A/77/92
The national cybersecurity strategy and action plan for the period 2020 –2023
was published in the Official Gazette dated 29 December 2020 and includes the
following main strategic objectives:
• Protecting critical infrastructure and increasing resilience
• National capacity-building
• Organic cybersecurity network
• Security of new-generation technologies
• Fighting against cybercrime
• Developing and fostering domestic and national technologies
• Integrating cybersecurity into national security
• Improving international cooperation.
Monitoring and measurement related to the action plan are carried out by the
Ministry of Transport and Infrastructure on the basis of determined implementation
steps, activities that are being implemented by the responsible institutions and
organizations, and measurement criteria.
At the same time, the national computer emergency response team of Türkiye,
which is located within the Information and Communication Technologies Authority,
has been coordinating the country’s cyberincident response since 2013. Besides
cyberthreat detection and cyberincident response, including before, during and after
incidents, the team ensures the implementation of preventive measures against
cyberthreats and cyberdeterrence.
The main focus areas in cybersecurity of the national computer emergency
response team are the following:
• Building of cybercapacity
• Technological measures
• Gathering and disseminating threat intelligence
• Protection of critical infrastructure.
Within the context of improving national cybersecurity, 14 sectoral computer
emergency response teams for critical sectors and infrastructure (such as energy,
health, banking and finance, water management, electronic communications and
critical public services) and more than 2,000 institutional computer emergency
response teams have also been established since 2013. All teams work 24 hours a day,
seven days a week, under the coordination of the national team, in order to mitigate
cyberrisks and combat cyberthreats. The national team uses detection and prevention
tools for monitoring, and reporting tools for information-sharing with relevant parties.
It has developed the communication platform for all computer emergency response
teams within Türkiye in order to distribute alarms, warnings and security notices,
which provides an efficient and secure communications channel.
The national team organizes and supports training courses, summer camps and
competitions on cybersecurity, which are open to several communities. In addi tion, it
provides training to computer emergency response teams on topics such as malware
analysis and log analysis. Over 5,000 people had been trained in different areas of
cybersecurity by the national team as of April 2022.
The national team has been accepted into the MITRE Corporation’s Common
Vulnerabilities and Exposures (CVE) programme and, in this context, it assigns CVE
22/34
22-08761
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents