A/74/120
security; and second, for the competency to be acquired that will allow administrativ e
and technological precautions to be taken to maintain the absolute security of all
systems and stakeholders in national cyberspace.
Each action in the strategy and action plan has been conducted by the Min istry
of Transport and Infrastructure and related bodies, and all the progress for each action
has been monitored by the Ministry.
Furthermore, the Information and Communication Technologies Authority has
been the national Computer Emergency Response Team of Turkey since 2013. It is
responsible for all regulatory functions regarding electronic communications and
postal services in Turkey. In addition, it has been given the power to take measures
necessary to fight against cyberattacks to ensure national cybersecu rity. The Team
acts as the coordination centre at the national level, in order to identify threats against
the country’s cybersecurity, take measures for reducing or eliminating the impact of
likely cyberattacks and share information with defined actors. It provides
coordination with all stakeholders, such as public or private institutions and
individuals, for the detection and removal of cyberthreats. Its main focus areas in
cybersecurity are:
• Cybercapacity-building
• Technological measures
• Gathering and diffusing threat intelligence
• Protection of critical infrastructure
In capacity-building, activities include human resources, training and
preparations. Within the context of these activities, we organize “capture the flag”
competitions on cybersecurity. We believe that human resources are one of the most
important factors in cybersecurity. Within the context of the national Computer
Emergency Response Team, we carry out key projects for capacity -building. In this
respect, we organize cybersecurity training for institutional Computer Emergency
Response Teams from various critical sectors, such as energy, health and public
institutions. We also conduct hands -on training and competitions for students and
graduates. In the past two years, over 2,500 trainees have attended our cybersecurity
training programmes.
We have also established a cyberrange laboratory in order to improve our
training programmes and provide more opportunities for hands -on activities. The
laboratory is also beneficial for measuring the expertise level and provides a
certification programme for attendees.
Our studies relating to technological measures involve early detection, alarms
and warning activities. For this purpose, we have developed some detection and
prevention systems. These systems play a huge role in increasing the level of national
cybersecurity in the country by providing visibility and detecting the command and
control centres of botnets and malicious software.
In the scope of Turkey’s approach to enhancing cybersecurity, cyberthreat
intelligence is another main focus area to be underlined. Within this context, we work
in coordination with several parties, such as Internet actors, international
organizations, judicial authorities, research centres and private companies. In
addition, sectoral Computer Emergency Response Teams for critical infrastructure
and more than 1,000 institutional Computer Emergency Response Teams have been
established under public and private institutions.
Furthermore, since cyberspace is a borderless field, it is hard for a party to
ensure its cybersecurity on its own. It is a multi-stakeholder and interdisciplinary
36/39
19-10580
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents