TABLE OF CONTENTS:
1.
1.1.
1.2.
1.3.
1.4.
1.5.
1.6.
2.
3.
3.1
3.2
3.3
3.4
3.4.1
3.4.2
3.4.3
3.5
3.5.1
3.5.2
3.5.3
3.5.4
3.6
3.6.1
3.6.2
3.6.3
THE MAIN PREREQUISITES AND ASSUMPTIONS OF THE CYBERSPACE PROTECTION POLICY OF
THE REPUBLIC OF POLAND....................................................................................................................... 4
DEFINITIONS ....................................................................................................................................................................... 5
STRATEGIC OBJECTIVE....................................................................................................................................................... 6
SPECIFIC OBJECTIVES......................................................................................................................................................... 6
ADDRESSEES AND EXTENT OF IMPACT............................................................................................................................ 7
ESTABLISHING RESPONSIBILITY FOR THE SECURITY OF CRP....................................................................................... 8
COMPLIANCE OF THE POLICY WITH LEGAL ACTS.......................................................................................................... 8
CONDITIONS AND PROBLEMS OF THE CYBERSPACE AREA......................................................... 9
THE MAIN LINES OF ACTION...................................................................................................... 10
RISK ASSESSMENT............................................................................................................................................................. 10
THE SECURITY OF GOVERNMENT ADMINISTRATION PORTALS.................................................................................. 10
PRINCIPLES OF LEGISLATIVE ACTIONS.......................................................................................................................... 11
PRINCIPLES OF PROCEDURAL AND ORGANIZATIONAL ACTIONS............................................................................... 11
Management of the cyberspace security of the Republic of Poland...................................................... 11
The safety management system in organizational unit.............................................................................. 12
The role of plenipotentiaries for cyberspace security............................................................................... 12
PRINCIPLES OF EDUCATION, TRAINING AND AWARENESS-RAISING IN THE FIELD OF SECURITY.......................... 13
Training of plenipotentiaries for cyberspace security............................................................................... 13
Introduction of ICT security topics as a permanent element of higher education........................ 13
Education of clerical staff in government administration..................................................................... 13
Social campaign of education and prevention nature................................................................................ 14
PRINCIPLES OF TECHNICAL ACTIONS............................................................................................................................ 15
Research programmes................................................................................................................................................ 15
Expansion of ICT security incident response teams in government administration ...................... 15
Development of an early warning system and implementation and maintenance of preventive
solutions......................................................................................................................................................................... 16
3.6.4 Testing the level of security and the continuity of actions.................................................................. 16
3.6.5 Development of security teams............................................................................................................................. 16
4.
IMPLEMENTATION AND DELIVERY MECHANISMS OF THE PROVISIONS OF THE DOCUMENT.... 18
4.1
4.2
4.3
4.4
4.5
4.5.1
4.5.2
4.6
SUPERVISION AND COORDINATION OF THE IMPLEMENTATION................................................................................. 18
THE NATIONAL RESPONSE SYSTEM FOR COMPUTER SECURITY INCIDENTS IN CRP................................................. 18
INFORMATION EXCHANGE MECHANISM........................................................................................................................ 19
METHODS AND FORMS OF COOPERATION..................................................................................................................... 19
COOPERATION WITH ENTREPRENEURS........................................................................................................................ 19
Cooperation with manufacturers of ICT equipment and systems........................................................... 20
Cooperation with telecommunication entrepreneurs................................................................................ 20
INTERNATIONAL COOPERATION..................................................................................................................................... 20
5.
6.
FINANCING.................................................................................................................................. 21
ASSESSMENT OF EFFECTIVENESS OF THE POLICY..................................................................... 22
6.1
6.2
6.3
6.4
EXPECTED EFFECTS OF THE POLICY.............................................................................................................................. 23
EFFECTIVENESS OF ACTIONS........................................................................................................................................... 24
MONITORING THE EFFECTIVENESS OF ACTIONS AS A PART OF THE ADOPTED POLICY......................................... 24
CONSEQUENCES OF VIOLATING THE PROVISIONS OF THE POLICY............................................................................ 24