natgillin/translations-raw huggingface dataset:
The present Blueprint for coordinated response to large-scale cybersecurity incidents and crises at the Union level, annexed to this Recommendation, is the outcome of the aforementioned consultations and complements the Communication on ‘Strengthening Europe's Cyber Resilience System and Fostering a Competitive and Innovative Cybersecurity Industry’.
Pri odzivanju na kibernetsko krizo v smislu uvodne izjave 2 se bo odziv na politični ravni Unije v Svetu usklajeval v okviru enotne ureditve za politično odzivanje (IPCR) [5]; Komisija bo v postopku usklajevanja na visoki ravni večsektorskega usklajevanja uporabila sistem ARGUS [6].
The Blueprint describes and sets out the objectives and modes of cooperation between the Member States and EU institutions, bodies, offices and agencies (hereafter referred to as ‘EU institutions’) in responding to large-scale cybersecurity incidents and crises and how existing Crisis Management mechanisms can make full use of existing cybersecurity entities at EU level.
Sodelovanje v primeru kibernetskih incidentov ali kriz na nekaterih področjih urejajo sektorski mehanizmi za krizno upravljanje na ravni EU.
In responding to a cybersecurity crisis in the sense of recital 2, coordination of the response at political Union level in the Council will use the Integrated Political Crisis Response (IPCR) arrangements [5]; the Commission will use the ARGUS [6] high-level cross-sectoral crisis coordination process.
Tako so na primer v okviru evropskega globalnega satelitskega navigacijskega sistema (GNSS) vloge Sveta, visokega predstavnika, Komisije, Agencije za evropski GNSS in držav članic določene že s Sklepom Sveta 2014/496/SVZP [7], in sicer v okviru verige operativnih odgovornosti, vzpostavljene v odziv na grožnjo Uniji, državam članicam ali GNSS, tudi v primeru kibernetskega napada.
In certain areas, sectoral crisis management mechanisms at EU level provide for cooperation in case of cybersecurity incidents or crisis.
Vendar imajo pomembno vlogo tudi Komisija, visoki predstavnik in druge institucije ali službe EU, ta vloga pa izhaja iz prava Unije ali iz dejstva, da lahko kibernetski incidenti in krize vplivajo na vsa področja gospodarske dejavnosti na enotnem trgu, varnost in mednarodne odnose Unije, pa tudi na same institucije EU.
For example, in the framework of the European Global Navigation Satellite System (GNSS), Council Decision 2014/496/CFSP [7] already defines the respective roles of the Council, the High Representative, the Commission, the European GNSS Agency and the Member States within the chain of operational responsibilities set up in order to react to a threat to the Union, to the Member States or to the GNSS, including in case of cyber-attacks.
Ključni akterji na ravni Unije, vključeni v odzivanje na kibernetske krize, vključujejo nove strukture in mehanizme, vzpostavljene na podlagi direktive VOI, tj. mrežo skupin za odzivanje na incidente na področju računalniške varnosti (CSIRT), pa tudi pristojne agencije in organe, ki so Agencija Evropske unije za varnost omrežij in informacij (ENISA), Evropski center za boj proti kibernetski kriminaliteti (Europol/EC3), Obveščevalni in situacijski center EU (INTCEN), Obveščevalni direktorat Vojaškega štaba EU (EUMS INT) in situacijska soba EU (SITROOM), ki skupaj delujejo kot SIAC (Enotna zmogljivost za analize obveščevalnih podatkov), Hibridna fuzijska celica EU (v okviru INTCEN), skupina za odzivanje na računalniške grožnje za evropske institucije (CERT-EU) in Center za usklajevanje nujnega odziva pri Evropski komisiji.
Therefore, this recommendation should be without prejudice to such mechanisms.
Sodelovanje med državami članicami pri odzivanju na kibernetske incidente na tehnični ravni zagotavlja mreža skupin CSIRT, vzpostavljena z direktivo VOI.
