natgillin/translations-raw huggingface dataset:
The Cybersecurity Emergency Fund is a proposed action under the Joint Communication ‘Resilience, Deterrence and Defence: Building strong cybersecurity for the EU’, JOIN(2017) 450/1.
Mreža skupin CSIRT: mreža skupin za odzivanje na incidente na področju računalniške varnosti združuje v vse nacionalne in vladne skupine CSIRT in CERT-EU.
From Document 12607/15 ‘IPCR Standard Operating Procedures’, agreed by Friends of the Presidency group and noted by Coreper in October 2015.
Namen mreže je zagotoviti in okrepiti izmenjavo informacij med skupinami CSIRT o grožnjah ter incidentih na področju kibernetske varnosti ter sodelovanje pri odzivanju na takšne incidente in krize.
A larger version of the figure may be found in the appendix.
Horizontalna delovna skupina Sveta za kibernetska vprašanja: delovna skupina je bila oblikovana, da zagotovi strateško in horizontalno usklajevanje vprašanj kibernetske politike v Svetu, vključena pa je lahko v zakonodajne in nezakonodajne aktivnosti.
ISAA SOPs.
Akterji
CRISIS MANAGEMENT, COOPERATION MECHANISMS AND ACTORS AT EU LEVEL
ERCC: Center za usklajevanje nujnega odziva pri Komisiji (pod Generalnim direktoratom za evropsko civilno zaščito in evropske operacije humanitarne pomoči – DG ECHO) neprekinjeno podpira in usklajuje širok nabor ukrepov za preprečevanje, pripravljenost in odziv.
Crisis management mechanisms
Ustanovljen je bil leta 2013, deluje pa kot Komisijino vozlišče za krizno odzivanje (v povezavi z drugimi kriznimi središči EU) in tudi kot osrednja kontaktna točka IPCR, ki je na voljo neprekinjeno.
Integrated Political Crisis Response arrangements (IPCR): the Integrated Political Crisis Response arrangements (IPCR), approved by the Council on 25 June 2013 [1], are designed to facilitate a timely coordination and response at EU political level in the event of a major crisis.
Europol/EC3: Evropski center za boj proti kibernetski kriminaliteti (EC3) pri Europolu, ustanovljen leta 2013, podpira kazenski pregon kibernetske kriminalitete v EU.
The IPCR also support the coordination at political level of the response to the invocation of the solidarity clause (Article 222 TFEU), as defined in Council Decision 2014/415/EU on the implementation by the Union of the solidarity clause adopted on 24 June 2014.
nudi operativno in analitično podporo preiskavam v državah članicah in deluje kot osrednje vozlišče za informacije o kriminaliteti ter podpira obveščevalne dejavnosti in preiskave v državah članicah, in sicer z operativno analizo, usklajevanjem in strokovnim znanjem kot tudi z visoko specializiranimi podpornimi zmogljivostmi za tehnično in digitalno forenziko.
The ICPR Standard Operating Procedures [2] (SOPs) set out the activation process and subsequent actions to be taken.
CERT-EU: skupina za odzivanje na računalniške grožnje za evropske institucije, organe in agencije je pooblaščena za izboljšanje zaščite institucij, organov in agencij EU pred kibernetskimi grožnjami.
ARGUS: Crisis coordination system established by the European Commission in 2005 to provide a specific coordination process in case of a major multisectoral crisis.
Je članica mreže skupin CSIRT.
It is supported by a general rapid alert system (IT tool) with the same name.
CERT-EU ima sklenjene tehnične sporazume o izmenjavi informacij o kibernetskih grožnjah z zmogljivostmi NATO CIRC, nekaterimi tretjimi državami in glavnimi komercialnimi akterji na področju kibernetske varnosti.
ARGUS foresees two phases, with Phase II (in case of major multi-sectoral crisis) triggering meetings of the Crisis Coordination Committee (CCC) under the authority of the Commission President or a Commissioner to whom responsibility was assigned.
Obveščevalna skupnost EU je sestavljena iz Obveščevalnega in situacijskega centra EU (INTCEN) ter Obveščevalnega direktorata Vojaškega štaba EU (EUMS INT) v okviru ureditve SIAC, tj. enotne zmogljivosti za analizo obveščevalnih podatkov.
The CCC brings together representatives of relevant Commission DGs, Cabinets, and other EU services in order to lead and coordinate the Commission's response to the crisis.
Poslanstvo SIAC je visokemu predstavniku Unije za zunanje zadeve in varnostno politiko ter Evropski službi za zunanje delovanje (ESZD) zagotavljati obveščevalne analize, zgodnje opozarjanje in situacijsko zavedanje.
Chaired by the Deputy Secretary-General, the CCC assesses the situation, considers options and takes actionable decisions as regards the EU tools and instruments under the Commission's responsibility, and ensures that the decisions are implemented [3] [4].
SIAC svoje storitve nudi različnim nosilcem odločanja v EU na področju skupne zunanje in varnostne politike (SZVP), skupne varnostne in obrambne politike (SVOP) ter protiterorizma (PT) kot tudi državam članicam.
EEAS Crisis Response Mechanism: The EEAS Crisis Response Mechanism is a structured system for the EEAS to respond to crisis and emergencies having an external nature or an important external dimension — including hybrid threats — potentially or actually impacting the EU interests or those of any Member States.
EU INTCEN in EUMS INT nista operativni agenciji in nimata zmogljivosti za zbiranje informacij.
By ensuring participation of relevant Commission as well as Council Secretariat officials to its meetings, the CRM facilitates synergy between diplomatic, security and defence efforts with financial, trade and cooperation instruments managed by the Commission.
Operativna obveščevalna raven je odgovornost držav članic.
The Crisis Cell can be activated for the duration of the crisis.
SIAC se ukvarja samo s strateško analizo.
Cooperation mechanisms
Hibridna fuzijska celica EU: skupno sporočilo o preprečevanju hibridnih groženj iz aprila 2016 določa hibridno fuzijsko celico EU (EU HFC) kot osrednjo točko za vse analize virov hibridnih groženj v EU: njen mandat je Komisija odobrila decembra 2016 na podlagi posvetovanja med službami.
CSIRTs Network: The Computer Security Incident Response Team Network brings together all the national and governmental CSIRTs and CERT-EU.
Hibridna fuzijska celica EU, ki se nahaja v centru INTCEN, je del zmogljivosti SIAC in zato deluje skupaj s štabom EUMS INT ter ima stalnega vojaškega člana.
The purpose of the network is to enable and enhance information-sharing amongst the CSIRTs on threats and cybersecurity incidents and also to cooperate in responding to cybersecurity incidents and crises.
Hibridno pomeni namerno uporabo, s strani državnega ali nedržavnega akterja, kombinacije različnih tajnih/odkritih, vojaških/civilnih orodij in vzvodov, kot so kibernetski napadi, dezinformacijske kampanje, vohunjenje, ekonomski pritisk, uporaba nadomestnih sil ali druge subverzivne aktivnosti.
Council Horizontal Working Party on Cyber Issues: the Working Party was established to ensure the strategic and horizontal coordination of cyber policy issues in the Council and can be involved in both legislative and non-legislative activities.
EU HFC deluje s široko mrežo kontaktnih točk znotraj Komisije in držav članic, da zagotovi celosten odziv/pristop celotne vlade, ki je potreben za boj proti različnim izzivom.
Actors
SITUACIJSKA SOBA EU: situacijska soba EU je del Obveščevalnega in situacijskega centra EU (INTCEN) ter ESZD zagotavlja operativne zmogljivosti, da zagotovi takojšen in učinkovit odziv na krize.
ENISA: The European Union Agency for Network and Information Security was set up in 2004.
Je civilno-vojaški organ v stalni pripravljenosti, ki neprekinjeno zagotavlja globalno spremljanje in situacijsko zavedanje.
The Agency works closely with Members States and the private sector to deliver advice and solutions on issues such as the pan-European Cyber Security Exercises, the development of national cyber security strategies, CSIRTs cooperation and capacity building.
Relevantni instrumenti
ENISA collaborates directly with CSIRTs throughout the EU and is the Secretariat of the CSIRTs network.
Okvir za skupni diplomatski odziv EU na zlonamerne kibernetske dejavnosti: okvir, sprejet junija 2017, je del pristopa EU h kibernetski diplomaciji, ki prispeva k preprečevanju konfliktov, odpravi groženj za kibernetsko varnost in večji stabilnosti v mednarodnih odnosih.
ERCC: The Emergency Response Coordination Centre in the Commission (under the Directorate-General for European Civil Protection and Humanitarian Aid Operations — DG ECHO) supports and coordinates a wide range of prevention, preparedness and response activities on 24/7 basis.
Okvir v celoti izkorišča ukrepe skupne zunanje in varnostne politike, po potrebi vključno z restriktivnimi ukrepi.
Inaugurated in 2013, it acts as the hub of the Commission's crisis response (liaising with other EU crisis rooms) including as the central IPCR 24/7 contact point.
Uporaba ukrepov v tem okviru bi morala spodbujati sodelovanje, olajšati blaženje neposrednih in dolgoročnih groženj ter na dolgi rok vplivati na ravnanje odgovornih storilcev in morebitnih napadalcev.
Europol/EC3: The European Cybercrime Centre (EC3) set up in 2013 within Europol supports the law enforcement response to cybercrime in the EU.
KOORDINIRANJE UPRAVLJANJA KIBERNETSKE KRIZE V OKVIRU IPCR – HORIZONTALNO UPRAVLJANJE IN POLITIČNA ESKALACIJA
offers operational and analytical support to Member States' investigations and serves as the central hub for criminal information and intelligence supporting operations and investigations by Member States with operational analysis, coordination and expertise as well as highly specialised technical and digital forensic support capabilities.
Ureditve IPCR se lahko uporabijo (in so se že) za obravnavo tehničnih in operativnih vprašanj, vendar vedno s političnega/strateškega vidika.
CERT-EU: the Computer Emergency Response Team of the EU Institutions, Bodies and Agencies has a mandate to improve the protection of the EU institutions, bodies and agencies against cyber threats.
V smislu eskalacije se ureditve IPCR lahko uporabijo glede na stopnjo krize, in sicer s prehodom z „načina spremljanja“ na „način izmenjave informacij“, ki je prva raven aktiviranja IPCR, in na „popolno aktivacijo IPCR“.
It is a member of the CSIRTs network.
Odločitev za način popolne aktivacije je v pristojnosti rotirajočega predsedstva Sveta EU.
CERT-EU has technical agreements on sharing information about cyber threats with NATO CIRC, some third countries and major commercial actors in the field of cybersecurity.
Komisija, ESZD in generalni sekretariat Sveta lahko aktivirajo IPCR v način izmenjave informacij.
The EU Intelligence Community comprises the EU Intelligence Analysis Centre (INTCEN) and EU Military Staff (EUMS) Intelligence Directorate (EUMS INT) under the SIAC arrangement of the Single Intelligence Analysis Capacity (SIAC).
Način spremljanja in način izmenjave informacij sprožita različne ravni izmenjave informacij, pri čemer način izmenjave informacij aktivira zahtevo po pripravi poročil ISAA.
SIAC mission is to provide intelligence analyses, early warning and situational awareness to the High Representative of the European Union for Foreign Affairs and Security Policy and to the European External Action Service (EEAS).
Popolna aktivacija k sklopu orodij doda okrogle mize IPCR, čemur se pridruži predsedstvo (običajno predsednik Coreperja II ali strokovnjak na ravni svetovalcev stalnih predstavništev, izjemoma pa so se okrogle mize organizirale na ministrski ravni).
SIAC offers its services to the various EU decision making bodies in the fields of the Common Foreign and Security Policy (CFSP), the Common Security and Defence Policy (CSDP) and counterterrorism (CT), as well as to the Member States.
Predsedstvo (običajno predsednik Coreperja) ima vodilno vlogo
EU INTCEN and EUMS INT are not operational agencies and do not have any collection capability.
Za Evropski svet kabinet predsednika
The operational level of intelligence is the Member States' responsibility.
Za Evropsko komisijo raven namestnika generalnega sekretarja/generalnih direktoratov in/ali strokovnjakov
SIAC only deals with strategic analysis.
Za ESZD raven namestnika generalnega sekretarja/izvršnega direktorja in/ali področnih strokovnjakov
EU Hybrid Fusion Cell: The Joint Communication on Countering Hybrid Threats of April 2016 designates the EU Hybrid Fusion Cell (EU HFC) as the focal point for all source analysis on hybrid threats in the EU: its mandate was approved in December 2016 by the Commission through an inter-services consultation.
Za generalni sekretariat Sveta kabinet generalnega sekretarja, ekipa IPCR in odgovorni generalni direktorati Področje dejavnost: priprava splošne integrirane slike stanja in povečanje ozaveščenosti glede ozkih grl ali pomanjkljivosti na vsaki od treh ravni, zato da se obravnavajo na politični ravni, sprejemanje odločitev pri mizi, če sodijo v pristojnost udeležencev, ali priprava predlogov za ukrepanje za Coreper II in Svet.
Based in the INTCEN, the EU Hybrid Fusion Cell is part of the SIAC and hence works jointly with the EUMS INT and has a permanent military member assigned.
(ni aktivno): ustvarijo se lahko strani v zvezi s spremljanjem IPCR, da se sledi poteku dogodkov, ki lahko eskalira v krizo s posledicami za EU;
Hybrid refers to the deliberate use by a State or non-State actor of a combination of multiple covert/overt, military/civilian tools and levers, such as cyber-attacks, disinformation campaigns, espionage, economic pressure, use of proxy forces or other subversive activity.
(izmenjava informacij IPCR): vodstvo ISAA pripravi poročila na podlagi podatkov od služb Komisije, ESZD in držav članic (z uporabo vprašalnikov IPCR);
The EU HFC works with an extensive network of points of contact (PoCs), both within the Commission and Member States to provide the integrated response/whole of government approach required to counter diverse challenges.
(polna aktivacija IPCR): poleg poročil ISAA neformalne okrogle mize IPCR združujejo različne zadevne akterje iz držav članic, Komisije, ESZD, relevantnih agencij itd. za razpravo o pomanjkljivostih in ozkih grlih.
EU Sitroom: The EU Situation Room is part of the EU Intelligence and Situation Centre (EU INTCEN) and provides the EEAS with operational capacity to ensure an immediate and effective response to crises.
Sodelovanje in odziv:
It is a permanent civilian-military stand-by body that provides worldwide monitoring and situational awareness with a 24/7 capacity.
aktiviranje/sinhroniziranje dodatnih mehanizmov/instrumentov za krizno upravljanje, odvisno od vrste in učinka incidenta.
Relevant instruments
Ti lahko obsegajo na primer mehanizem na področju civilne zaščite, okvir za skupni diplomatski odziv EU na zlonamerne kibernetske dejavnosti ali „skupni okvir o preprečevanju hibridnih groženj“.
Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities: The Framework, agreed in June 2017, is part of the EU's approach to cyber diplomacy, which contributes to conflict prevention, the mitigation of cybersecurity threats and greater stability in international relations.
Krizno komuniciranje:
The framework makes full use of measures within the Common Foreign and Security Policy, including, if necessary, restrictive measures.
predsedstvo lahko po posvetovanju z ustreznimi službami Komisije, generalnim sekretariatom Sveta in ESZD aktivira mrežo za krizno komuniciranje IPCR, da podpre oblikovanje enotnih sporočil ali preuči najučinkovitejša komunikacijska orodja.
The use of the measures within the Framework should encourage cooperation, facilitate mitigation of immediate and long-term threats and influence the behaviour of the responsible perpetrator and potential aggressors in the long term.
KRIZNO UPRAVLJANJE KIBERNETSKE VARNOSTI V SISTEMU ARGUS – IZMENJAVA INFORMACIJ ZNOTRAJ EVROPSKE KOMISIJE
CYBERSECURITY CRISIS COORDINATION IN THE IPCR ARRANGEMENTS — HORIZONTAL COORDINATION LAYER AND POLITICAL ESCALATION
Zaradi soočanja z nepričakovanimi krizami, ki so zahtevale ukrepanje na evropski ravni, tj. teroristični napadi v Madridu (marca 2004), cunami v jugovzhodni Aziji (decembra 2004) in teroristični napadi v Londonu (julija 2005), je Komisija leta 2005 vzpostavila sistem za usklajevanje ARGUS, ki ga podpira istoimenski sistem za hitro opozarjanje [5] [6].
