7.2 ٍٕ‫ئِىبُٔبد األِٓ اٌغُجشأٍ اٌىط‬ National CyberSecurity Capabilities To evolve and establish a mature, digitally safe and secure Jordan, there are key high-level capabilities required to establish and manage effective cyber security. These capabilities can be established and grown incrementally and concurrently, in line with the strategic priorities, to ensure the delivery of the strategic objectives. Each capability has a number of supporting functions that will also be built and matured over time, this will include the National CyberSecurity Commission, in order to fully realise and manage the National CyberSecurity Strategy. The National CyberSecurity Commission will be at the heart of the national unified approach to cybersecurity including development of the key cyber security capabilities: ● ● 7.3 Strategy Development, Policy Creation and Enforcement; Enterprise Preparation Awareness; and National ٖٓ‫حأل‬ٝ ‫ؽ‬ٞ‫ كخُش حُ٘ؼ‬٠ُ‫ٍ رخٌُِٔٔش ا‬ٞ‫ط‬ُٞ‫غظِضّ ح‬٣ َ‫ ٖٓ حؿ‬ٟٞ‫ش حُٔغظ‬٤ُ‫ش ػخ‬٤٘‫ؽ‬ٝ ‫خص‬٤ٗ‫د آٌخ‬ٞ‫ؿ‬ٝ ٢ٔ‫حُشه‬ ‫ـخد‬٣‫ٌٖٔ ا‬٣ٝ ،‫ش‬٤ُ‫ رلؼخ‬٢ٗ‫زشح‬٤‫ادحسس حألٖٓ حُغ‬ٝ ‫ظ‬٤‫طؤع‬ ٖٓ‫ٓظضح‬ٝ ٢‫ـ‬٣‫خ رشٌَ طذس‬ٜ‫ظ‬٤ٔ٘‫ط‬ٝ ‫خص‬٤ٗ‫طِي حإلٌٓخ‬ ‫ذحف‬ٛ‫ن حأل‬٤‫ش ُظلو‬٤‫ـ‬٤‫خص حالعظشحط‬٣ُٞٝ‫حكن ٓغ حأل‬ٞ‫ظ‬٣ .‫ش‬٤‫ـ‬٤‫حالعظشحط‬ ‫ـخد ػذد‬٣‫ ا‬٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫خص ح‬٤ٗ‫طظطِذ حإلٌٓخ‬ ‫س‬ٞ‫ عظظط‬٢‫حُظ‬ٝ ‫ظخثق حُذحػٔش‬ُٞ‫ح‬ٝ ‫ٖٓ حُٔئعغخص‬ ‫ش‬٤٘‫ؽ‬ٝ ‫جش‬٤ٛ ‫خ اٗشخء‬ٜ٘٤‫ ٖٓ ر‬٢‫حُظ‬ٝ ،‫هض‬ُٞ‫خ ٓغ ح‬٤‫ـ‬٣‫طذس‬ ‫ادحسس‬ٝ ‫ن‬٤‫ ططز‬٠ِ‫ ُظؼَٔ ػ‬٢ٗ‫زشح‬٤‫ُألٖٓ حُغ‬ ‫ز‬٤‫ ط٘ل‬٢‫ ك‬١‫س ٓشًض‬ٝ‫جش د‬٤ُِٜ ٌٕٞ٤‫ع‬ٝ ،‫ش‬٤‫ـ‬٤‫حالعظشحط‬ ٢‫ رٔخ ك‬،٢ٗ‫زشح‬٤‫ حألٖٓ حُغ‬ٙ‫كذ طـخ‬ُٞٔ‫ ح‬٢٘‫ؽ‬ُٞ‫ ح‬ٚ‫ؿ‬ٞ‫حُظ‬ ٖٓ‫ ٓـخٍ حأل‬٢‫ش ك‬٤ُ‫ش حُظخ‬٤‫خص حألعخع‬٤ٗ‫ش حإلٌٓخ‬٣ٞ‫رُي طط‬ :٢ٗ‫زشح‬٤‫حُغ‬ .‫خ‬ٛ‫اٗلخر‬ٝ ‫خعخص‬٤‫اػذحد حُغ‬ٝ ‫ش‬٤‫ـ‬٤‫ش حالعظشحط‬٣ٞ‫● طط‬ ‫ش‬٤٘‫ؽ‬ُٞ‫ح‬ Cyber ‫ش‬٤‫ػ‬ٞ‫حُظ‬ٝ ٢‫حُٔئعغ‬ ‫● حالعظؼذحد‬ .‫ش‬٤ٗ‫زشح‬٤‫حُغ‬ .‫حالعظؼٔخس‬ٝ ‫ش‬٤ٔ٣‫حألًخد‬ٝ ‫ش‬٤٘‫ؽ‬ُٞ‫خسحص ح‬ُٜٔ‫● ح‬ ● Academia, National Skills, and Investment; .