Member States have the primary responsibility for the response in case of large-scale cybersecurity incidents or crises affecting them.
ENISA opravlja naloge sekretariata za navedeno mrežo in dejavno podpira sodelovanje med skupinami CSIRT.
The Commission, the High Representative and other EU institutions or services have however an important role, stemming from Union law or from the fact that cybersecurity incidents and crises may impact all sections of economic activity within the single market, the security and international relations of the Union, as well as the institutions themselves.
Nacionalne skupine CSIRT in CERT-EU sodelujejo med seboj in si prostovoljno izmenjujejo informacije, med drugim po potrebi v odziv na kibernetske incidente, ki prizadenejo eno ali več držav članic.
At Union level, the key actors involved in response to cybersecurity crises include the newly established NIS Directive structures and mechanisms, namely the Computer Security Incident Response Teams (CSIRTs) network, as well as the relevant agencies and bodies namely the European Union Agency for Network and Information Security (ENISA), the European Cybercrime Centre at Europol (Europol/EC3), the EU Intelligence Analysis Centre (INTCEN), EU Military Staff Intelligence Directorate (EUMS INT) and Situation Room (Sitroom) working together as SIAC (the Single Intelligence Analysis Capacity), the EU Hybrid Fusion Cell (based in INTCEN), the Computer Emergency Response Team for the EU institutions (CERT-EU) and the Emergency Response Coordination Centre in the European Commission.
Na zahtevo predstavnika skupine CSIRT države članice lahko obravnavajo in po možnosti opredelijo usklajen odziv na incident, ki se je zgodil na ozemlju pod pristojnostjo te iste države članice.
Cooperation amongst Member States in responding to cybersecurity incidents at technical level is provided by the CSIRTs Network established by the NIS Directive.
Zadevni protokoli bodo določeni v standardnih operativnih postopkih [8] mreže skupin CSIRT.
ENISA provides the secretariat for the Network and actively supports the cooperation among the CSIRTs.
Mreža skupin CSIRT je zadolžena tudi za obravnavanje, iskanje in določanje nadaljnjih oblik operativnega sodelovanja, vključno s kategorijami tveganj in incidentov, zgodnjim opozarjanjem, medsebojno pomočjo ter načeli in načini usklajevanja pri odzivanju držav članic na čezmejna tveganja in incidente.
The national CSIRTs and the CERT-EU cooperate and exchange information on a voluntary basis including, when necessary, in response to cybersecurity incidents that affect one or more Member States.
Skupina za sodelovanje, vzpostavljena s členom 11 direktive VOI, je zadolžena za strateško usmerjanje dejavnosti mreže skupin CSIRT, obravnavo zmogljivosti in pripravljenosti držav članic, prostovoljno ocenjevanje nacionalnih strategij za varnost omrežij in informacijskih sistemov ter učinkovitosti skupin CSIRT in določitev najboljših praks.
At the request of a representative of a Member State's CSIRT, they may discuss and, where possible, identify a coordinated response to an incident that has been identified within the jurisdiction of that same Member State.
Namensko delovno telo znotraj skupine za sodelovanje pripravlja smernice za priglasitev incidentov v skladu s členom 14(7) direktive VOI v zvezi z okoliščinami, v katerih morajo izvajalci bistvenih storitev priglasiti incidente v skladu s členom 14(3), ter obliko in postopek teh priglasitev [9].
Relevant procedures will be set out in CSIRTs Network's Standard Operating Procedures (SOPs) [8].
Zavedanje in razumevanje situacije v realnem času, položaja glede tveganja in groženj, pridobljena s pomočjo poročil, ocen, raziskav, preiskav in analiz, sta ključnega pomena za sprejemanje dobro premišljenih odločitev.
The CSIRTs network is also tasked with discussing, exploring and identifying further forms of operational cooperation, including in relation to categories of risks and incidents, early warnings, mutual assistance, principles and modalities for coordination, when Member States respond to cross-border risks and incidents.
