NeDAP ICT Security Action Line

1
NeDAP ICT Security Action Line

• Arvo Ott
• Jaak Tepandi
• Estonia

2
Secure communications including digital signatures

• Ideas for Today and Tomorrow

3
Vision Statement

• Acceleration of e-commerce and e-government via
  secure communications that lift barriers and
  inspire confidence of business and consumers

4
Goals

• To exchange information and best practices in
  order to
• improve the real use of digital signatures
• improve compatibility of the PKIs in Nordic
  countries
• inform the (business) community about the real
  effects and risks of digital signatures
• To support ensuring mutual trust and conviction
  through establishment of a common framework for
  risk analysis and basic software security
  solutions

5
The problems today

• The real use of digital signatures is developing
  slowly
• It is not clear how well the public key
  infrastructures of the Nordic countries are
  compatible with each other
• The business community is uncertain about the
  real effects and risks of digital signatures

6
Methods and activities (1)

• Active partnership with industry in the use of
  secure communications including digital
  signatures
• Support of educational measures, seminars,
  conferences on e-commerce, digital signature,
  risk analysis, and security solutions
• Supporting security certifications through
  co-ordination of efforts and mutual recognition

7
Methods and activities (2)

• Supporting the spread of common methods for risk
  analysis in companies and the establishment of
  basic software security solutions
• Developing a co-ordinated approach to fight
  against cybercrime and illegal/harmful content on
  the internet
• Supporting SME security certifications through
  co-ordination of efforts and mutual recognition

8
Exchange of best practices in the project scope

• By setting up forums for business and general
  public
• The topics (examples)
• application of digital signatures in document
  management and business settlements
• application of risk analysis and preventive
  security frameworks to maintain necessary
  sustainability of SMEs
• supporting SME security certifications

9
Action items

• Conference on the interoperability, development
  and use of digital signatures in the Nordic
  countries
• A website on the interoperability, development
  and use of digital signatures in the Nordic
  countries
• Working group on SME security certifications in
  the Nordic countries

10
Organisation alternatives

• (A) A NeDAP Action Line Expert Group
• agree with participants
• proposal for the working plan, budget, schedule
• find financing
• initiate activities
• (B) Ad hoc actions (eg conferences) with
  available resources