CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND 6. Specific objective 2 – Increasing the level of resilience of information systems of the public administration and private sector, and achieving the capacity to effectively prevent and respond to incidents CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND 6.1 Development and implementation of National Cybersecurity Standards and disseminate of good practices and recommendations B ased on the expertise of technical committees of the Polish Committee for Standardisation, research centres, academia and research institutes as well as public and private entities concerned, new standards shall be developed or the existing norms and standards shall be translated into specific recommendations regarding their implementation. In order to increase the resilience to cyber threats of information systems used by the public administration it is necessary to develop National Cybersecurity Standards as a set of organisational and technical requirements regarding, in particular, the security of: • • • • • applications; mobile devices; workstations; servers and networks; cloud computing models. In order to ensure secure and cost-effective processing infrastructure of the public administration’s IT systems, which will soon start using new forms of processing and storage of information, including cloud computing, it will be necessary to develop recommendations and disseminate good practices which increase the resilience to potential cyber threats. Execution of public tasks, in particular, ones connected with cybersecurity, shall be supported by application of Polish Standards based on the European and international standards. References to standards should also be widely used over the entire life cycle of the ICT systems. It is also important to support execution of recommendations issued by market regulators. 6.2 Supply chain security Ensuring cybersecurity requires application of organisational and technical protections over the entire life cycle of the ICT systems. These actions comprise the so-called secure supply chain and include designing, developing, deploying, operating and disposing g. The term supply chain means a system which consists of subsystems of production, distribution, transport, storage and recycling of ICT systems components, as well as their installation, launch, ongoing maintenance, servicing and repairs. 18 19