Takšno „situacijsko zavedanje“ vseh zadevnih zainteresiranih strani je ključno za učinkovit in usklajen odziv.
The Cooperation Group established by Article 11 of the NIS Directive is tasked with providing strategic guidance for the activities of the CSIRTs network and discussing capabilities and preparedness of the Member States, and, on a voluntary basis, evaluating national strategies on the security of network and information systems and the effectiveness of CSIRTs, and identifying best practice.
Situacijsko zavedanje vključuje tako elemente vzrokov za incident, kot tudi njegovih učinkov in izvora.
A dedicated work stream within the Cooperation Group is preparing incident notification guidelines, pursuant to Article 14(7) of the NIS Directive, concerning the circumstances in which operators of essential services are required to notify incidents pursuant to Article 14(3) and the format and procedure for such notifications [9].
Znano je, da je to odvisno od izmenjave in deljenja informacij med zadevnimi stranmi v ustrezni obliki, s skupno taksonomijo za opis incidenta in na ustrezno zaščiten način.
Awareness and understanding of the real-time situation, risk posture, and threats gained through reporting, assessments, research, investigation, and analysis, is vital to enable well-informed decisions This ‘situational awareness’ — by all relevant stakeholders — is essential for an effective coordinated response.
Na kibernetske incidente se je mogoče odzvati na različne načine, od izbire tehničnih ukrepov, ki lahko vključujejo dva ali več subjektov, ki skupaj preiskujejo tehnične vzroke incidenta (npr. analiza zlonamerne programske opreme) ali iščejo načine, kako bi organizacije ugotovile, ali je incident prizadel tudi njih (npr. kazalniki ogroženosti), pa do operativnih odločitev glede uporabe takšnih ukrepov in, na politični ravni, incidentu ustrezno odločitev glede uporabe drugih instrumentov, na primer okvira za skupen odziv na zlonamerne kibernetske dejavnosti [10] ali protokola EU za preprečevanje hibridnih groženj [11].
Situational awareness includes elements about the causes as well as the impact and origin of the incident.
Zaupanje evropskih državljanov in podjetij v digitalne storitve je bistvenega pomena za cvetoč enotni digitalni trg.
It is recognised that this depends on exchange and sharing of information between relevant parties in a suitable format, using a common taxonomy to describe the incident and in an appropriately secure manner.
Pomembno vlogo pri blaženju negativnih učinkov kibernetskih incidentov in kriz ima zato tudi krizno komuniciranje.
Responding to cybersecurity incidents may take many forms, ranging from identifying technical measures which may entail two or more entities jointly investigating the technical causes of the incident (e.g. malware analysis) or identifying ways through which organisations may assess whether they have been affected (e.g. indicators of compromise), to operational decisions on applying such measures and, at the political level, deciding on the use of other instruments such as the Framework for a Joint response to malicious cyber activities [10] or the EU operational protocol for countering hybrid threats [11], depending on the incident.
Komuniciranje lahko poteka tudi v kontekstu okvira za skupen diplomatski odziv kot sredstvo za vplivanje na ravnanje (potencialnih) napadalcev, ki delujejo iz tretjih držav.
European citizens' and businesses' trust in digital services is essential for a flourishing digital single market.
Usklajevanje komuniciranja z javnostjo za blaženje negativnih učinkov kibernetskih incidentov in kriz ter komuniciranje z javnostjo za vplivanje na napadalca je nujno za učinkovit politični odziv.
Therefore, crisis communication plays a particularly important role in mitigating the negative effects of cybersecurity incidents and crises.
Učinkovit ukrep za blaženje velikega kibernetskega incidenta ali krize bi lahko bilo tudi obveščanje javnosti o tem, kako lahko ublažijo učinke incidenta na ravni uporabnika in organizacije (na primer z namestitvijo programskih popravkov ali sprejetjem dopolnilnih ukrepov za izogibanje grožnji).
