Moreover, the capabilities of the Armed Forces of the Republic of Poland to conduct defensive operations in cyberspace will be increased through participation in national and international cybersecurity exercises. 5.3 Development of an information sharing system for the purpose national security management In order to increase the efficiency of management of national security, actions shall be taken to ensure information sharing and consultation of responses both at the strategic and operational level, in particular between the civilian and military spheres. It is necessary to set up an information sharing system for the public administration that would be resilient to cyber threats and based on state-of-the-art information sharing technologies taking into account the need for high mobility. The system shall be used in various states of exception and states of national defence readiness. 5.4 Enhancing cybersecurity of essential and digital services and critical infrastructure Information technologies (IT) used by operators of essential services, digital service providers, critical infrastructure operators (including telecommunications operators) are a critical element in 15