Supply Chain Integrity - ENISA · Supply Chain Integrity and Security Assurance for ... Do not add objects or text in the footer area ... business society entertainment family

Slide title

70 pt

CAPITALS

Slide subtitle

minimum 30 pt

Supply Chain Integrity and Security Assurance for ICT

Mats Nilsson

Slide title

70 pt

CAPITALS

Slide subtitle

minimum 30 pt

The starting point

2 B Internet

users

5+ B Mobile

subscriptions

85% Population

coverage

10 years of Daily

upload

200.000 SMS Each second

E-Books surpassing Print sales

© Ericsson AB 2012 | Page 2

Slide title

44 pt

Text and bullet level 1

minimum 24 pt

Bullets level 2-5

minimum 20 pt

Characters for Embedded font: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~¡¢£¤¥¦§¨©ª«¬®¯°±²³´¶·¸¹º»¼½ÀÁÂÃÄÅÆÇÈËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀāĂăąĆćĊċČĎďĐđĒĖėĘęĚěĞğĠġĢģĪīĮįİıĶķĹĺĻļĽľŁłŃńŅņŇňŌŐőŒœŔŕŖŗŘřŚśŞşŠšŢţŤťŪūŮůŰűŲųŴŵŶŷŸŹźŻżŽžƒȘșˆˇ˘˙˚˛˜˝ẀẁẃẄẅỲỳ–—‘’‚“”„†‡•…‰‹›⁄€™ĀĀĂĂĄĄĆĆĊĊČČĎĎĐĐĒĒĖĖĘĘĚĚĞĞĠĠĢĢĪĪĮĮİĶĶĹĹĻĻĽĽŃŃŅŅŇŇŌŌŐŐŔŔŖŖŘŘŚŚŞŞŢŢŤŤŪŪŮŮŰŰŲŲŴŴŶŶŹŹŻŻȘș−≤≥fifl

ΆΈΉΊΌΎΏΐΑΒΓΕΖΗΘΙΚΛΜΝΞΟΠΡΣΤΥΦΧΨΪΫΆΈΉΊΰαβγδεζηθικλνξορςΣΤΥΦΧΨΩΪΫΌΎΏ

ЁЂЃЄЅІЇЈЉЊЋЌЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯЁЂЃЄЅІЇЈЉЊЋЌЎЏѢѢѲѲѴѴҐҐәǽẀẁẂẃẄẅỲỳ№

Do not add objects or

text in the footer area Patrik Palm | Security Assurance | © Ericsson AB 2013 | 2013-04-15 | Page 3

Cybersecurity and mobility

friends

social networks

business

society

entertainment

family

communities

partners

customers

daily life

management

devices

see, talk, text

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






Cyber security PERSPECTIVES

Infrastructure VENDORS

Operators of infrastructure

THREATS & RISKS

Regulations & Standards

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






› User behavior

› Malicious threats

› Devices and applications

› Mobile device, application and

content management

› Machine to Machine networks

› Emerging areas:

– Cloud, HetNets, Big Data

Threats and RISKS

Complex

And

Rapidly

Evolving

environment

THREATS & RISKS

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






› Business and Society is highly

dependent of Mobile Networks

› Secure resilience to cyber

incidents

– Harden infrastructure

– Improve ability to defend

– Recover quickly – business

continuity

OPERATOR of infrastructure

MANAGE CONDITIONS

AND CONSEQUENCES

OF CYBER RISKS

Infrastructure Operators

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






› Product Security Properties

› Security assurance in product

development and supply chain

› Security in Network Deployment

and Operations

› Pro-active industry Collaboration

ENABLER

FOR

reducing RISKS

AND improving resilience

VENDOR of INFRASTRUCTURE

INFRASTRUCTURE VENDORS

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






Security TRENDS (I)

new devices new communication

patterns new applications

new networks

HetNet/SDN mobile broadband

cloud

and

big data

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






NETWORK

DEVICES

APPLICATIONS

CONTENT

Network evolution to mobile broadband

Network is critical infrastructure for consumers,

business and public services

Devices:

Phones transforming into computers and

entertainment

Applications:

Mobile malware, e-payment attacks, botnets

Content:

Secure storage, transmission and sharing

Technology:

Open source software

Cloud and Big Data analytics

SECURITY TRENDS (II)

NETWORK

DEVICES

APPLICATIONS

CONTENT

Network evolution to mobile broadband

Network is critical infrastructure for consumers,

business and public services

Devices:

Phones transforming into computers and

entertainment

Applications:

Mobile malware, e-payment attacks, botnets

Content:

Secure storage, transmission and sharing

NETWORK

DEVICES

APPLICATIONS

CONTENT

TECHNOLOGY

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






PRESENTATION

INFORMATION SLIDE

Evolving to meet customer expectations

Managing

KPIs

Managing

Network

Managing

Business Risk

Busin

ess v

alu

e

Relationship complexity

Trust is gained by a systematic approach to

threats across the whole environment, including SCI

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






ericsson approach ON Security

END TO END:

COMPLIANCE

MONITORING

LOGGING

AUDITS

TECHNOLOGY AND

SECURE OPERATIONS

SECURE SERVICES

SCI

ADJUST AND

FILL GAPS

RELEVANT STANDARDS

MARKET & CUSTOMER

NEEDS

BEST PRACTICES

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






Our perspective

ISO27k ASSESSMENT ISO27k ASSESSMENT IMPROVE RESILIENCE

REDUCE CYBER

SECURITY RISK

› Secure network infrastructure to be more

resilient

› Work with operators to maintain business

optimal security in their networks

› Industry guidance through standards and

best practices

› SCI part of risk assessment and mitigation

through appropriate controls (similar to

own R&D)

› Daily co-operation and collaboration via

CERT community to improve ability to

defend and recover

Slide title

44 pt


minimum 24 pt

Bullets level 2-5

minimum 20 pt






FUTURE DIRECTIONS

Secure network infrastructure for resilience

Work with operators to maintain security in their networks

Leadership in the industry ecosystem: networks, devices,

applications

Collaboration in regulations, standards and industry bodies

Educate and communicate with users

Anticipate threats and develop innovative solutions

IMPROVE NETWORK

RESILIENCE

IMPROVE NETWORK

RESILIENCE

Reduce Cybersecurity

Risk

Reduce Cybersecurity

Risk

Education &

Communication

Education &

Communication

Documents

Supply Chain Integrity - ENISA · Supply Chain Integrity and Security Assurance for ... Do not add objects or text in the footer area ... business society entertainment family