Communication may also be used in the context of the Framework for a Joint Diplomatic Response as a means to influence the behaviour of (potential) aggressors acting from third countries.
Komisija prek infrastrukture digitalnih storitev za kibernetsko varnost instrumenta za povezovanje Evrope (IPE) razvija mehanizem za sodelovanje v okviru jedrne storitvene platforme, imenovan MeliCERTes, s katerim bodo skupine CSIRT držav članic lahko izboljšale svoje ravni pripravljenosti, sodelovanja in odzivanja v zvezi z novimi kibernetskimi grožnjami in incidenti.
Aligning the public communication to mitigate the negative effects of cybersecurity incidents and crises and the public communication to influence an aggressor is essential for a political response to be effective.
Komisija s konkurenčnimi razpisi za zbiranje predlogov za dodeljevanje nepovratnih sredstev v okviru IPE sofinancira skupine CSIRT v državah članicah, da bi se izboljšale njihove operativne zmogljivosti na nacionalni ravni.
Providing the public with information on how they can mitigate at user and organisational level the effects of an incident (for example by applying a patch or taking complementary actions to avoid the threat, etc.) could be an effective measure to mitigate a large-scale cybersecurity incident or crisis.
Vaje na področju kibernetske varnosti na ravni EU so bistvenega pomena za spodbujanje in izboljšanje sodelovanja med državami članicami in zasebnim sektorjem.
The Commission, through the Connecting Europe Facility (CEF) cybersecurity Digital Service Infrastructure, is developing a Core Service Platform cooperation mechanism, known as MeliCERTes, between participating Member States CSIRTs to improve their levels of preparedness, cooperation and response to emerging cyber threats and incidents.
V ta namen ENISA že od leta 2010 organizira redne vseevropske vaje v zvezi s kibernetskimi incidenti („Cyber Europe“).
The Commission, through competitive calls for proposals for grant awards under CEF is co-funding CSIRTs in the Member States with a view to improving their operational capacities at national level.
Svet v svojih sklepih [12] o izvajanju Skupne izjave predsednika Evropskega sveta, predsednika Evropske komisije in generalnega sekretarja Organizacije Severnoatlantske pogodbe poziva k okrepitvi sodelovanja pri kibernetskih vajah z vzajemnim sodelovanjem osebja v različnih vajah, zlasti v Cyber Coalition in Cyber Europe.
Cybersecurity exercises at EU level are essential to stimulate and improve cooperation among the Member States and the private sector.
Zaradi vedno novih groženj ter nedavnih kibernetskih incidentov se Unija sooča z vedno večjim tveganjem, zato bi morale države članice brez odlašanja, v vsakem primeru pa do konca leta 2018, sprejeti ukrepe v skladu s tem priporočilom –
To this end, since 2010, ENISA organises regular pan-European cyber incident exercises (‘Cyber Europe’).
SPREJELA NASLEDNJE PRIPOROČILO:
The Council Conclusions [12] on the Implementation of the Joint Declaration by the President of the European Council, the President of the European Commission and the Secretary-General of the North Atlantic Treaty Organisation calls for the strengthening cooperation in cyber exercises through reciprocal staff participation in respective exercises, including in particular Cyber Coalition and Cyber Europe.
Države članice in institucije EU bi morale vzpostaviti okvir EU za odzivanje na krize na področju kibernetske varnosti, ki bi v skladu z vodilnimi načeli, predstavljenimi v načrtu, vključeval v načrtu opisane cilje in načine sodelovanja.
The constantly evolving threat landscape and recent cybersecurity incidents are an indication of the increasing risk faced by the Union, Member States should act on the present recommendation without further delay and in any case by the end of 2018,
Okvir EU za odzivanje na krize na področju kibernetske varnosti bi moral zlasti določiti ustrezne akterje, institucije EU in organe držav članic na vseh potrebnih ravneh – tehnični, operativni, strateško-politični – ter po potrebi tudi standardne operativne postopke, s katerimi bi bil določen način sodelovanja med navedenimi akterji v kontekstu mehanizmov EU za krizno upravljanje.
