Security situation in your home country (Week 10)
Cyber security situation in Estonia
In
the world of the Internet, national borders do not play a protective role:
cybercriminals cannot be prevented from “entering the country”, and there is
little help from the laws of the destination country if the criminal has not
left his home. Cybersecurity has become an integral part of the state's
internal and external security.
The
RIA Incident Handling Department operates in Estonia in the responsibilities of
CERT at the national level and detects, monitors and resolves cybersecurity
incidents in Estonian computer networks, informs about risks and organizes
preventive actions. [1]
Photo 1: CERT-EE [1] |
Technology:
- The tool allows you to send suspicious files to CERT-EE for analysis: https://paste.cert.ee/
- Sandbox CERT-EE (Allows you to control in a secure environment how operating systems running on various virtual and physical platforms will behave when a suspect file is launched): https://cuckoo.cert.ee/
- CERT-EE Alerts and Notices twitter.com/cert_ee and etc.
Training:
From my personal
experience, more and more often various companies offer both mandatory and
optional courses to improve the level of security on the Internet. For
example, I myself took a similar training in the company where I work (https://www.cybsafe.com/).
Photo 2: CubSafe |
Policy:
The
Estonian Information Security Standard (abbreviated E-ITS) will become the
basis for working with information security in the Estonian language and in
accordance with the Estonian legal space. It complies with the internationally
recognized information security management standard ISO/IEC 27001.
The goal of E-ITS is to develop and improve the level of information security of Estonian public authorities, as well as private enterprises. The Estonian Information Security Standard will present a basic security system that will help organizations create an information security system that meets their needs. [3]
In conclusion, Cybersecurity is one of Estonia's priorities as cybercriminals are constantly looking for new opportunities and, unfortunately, their attacks are becoming more accurate. Therefore, cyber departments are expected to develop more and more advanced cybersecurity systems, and enterprises should pay increased attention to this issue and apply a systematic approach.
References
1.
https://www.ria.ee/et/kuberturvalisus/cert-ee.html [1]
2. https://investinestonia.com/business-opportunities/cyber-security/
[2]
3.
https://www.ria.ee/en/cyber-security/estonian-information-security-standard.html
[3]
Comments
Post a Comment