ITX8050

LOCKED SHIELDS 2016 version

This course has a new code - ITC8111

STRATEGY / CYBER CHALLENGE PREP version

• Instructor: Tiia Sõmer
• Topic: management of cyber security at a strategic level. The course will be taught by invited speakers (from Estonia and international), putting main effort to the practical side of strategic cyber security. The course is also designed to prepare students for the 9/12 Cyber Challenge, but participation does not guarantee a slot on the TUT team.
• First meeting: 05 Nov 2015 at 1800-1930 in ICT-315

Schedule

NB! Check for updates regularly!

05.11

Introduction to the course (Tiia Sõmer) Meedia:001_05NOV15.pptx

Strategic issues in cyber security (Rain Ottis)

Cyber Challenge 2015 experience (Wael AbuSeada)

12.11

International actors in cyberspace, role of small states in international arena (Liina Areng) Meedia:002_12NOV15_LA.pdf

E-Diplomacy (Tanel Sepp)

=== 19.11 -> 20.11

PLEASE NOTE THE CHANGE OF DATE TO 20NOV 2015 !!!

THE LECTURE WILL BE HELD IN THE SAME ROOM AS USUALLY: ICT 315

UN and Cyber Security (Peter Pedak) Meedia:003_20NOV15_PP.pdf

EU and cyber security. EU Cyber Security Structure. The functioning of EU (Luukas Ilves)

NATO and Cyber Security (Hannes Krause) Meedia:004_20NOV15_HK.pdf

26.11 -> 27.11

PLEASE NOTE THE CHANGE OF DATE TO 27 NOV 2015 !!!

THE LECTURE WILL BE HELD IN THE SAME ROOM AS USUALLY: ICT 315

Comparative analysis of cyber security strategies (Kadri Kaska)Meedia:005_27NOV15_KK.pdf

General principles of International law applicable in cyberspace (Pascale Brangetto)Meedia:006_27NOV15_PB.pdf

Writing policy briefs (Dr Mika Kerttunen)

03.12 -> 07.12

DATE HAS BEEN CHANGED TO 07 DECEMBER

Cyber security and national security. Decision-making on cyber at national level. (Kristjan Prikk) Meedia:009_07DEC15_KP.pdf

Critical Infrastructure and Critical Information Infrastructure (Urmo Sutermäe) Meedia:008_07DEC15_US.pdf

Crisis Management in Cyber (Lauri Luht) Meedia:007_07DEC15_LL.pdf

10.12

Media involvement/ strategic communications in cyber crisis (Liisa Past)

Strategic communications is a somewhat underrated aspect in crisis management. This lecture will give you insight into how STRATCOM can be used to your advantage in times of crisis. The lecture will take place in the form of seminar, please come with your questions and thoughts and be ready to discuss the topic.

WRITTEN ASSIGNMENT =

This assignment can be completed either individually or as teamwork. In individual task, you will have to provide one policy recommendation; in case you opt for teamwork you should provide policy recommendations from one perspective per person in the group. The maximum group size can be 4 persons. Deadline for submission of written assignment is 10 January 2016.

INSTRUCTIONS

You are cyber security advisor to the Government of one country. A major cyber incident is occurring that affects the country’s national security. The Head of Government needs information on the full range of ongoing crisis and policy response alternatives available to respond, and you have been tasked to develop policy recommendation to the Government. You should provide policy recommendation from one of the following perspectives:

- Crisis management at national level;

- Critical infrastructure;

- Private sector;

- Diplomacy/ international organisations;

- Legal;

- Cyber security.

To present your policy recommendation, you will have to keep in mind all aspects in order to successfully synthesize useful policy measures from the limited information available.

You will be provided with fictional information on the background and current situation of a major cyber attack. The scenario will present a fictional account of political and economic developments leading up to the cyber incident. You are restricted to the facts provided within the coming week in order to formulate your analysis. You will have to provide a WRITTEN POLICY PAPER of 1500 words. This will be an analytical paper, discussing the potential implications of the cyber attack for different state and non-state actors and exploring one policy recommendation from selected perspective as chosen in depth.

Some tips:

- Don’t fight the scenario – assume the information given is true, and explore the implications of that information, not plausibility of scenario.

- Be creative – cyber policy is an evolving discourse and there is no single correct policy response to any scenario. There can be many ideas to experiment with in responding to crisis.

- Analyse the issues – it will be more important to analyse the issues than to list all possible problems or solutions.

Information on background and current situation of cyber attack affecting the country:

The country in question is the U.S. and you are asked to give advise to the Cybersecurity Directorate of the National Security Staff. The packet attached herewith contains fictional information on the background and current situation of a major cyber attack affecting the United States. The scenario added represents fictional account of political and economic developments leading to the cyber incident. You are restricted to the facts contained in the attached documents in formulating your answers.

Your recommendation must analyse the possible strengths, weaknesses, opportunities and threats of the proposed policy alternative.

Scenario packet: Meedia:strat_course_written_assignment_2015.pdf