HAS ADOPTED THIS RECOMMENDATION:
Poudariti bi bilo treba omogočanje izmenjave informacij brez nepotrebnega odlašanja ter usklajevanje odziva med velikimi kibernetskimi incidenti in krizami.
Member States and EU institutions should establish an EU Cybersecurity Crisis Response Framework integrating the objectives and modalities of cooperation presented in the Blueprint following the guiding principles described therein.
V ta namen bi si morali pristojni organi držav članic v sodelovanju prizadevati za nadaljnjo opredelitev souporabe informacij in protokolov o sodelovanju.
The EU Cybersecurity Crisis Response Framework should in particular identify the relevant actors, EU institutions and Member State authorities, at all necessary levels — technical, operational, strategic/political — and develop, where necessary, standard operating procedures that define the way in which these cooperate within the context of EU crisis management mechanisms.
Skupina za sodelovanje bi morala izkušnje v teh zadevah izmenjevati z zadevnimi institucijami EU.
Emphasis should be placed on enabling the exchange of information without undue delay and coordinating the response during large-scale cybersecurity incidents and crises.
Države članice bi morale zagotoviti, da njihovi mehanizmi za nacionalno krizno upravljanje ustrezno obravnavajo odzivanje na kibernetske incidente in določajo potrebne postopke sodelovanja na ravni EU v kontekstu okvira EU.
To this end, Member States' competent authorities should work together towards further specifying information-sharing and cooperation protocols.
V zvezi z obstoječimi mehanizmi EU za krizno upravljanje bi v skladu z načrtom morale države članice skupaj s službami Komisije in ESZD pripraviti smernice za izvajanje v praksi glede integracije svojih subjektov in postopkov za nacionalno krizno upravljanje in kibernetsko varnost v obstoječe mehanizme kriznega upravljanja na ravni EU, tj. tiste v okviru enotne ureditve za politično odzivanje in ESZD.
The Cooperation Group should exchange experiences on these matters with relevant EU institutions.
Zlasti bi morale države članice zagotoviti, da so vzpostavljene ustrezne strukture, ki v kontekstu kriznih mehanizmov EU omogočajo učinkovit pretok informacij med njihovimi organi za nacionalno krizno upravljanje in njihovimi predstavniki na ravni EU.
Member States should ensure that their national crisis management mechanisms adequately address cybersecurity incident response as well as provide necessary procedures for cooperation at EU level within the context of the EU Framework.
Države članice bi morale v celoti izkoristiti možnosti, ki so ponujene v okviru programa infrastrukture digitalnih storitev za kibernetsko varnost instrumenta za povezovanje Evrope, in v sodelovanju s Komisijo zagotoviti, da bo mehanizem za sodelovanje v okviru jedrne storitvene platforme, ki je trenutno v razvoju, zagotovil potrebne funkcije in izpolnjeval njihove zahteve po sodelovanju tudi v času dejanskih kibernetskih kriz.
As regards existing EU crisis management mechanisms, in line with the Blueprint, Member States should, together with Commission services and the EEAS, establish practical implementation guidelines as regards the integration of their national crisis management and cybersecurity entities and procedures into existing EU crisis management mechanisms, namely the IPCR and EEAS CRM.
Za še boljše tehnično in operativno sodelovanje med krizami bi morale države članice s pomočjo agencije ENISA in na podlagi preteklih prizadevanj na tem področju sodelovati pri razvoju in sprejemanju skupne taksonomije in predloge za poročila o razmerah, s katerimi bi se opisali tehnični vzroki in učinki kibernetskih incidentov.
