4. Implementation and delivery mechanisms of the
provisions of the document
It is assumed that the objectives and principles of the Policy will be executed taking
into account risk assessment and implemented within the specific projects.
4.1. Supervision and coordination of the implementation
Due to the international nature of the Policy the body supervising its implementation
is the Council of Ministers. The entity coordinating the implementation of the Policy,
on behalf of the Council of Ministers, is the minister responsible for informatization.
4.2. The National Response System for Computer Security
Incidents in CRP
The government of the Republic of Poland establishes a three-level National
Response System for Computer Security Incidents in CRP:
1) Level I – the level of coordination – the minister responsible for informatization;
2) Level II – computer incident response:
a) the Governmental Computer Security Incident Response Team CERT.GOV.PL
– at the same time performing the tasks of the main national team responsible
for coordinating the process of handling computer incidents in CRP,
b) Departmental Centre for Security Management of ICT Networks and Services
performing tasks in the military sphere,
3) Level III – the level of implementation – administrators responsible for
individual ICT systems operating in cyberspace.
The established response system ensures the exchange of information between teams
of government administration and CERTs (CERT Poland, TP CERT, PIONIERCERT),
CSIRT, ABUSE, telecommunications companies, within the meaning of the Act of
16 July 2004 – Telecommunications Law (OJ No. 171, item 1800, as amended), and
purveyors providing services by electronic means, within the meaning of the Act of
18 July 2002 on providing services by electronic means (OJ No. 144, item 1204, as
amended), in accordance with applicable laws, and in particular in accordance with
the Act of 29 August 1997 on the protection of personal data (OJ of 2002, No. 101,
item 926, as amended) and the Act of 5 August 2010 on the protection of classified
information (OJ No. 182, item 1228).
Page 18 of 24
Ministry of Administration and Digitisation, Internal Security Agency