‫خ‬ُٜ ‫حالعظـخرش‬ٝ ‫ش‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫● ادحسس حُل‬ ● Cyber Incident Response and Management; ● Critical Network Infrastructure Cyber Risk and Compliance; ‫ش حُٔظؼِوش رخُشزٌخص حُلغخعش‬٤ٗ‫زشح‬٤‫● حُٔخخؽش حُغ‬ .‫خ‬ُٜ ‫حالعظـخرش‬ٝ ● Operational and Threat Intelligence Research; ● Situational Awareness Monitoring and Reporting; ● International Relationships and Partnerships. ‫ادحسس‬ٝ ‫خص ًشق‬٤ِٔ‫ ٓـخٍ ػ‬٢‫● اؿشحء حألرلخع ك‬ .‫ذحص‬٣‫ذ‬ٜ‫حُظ‬ .‫خ‬ٜ٘‫حإلرالؽ ػ‬ٝ ‫هخثغ‬ُٞ‫ رخ‬٢‫ػ‬ُٞ‫● ٓشحهزش ح‬ .‫ش‬٤ُٝ‫حُششحًخص حُذ‬ٝ ‫● حُؼالهخص‬ ٍٔ‫اٌهُئخ اٌىطُٕخ ٌألِٓ اٌغُجشا‬ National CyberSecurity Commission The National Cyber Security Commission is the centre of excellence for cyber security and provides active cyber defence to detect and respond to cyber incidents and acts as a link between Government, business, academia and citizens in the delivery of the National CyberSecurity Strategy. 7.3 ٢‫ض ك‬٤ٔ‫ ٓشًضح ُِظ‬٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫جش ح‬٤ُٜ‫طؼظزش ح‬ ٍ‫ حُلؼخ‬٢ٗ‫زشح‬٤‫ش حُذكخع حُغ‬٤‫ك‬ٞ‫ط‬ٝ ،٢ٗ‫زشح‬٤‫ٓـخٍ حألٖٓ حُغ‬ ،٢ٗ‫زشح‬٤‫حدع حألٖٓ حُغ‬ٞ‫حالعظـخرش ُل‬ٝ ١‫خص حُظلش‬٣‫ُـخ‬ ٍ‫هطخػخص حألػٔخ‬ٝ ‫ٓش‬ٌٞ‫ٖ حُل‬٤‫طَ ر‬ٝ ‫عظؼَٔ ًلِوش‬ٝ ‫ن‬٤‫خص طل��‬٣‫ٖ ُـخ‬٤٘‫حؽ‬ُٞٔ‫ح‬ٝ ‫ش‬٤ٔ٣‫حُوطخػخص حألًخد‬ٝ .‫ش‬٤‫ـ‬٤‫ذحف حالعظشحط‬ٛ‫أ‬ :٢ِ٣ ‫طظٔؼَ اٌّغإوٌُبد اٌشئُغُخ ٌٍهُئخ رٔخ‬ Key responsibilities include: ● Collating and analysing information from diverse sources to inform the cyber threat assessment and identity anomalous behaviour for investigation and action; ‫خٗخص ٖٓ ٓظخدس‬٤‫حُز‬ٝ ‫ٓخص‬ِٞ‫َ حُٔؼ‬٤ِ‫طل‬ٝ ‫● ؿٔغ‬ ‫ش‬٤ٗ‫زشح‬٤‫ذحص حُغ‬٣‫ذ‬ٜ‫شحص حُظ‬٣‫ػش ُإلرالؽ ػٖ طوذ‬ٞ٘‫ٓظ‬ ‫خص‬٣‫ش ُـخ‬٣ُٜٞ‫ ح‬٢ُٜٞ‫خص ٓـ‬٤ًِٞ‫حإلػالّ ػٖ ع‬ٝ .‫حطخخر حإلؿشحءحص حُٔ٘خعزش‬ٝ ‫ن‬٤‫حُظلو‬ ● Establishing the appropriate legal capability to support the management and discharge of all the ‫ش حُالصٓش ُذػْ ادحسس‬٤ٗٞٗ‫خص حُوخ‬٤ٗ‫ـخد حإلٌٓخ‬٣‫● ا‬ ‫ش حُٔظؼِوش‬٤ٔ٤‫حُظ٘ظ‬ٝ ‫ش‬٤ٗٞٗ‫غ حُٔظطِزخص حُوخ‬٤ٔ‫ؿ‬ National Cyber Security Strategy 2018-2023 7.2 Page 17 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