The IPCR arrangements can be (and have been) used to address technical and operational issues, but always from a political/strategic angle.
Cilj je zagotoviti poseben postopek za krizno upravljanje v primeru večje večsektorske krize, da se omogoči izmenjava informacij v zvezi s krizo v realnem času in zagotovi hitro odločanje.
In terms of escalation, the IPCR can be used according to the level of the crisis by moving from ‘monitoring mode’, to ‘information-sharing mode’ which is the first level of IPCR activation, and ‘IPCR full activation’.
ARGUS opredeljuje dve fazi, odvisno od resnosti dogodka:
Activation in full mode is a decision of a rotating Presidency of the Council of the EU.
Faza I: se uporablja za „izmenjavo informacij“ med krizo omejenega obsega
The Commission, EEAS and GSC can activate the IPCR in information-sharing mode.
Primeri nedavnih dogodkov, o katerih se je poročalo v fazi I, so gozdni požari na Portugalskem in v Izraelu, napad v Berlinu leta 2016, poplave v Albaniji, hurikan Matthew na Haitiju in suša v Boliviji.
Monitoring and information-sharing trigger different levels of information exchange, with information-sharing activating a demand for the production of ISAA reports.
Vsak GD lahko odpre dogodek faze I, ko presodi, da je položaj na njegovem področju dovolj resen, da upraviči izmenjavo informacij ali ima od nje koristi.
Full activation adds IPCR round table meetings to the toolbox, bringing to the table the Presidency (typically the Coreper II chair, or a subject expert at PermRep Counsellor level but exceptionally round tables were held at Ministerial level).
Tako lahko na primer GD CNECT ali GD HOME lahko odpre dogodek faze I, ko presodi, da je kibernetski položaj na njegovem področju dovolj resen, da upraviči izmenjavo informacij ali ima od nje koristi.
The rotating Presidency (typically Coreper Chair) is in the lead
Faza II: se sproži v primeru večje večsektorske krize ali predvidene ali neposredne nevarnosti za Unijo.
For the European Council, the Cabinet of the President
Faza II sproži poseben postopek usklajevanja, ki Komisiji omogoči sprejemanje odločitev ter upravljanje hitrega, usklajenega in celostnega odziva, in sicer na najvišji ravni na svojem področju pristojnosti ter v sodelovanju z drugimi ustanovami.
For the European Commission, DSG/DG level and/or subject experts For the EEAS, DSG/MD level and/or subject experts
Faza II je predvidena za večjo večsektorsko krizo ali predvideno ali neposredno grožnjo takšne krize.
For the GSC, the Cabinet of the SG, the IPCR team and the responsible DGs.
Primeri dejanskih dogodkov iz faze II so migracijska/begunska kriza (od leta 2015), trojna katastrofa v Fukušimi (2011) in izbruh vulkana Eyjafjallajökull na Islandiji (2010).
Scope of activities: Generating a common integrated picture of the situation and escalating awareness of bottlenecks or shortcomings at each of the three levels in order to the address them at the political level, generating decisions at the table if they fall within the remit of the participants, or to generating proposals for action that go to Coreper II and up to Council.
Fazo II aktivira predsednik na lastno pobudo ali na prošnjo člana Komisije.
(not active): IPCR monitoring pages can be generated to track developing situations that might escalate into a crisis with EU ramifications
Predsednik lahko podeli politično odgovornost za odziv Komisije komisarju, odgovornemu za službo, ki jo trenutna kriza najbolj zadeva, ali pa se odloči, da sam prevzame odgovornost.
(IPCR information-sharing): ISAA reports will be drafted by the ISAA lead on the basis of input from the Commission services, EEAS, and Member States (through the IPCR questionnaires)
Faza II predvideva izredna zasedanja Odbora za krizno usklajevanje (CCC).
(IPCR full activation): in addition to ISAA reports, informal IPCR round tables bring together different actors concerned in the MS, the Commission, EEAS, relevant agencies, etc. to discuss shortcomings and bottlenecks.
