DEFINITION OF CYBER SECURITY5
Cyber security is generally defined as:
a range of activities and other measures, both technical and non-technical, intended to protect
computers, computer networks, hard- and software and the information stored and processed
therein, including programmes and data as well as other cyberspace elements, from all threats,
including threats to national security;
the level of protection provided by these activities and measures;
joint professional endeavours, including research and development to implement and improve
these measures and increase their quality.
2
Analysis of the present situation
In Slovenia, there have already been a few proposals for systemic regulation of cyber security,
however, their implementation never took place. Nevertheless, it became clear that the country
needs a cyber security strategy that would join and direct the efforts of all stakeholders toward
strengthening and systematically regulating this important area.
Currently, the operational capacities to respond to cyber threats are distributed among SI-CERT6 as
the national response centre for network incidents, the Information Security Sector within the IT
Directorate at the Ministry of Public Administration, the Ministry of Defence for defence system and
protection against natural and other disasters, Slovenian Intelligence and Security Agency (SOVA) in
counter-intelligence activities, and the Police within its IT and telecommunications Office and the
Criminal Police Directorate, mainly in the Centre for Computer Investigations with the capacities to
combat cybercrime. Apart from the Police, which in the past five years has improved its capacities for
investigating and preventing cybercrime, all other bodies lack personnel, material and technical
resources, and organisation. Despite the shortcomings, the capacities at the operational level do
exist though a coordination body that would link the concerned stakeholders at the strategic level is
missing.
5
Dunn, M. A Comparative Analysis of Cyber security Initiatives Worldwide. V: ITU WSIS Thematic Meeting on Cyber security
[online], 2005, p. 4. Available at: https://www.itu.int/osg/spu/cyber security/docs/Background_Paper_Comparative_
Analysis_Cyber security_Initiatives_Worldwide.pdf.
6
Slovenian Computer Emergency Response Team (SI-CERT) is a national response centre for dealing with incidents in
electronic network and information security, which has been operating within the public institute ARNES since 1995. It
coordinates incident resolution, provides technical advice in the event of intrusions, infections with computer viruses and
other abuses, and issues warnings to network administrators and general public on the current threats to electronic
networks. Currently, it also performs the tasks of Government's centre for responding to network indigents (SIGOV-CERT)
and assists in the establishment of an independent centre that will be responsible for protecting the IT infrastructure of the
state administration. SI-CERT is a member of the Forum of Incident Response and Security Teams (FIRST), a member of the
group of national response centres at CERT/CC, a member of a work group of the European response centres TF-CSIRT, and
is accredited Trusted Introducer. SI-CERT is the Slovenian contact point for the security authority of the General Secretariat
of the EU Council and the national information point for the IMPACT programme of the International Telecommunication
Union (ITU).
4
Cyber Security Strategy