In particular, Member States should ensure that appropriate structures are in place to enable the efficient flow of information between their national crisis management authorities and their representatives at EU level in the context of EU crisis mechanisms.
V zvezi s tem bi morale države članice upoštevati tekoče delo v okviru skupine za sodelovanje na področju smernic za priglasitev incidentov in zlasti posebnih vidikov glede oblike nacionalnih priglasitev.
Member States should make full use of the opportunities offered by the Cybersecurity Digital Service Infrastructures (DSI) programme of the Connecting Europe Facility (CEF), and cooperate with the Commission to ensure that the Core Service Platform cooperation mechanism, currently under development, provides the necessary functionalities and fulfils their requirements for cooperation also during cybersecurity crises.
Postopki, določeni v navedenem okviru, bi morali biti preskušeni in po potrebi pregledani na podlagi izkušenj, ki jih je država članica pridobila tako med sodelovanjem v diplomatskih prizadevanjih na nacionalni in regionalni ravni ter na ravni Unije, kot tudi med Natovimi vajami na področju kibernetske varnosti.
Member States, with the assistance of ENISA and building on previous work in this area, should cooperate in developing and adopting a common taxonomy and template for situational reports to describe the technical causes and impacts of cybersecurity incidents to further enhance their technical and operational cooperation during crises.
Zlasti bi morale biti preskušene v kontekstu vaj CyberEurope, ki jih organizira agencija ENISA.
In this regard, Member States should take into account the ongoing work within the Cooperation Group on incident notification guidelines and in particular aspects related to the format of national notifications.
Prva takšna priložnost bodo vaje CyberEurope v letu 2018.
The procedures laid out in the Framework should be tested and when necessary revised following lessons learnt from Member State participation in national, regional, and Union as well as cyber diplomacy and NATO cybersecurity exercises.
Države članice in institucije EU bi morale redno vaditi svoj odziv na velike kibernetske incidente in krize na nacionalni in evropski ravni, po potrebi vključno s svojim političnim odzivom in z ustrezno vključenostjo subjektov iz zasebnega sektorja.
In particular, they should be tested in the context of the Cyber Europe exercises organised by ENISA.
V Bruslju, 13. septembra 2017
Cyber Europe 2018 presents a first such opportunity.
Za Komisijo
Member States and the EU institutions should regularly practise their response to large-scale cybersecurity incidents crisis at national and European level, including their political response, where necessary and with the involvement of private sector entities as appropriate.
Članica Komisije
Done at Brussels, 13 September 2017.
Sklepi Sveta o zaščiti kritične informacijske infrastrukture „Dosežki in naslednji koraki: h globalni kibernetski varnosti“, dokument št. 10299/11, Bruselj, 27. maj 2011.
For the Commission
COM(2016) 410 final, 5. julij 2016.
Member of the Commission
Direktiva (EU) 2016/1148 Evropskega parlamenta in Sveta z dne 6. julija 2016 o ukrepih za visoko skupno raven varnosti omrežij in informacijskih sistemov v Uniji (UL L 194, 19.7.2016, str.
Council conclusions on Critical Information Infrastructure Protection ‘Achievements and next steps: towards global cyber security’, document 10299/11, Brussels, 27 May 2011.
1).
COM(2016) 410 final, 5 July 2016
Dokument št. 14540/16, 15. november 2016.
Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (OJ L 194, 19.7.2016, p.
Podrobnejše informacije so na voljo v oddelku 3.1 Dodatka o kriznem upravljanju, mehanizmih za sodelovanje in akterjih na ravni EU.
1).
Prav tam.
Document 14540/16, 15 November 2016.
Sklep Sveta 2014/496/SZVP z dne 22. julija 2014 o vidikih namestitve, delovanja in uporabe evropskega globalnega navigacijskega satelitskega sistema, ki vplivajo na varnost Evropske unije in razveljavitvi Skupnega ukrepa 2004/552/SZVP (UL L 219, 25.7.2014, str. 53).