K zasedanju pozove predsednik ali komisar, ki mu je bila podeljena odgovornost.
Cooperation and response:
Zasedanja skliče generalni sekretar z informacijskim orodjem ARGUS.
Activate/synchronise additional crisis management mechanisms/instruments depending on nature and impact of the incident.
Odbor CCC je posebna operativna struktura za krizno upravljanje, ustanovljena za vodenje in usklajevanje Komisijinega odzivanja na krize, ki združuje predstavnike vseh zadevnih generalnih direktoratov Komisije, kabinetov in drugih služb EU.
These may include, for example the Civil Protection Mechanism, the Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities or the ‘Joint Framework on countering hybrid threats’.
Odbor CCC, ki mu predseduje namestnik generalnega sekretarja, oceni stanje, preuči možnosti in sprejme odločitve ter zagotovi, da se odločitve in ukrepi izvajajo, hkrati pa zagotovi doslednost in skladnost odziva.
Crisis communications:
Podporo odboru CCC zagotovi generalni sekretar.
The IPCR Crisis Communicator's Network may be activated by the Presidency, after consultation with the relevant services in the Commission, GSC and EEAS, in order to support the creation of common messages, or elaborate on the most effective communication tools.
MEHANIZEM ESZD ZA KRIZNO ODZIVANJE
CYBERSECURITY CRISIS MANAGEMENT IN ARGUS — INFORMATION-SHARING WITHIN THE EUROPEAN COMMISSION
Mehanizem ESZD za krizno odzivanje (CRM) se aktivira v resnih okoliščinah ali izrednih razmerah, ki se nanašajo na ali vključujejo zunanjo razsežnost EU.
Facing unexpected crises that required action at European level, i.e. the Madrid terrorist attacks (March 2004), the South-East Asia Tsunami (December 2004) and the London terrorist attacks (July 2005), the Commission in 2005 established the ARGUS coordination system, supported by an eponymous general rapid alert system [5] [6].
Mehanizem CRM aktivira namestnik generalnega sekretarja za krizno odzivanje po posvetovanju z visokim predstavnikom in podpredsednikom ali generalnim sekretarjem.
It aims to provide a specific crisis coordination process in case of a major multisectoral crisis, to enable sharing crisis-related information in real time and ensure rapid decision-making.
Namestnik generalnega sekretarja za krizno odzivanje lahko aktivira mehanizem za krizno odzivanje na zahtevo visokega predstavnika in podpredsednika ali generalnega sekretarja ali drugega namestnika generalnega sekretarja ali izvršni direktor.
ARGUS defines two phases depending on the severity of the event:
Mehanizem CRM prispeva k skladnosti kriznega odziva EU v okviru varnostne strategije.
Phase I: is used for ‘information-sharing’ on a crisis of limited scale
Še zlasti spodbuja sinergijo med diplomatskimi, varnostnimi in obrambnimi prizadevanji na eni strani ter finančnimi in trgovinskimi instrumenti ter instrumenti sodelovanja, ki jih upravlja Komisija, na drugi strani.
Examples of recent Phase I reported events include the forest fires in Portugal and Israel, the 2016 Berlin attack, floods in Albania, Hurricane Matthew in Haiti and the drought in Bolivia.
Mehanizem CRM je povezan s Komisijinim sistemom ARGUS in enotnimi ureditvami EU za politično odzivanje na krize (IPCR), da se izkoristijo sinergije v primeru sočasnega aktiviranja.
Any DG can open a Phase I event when it judges that a situation in its domain of competence is serious enough to warrant or benefit from information-sharing.
Situacijska soba v ESZD deluje kot komunikacijsko vozlišče med ESZD in sistemi za krizno odzivanje v Svetu in na Komisiji.
For instance, DG CNECT or DG HOME can open a Phase I event when they judge that a cyber situation in their respective domain of competence is serious enough to warrant or benefit from information-sharing.
Običajno je prvi ukrep, povezan z izvajanjem mehanizma CRM, sklic kriznega zasedanja višjih vodstev ESZD, Komisije in Sveta, ki jih kriza neposredno zadeva.