It is prohibited by intellectual property law or in any way illegal use of this article, with heavy civil and criminal penalties for the offender.<\/em><\/p>\n\n\n\n Developing countries are in a phase of transition to the digital age and\nare trying to develop their respective digital protection systems, while some\nother countries due to economic weaknesses or other priorities of their governments\nbelieve that they cannot to proceed with this transition digital phase. That is\na false impression.<\/p>\n\n\n\n What is needed is a detailed organizational plan to be implemented which\nwill release with the application of any fear of damage to critical\ninfrastructures of a country such as ports, airports, water and energy\ncompanies, banks, road and railway networks, refineries, etc. In this analysis\nwe will present this organisational plan that is required to be implemented a\ngovernment for the digital shielding of its country.<\/p>\n\n\n\n The organisational plan for digital shielding at the level of the country\u2019s government <\/strong><\/p>\n\n\n\n 1.<\/strong> The government of the country should designate a central directorate of Cyber-Security which in turn should create in addition to all other and a separate troubleshooting group (Computer Security Incident Response Team-CSIRT) to be subject to it.<\/p>\n\n\n\n The country’s central cyber-security directorate will be under the command of the competent ministry for the digital governance of the country with the main purpose of this directorate to draw up a detailed guide-protocol on what should do the responsible Cyber-security officer of the company that is regarded as critical infrastructure in any case of trouble.<\/p>\n\n\n\n 2.<\/strong> The government of the country in turn should create a hyper-computational centre which will aim to meet the needs of the entire public sector in the digital segment. The main core of the implementation of this project should be to reduce bureaucracy with a view to optimum service for the citizen.<\/p>\n\n\n\n In this hyper-computational centre, all the information systems of the governmental ministries of the country should be moved, except for those relating to the country’s security and defence.<\/p>\n\n\n\n 3.<\/strong> At the same time, the government of the country should prohibit public bodies-organizations themselves from implementing their own information systems and applications unless they have been given permission by the competent ministry responsible for the digital governance of the country.<\/p>\n\n\n\n The organizational plan for digital shielding at the level of\ncompany-critical infrastructure<\/strong><\/strong><\/p>\n\n\n\n All these companies that are characterized as critical infrastructures in a country, have an obligation to develop all those actions in order to achieve the maximum degree of protection of their networks while keeping backups, applying at the same time frequent periodic or non-periodic checks-controls to assess their protection measures against unwanted intruders. To achieve these, the companies will must:<\/p>\n\n\n\n Companies characterized as critical infrastructures should institutionalise the positions of the responsible cyber-security officer of the company and the data protection officer of the company.<\/p>\n\n\n\n 1.<\/strong> The company’s cyber security officer will then have to form and crew a troubleshooting team (Computer Security Incident Response Team-CSIRT).<\/p>\n\n\n\n 2.<\/strong> The responsible cyber-security officer of each company should proceed to the self-assessment of the digital protection measures selected for implementation in the company and within a reasonable period. <\/p>\n\n\n\n Usually this self-assessment period should be done upon the receipt of the guide-protocol that will be received by the country ‘s Central Cyber-Security Directorate.<\/p>\n\n\n\n 3.<\/strong> Access in a natural or digital way to the systems of cyber security, apparatus, network and information and the respective facilities of the company should be limited to the users only authorized to do so.<\/p>\n\n\n\n 4.<\/strong> Procedures for the use of appropriate “authentication and access control procedures” mechanisms should be applied to minimise any possibility of access by an unauthorised person.<\/p>\n\n\n\n 5.<\/strong> Their devices, systems and applications should be developed, maintained and managed more generally in such a way that to take into consideration the principles of digital security established initially as well as their default design in order to comply with all appropriate and proportionate safety requirements throughout their cycle of use and generally throughout their life.<\/p>\n\n\n\n 6.<\/strong> The cyber security officer in cooperation with the data protection officer should propose to the company’s management specific and appropriate policies as well as procedures and automated systems of reception and preservation backup and in such format so that the data to provide the basic services to be assured giving the possibility of their immediate recovery.<\/p>\n\n\n\n 7.<\/strong> The data protection officer of the company must not be the same person who holds the position of the responsible cyber-security officer of the company because the first one may need to check the second and vice versa.<\/p>\n\n\n\n 8.<\/strong> Each company should apply technological systems in terms of detection, recording and threat analysis.<\/p>\n\n\n\n 9.<\/strong> If in any case it is applicable, the company’s responsible cyber-security officer should separate the company’s critical infrastructure files in order to limit the risk of cyber-attack.<\/p>\n\n\n\n 10.<\/strong> Companies designated as critical infrastructures will be able to make outsourcing part of their obligations to third companies if the legislative rules are fully implemented. <\/p>\n\n\n\n 11.<\/strong> The cyber security officer and by extension the company’s CSIRT team will have to notify in immediate time, without undue delay and within 24 hours to the Central Directorate of Cyber-Security of the country of the competent ministry any incidents of violations that have an impact on the continuity of the provision of the company’s offered service. The notification of the event should contain the following information:<\/p>\n\n\n\n a) The time the\nmalicious event was perceived.<\/p>\n\n\n\n b) The detailed duration of the event, from the moment it was perceived until the time resolved and given that it resolved. <\/p>\n\n\n\n c) The total amount of information relating to the event and the magnitude of the damage or malfunction that this has caused or is going to cause if the problem did not resolve.<\/p>\n\n\n\n d) All actions followed\nand what kind of damage containment measures have been applied.<\/p>\n\n\n\n With this organizational design, the government of a country can proceed\nfearlessly the digital shielding of its critical infrastructure without having\nany problem in managing and dealing with any cyber-attacks that occur. The\ndifference is that the choice of persons who will be staffed all these positions will must be done with strict\ncriteria in order to be chosen the best of the best every time.<\/p>\n","protected":false},"excerpt":{"rendered":" In this day and age, a country’s cyber-security in protecting its companies and organizations identified as critical infrastructures is the cornerstone for this country…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1168],"tags":[1179,1178,1177],"class_list":["post-1427","post","type-post","status-publish","format-standard","hentry","category-science-technology","tag-critical-infrastructures","tag-cyber-security","tag-cyber-shielding"],"_links":{"self":[{"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=\/wp\/v2\/posts\/1427","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1427"}],"version-history":[{"count":2,"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=\/wp\/v2\/posts\/1427\/revisions"}],"predecessor-version":[{"id":1448,"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=\/wp\/v2\/posts\/1427\/revisions\/1448"}],"wp:attachment":[{"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.liberalglobe.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/www.liberalglobe.com\/wp-content\/uploads\/2019\/10\/Pleiades_two_row.jpg\")
Photo by NASA Ames Research Center<\/figcaption><\/figure><\/div>\n\n\n\n![\"\"](\"https:\/\/www.liberalglobe.com\/wp-content\/uploads\/2019\/10\/320px-Computer-USB2-card.jpg\")
Photo by Evan Amos<\/figcaption><\/figure><\/div>\n\n\n\n