natgillin/translations-raw huggingface dataset:
All other EU agencies report to their respective parent DGs who in turn report to the Commission lead service.
SIAC ESZD: hibridna fuzijska celica EU v imenu INTCEN sproži postopek zbiranja dokazov in zbere prve podatke.
CERT-EU provides technical reports to the CSIRTs Network, EU institutions and agencies (as appropriate) and ARGUS (if activated).
Komuniciranje z javnostjo:
Europol/EC3 [14] and CERT-EU provides expert forensic analysis of technical artefacts and other technical information to the CSIRTs Network.
Skupine CSIRT pripravljajo tehnična priporočila [17] in opozorila na ranljivost [18] ter jih razširjajo v ustreznih skupnostih in javnosti po postopkih za avtorizacijo, ki veljajo v posameznem primeru.
EEAS SIAC: On behalf of INTCEN, the EU Hybrid Fusion Cell reports to relevant the EEAS departments.
ENISA olajšuje pripravo in razširjanje skupnih obvestil mreže skupin CSIRT.
Response:
ENISA usklajuje svoje dejavnosti komuniciranja z javnostjo z mrežo skupin CSIRT in Službo Komisije za stike z javnostjo.
The CSIRTs Network exchanges technical details and analysis on the incident, such as IP addresses, indicators of compromise [15], etc.
ENISA in EC3 usklajujeta svoje dejavnosti komuniciranja z javnostjo na podlagi skupnega situacijskega zavedanja, o katerem so se dogovorile države članice.
Such information should be provided without undue delay to ENISA and not later than 24 hours from when the incident is detected.In accordance with the CSIRTs Network Standard Operating Procedures, its members cooperate in their efforts to analyse the available technical artefacts and other technical information related to the incident with a view of determining the cause and possible technical mitigation measures.
Oba usklajujeta svoje dejavnosti komuniciranja z javnostjo s Službo Komisije za stike z javnostjo.
ENISA assists CSIRTs' in their technical activities relying on its expertise and in accordance with its mandate [16].Member States' CSIRTs coordinate their technical response activities with the assistance of ENISA and the Commission.
Če se kriza dotika zunanje ali skupne varnostne in obrambne politike (SVOP), bi bilo treba komuniciranje z javnostjo uskladiti s službo tiskovnega predstavnika ESZD ter visokega predstavnika in podpredsednika.
EEAS SIAC: On behalf of INTCEN, the EU Hybrid Fusion Cell sets the collection process to gather initial evidence in motion.
Sodelovanje na operativni ravni
Public communications:
Priprava odločanja na politični ravni.
CSIRTs produce technical advisories [17] and vulnerability alerts [18] and disseminate them to their respective communities and the public following the authorisation procedures applicable in each case.
Usklajevanje upravljanja kibernetske krize (kot je primerno).
ENISA facilitates the production and dissemination of common CSIRTs Network communications.
Ocena posledic in vpliva na ravni EU in predlaganje možnih blažilnih ukrepov.
ENISA coordinates its public communication activities with the CSIRTs Network and the Commission's Spokesperson service.
skupine CSIRT, agencije za kibernetsko varnost,
ENISA and EC3 coordinate their public communication activities based on the shared situational awareness agreed among Member States.
drugi nacionalni sektorski organi (v primeru večsektorskih incidentov ali krize),
They both coordinated their public communication activities with the Commission's Spokesperson service.
(namestnik) generalnega sekretarja (SG) (sistem ARGUS),
If the crisis entails an external or Common Security and Defence Policy (CSDP) dimension, the public communication should be coordinated with the EEAS and the HRVP Spokesperson service.
GD CNECT/HOME,
Cooperation at the operational level
Varnostni organ Komisije,
Preparing decision-making at the political level
drugi generalni direktorati (v primeru večsektorskih incidentov ali krize),
Coordinate the management of the cybersecurity crisis (as appropriate)
generalni sekretar (ali njegov namestnik) za krizno odzivanje in SIAC (EU INTCEN in EUMS INT),
Assess the consequences and impact at EU level and propose possible mitigating actions.
hibridna fuzijska celica EU,
CSIRTs, cybersecurity agencies
Svet:
Other national sectoral authorities (in case of multi-sectoral incident or crisis)
predsedstvo (predsednik Horizontalne delovne skupine za kibernetska vprašanja ali Coreper [19]) ob podpori generalnega sekretariata Sveta ali PVO [20] in ureditve IPCR, če je ta aktivirana.
the (Deputy) Secretary-General SG (ARGUS process)
Situacijsko zavedanje:
DG CNECT/HOME
Podpora izdelavi političnih/strateških poročil o stanju (npr. ISAA ob aktiviranju ureditve IPCR).
Commission Security Authority
Horizontalna delovna skupina Sveta za kibernetska vprašanja pripravlja seje Coreper ali PVO, kot je primerno.
Other DGs (in case of multi-sectoral incident or crisis)
Ob aktivaciji IPCR:
the (Deputy) Secretary-General for Crisis Response and SIAC (EU INTCEN and EUMS INT)
predsedstvo lahko skliče okrogle mize v podporo pripravi za Coreper ali PVO, pri tem vključi ustrezne zainteresirane strani iz držav članic, institucij, agencij in tretjih strani, kot so države nečlanice EU in mednarodne organizacije.
EU Hybrid Fusion Cell
To so krizna srečanja za ugotovitev ozkih grl in pripravo predlogov ukrepov za medsektorska vprašanja;
Council
vodilne službe Komisije ali ESZD, pod katerim vodstvom je ISAA, pripravi poročilo ISAA s prispevki ENISA, mreže skupin CSIRT, Europol/EC3, EUMS, INT, INTCEN in vseh drugih ustreznih akterjev.
the Presidency (Chair Horizontal Working Party on Cyber Issues or Coreper [19]) supported by the GSC, or PSC [20] and — if activated — with the support of the IPCR arrangements.
Poročilo ISAA je ocena na ravni vse EU, ki sloni na korelaciji med tehničnimi incidenti in oceno krize (analiza ogroženosti, ocena tveganja, netehnične posledice in učinki, nekibernetski vidiki incidenta ali krize itd.) in je prilagojena potrebam na operativni in politični ravni.
Situational awareness:
Ob aktivaciji ARGUS:
Support the production of politico/strategic situation reports (e.g. the ISAA in case of IPCR activation)
CERT-EU in EC3 [21] neposredno prispevata k izmenjavi informacij znotraj Komisije.
The Council Horizontal Working Party on Cyber Issues prepares the Coreper or PSC meeting as appropriate
Ob aktivaciji mehanizma ESZD za krizno odzivanje:
In case of IPCR activation:
bo SIAC okrepil zbiranje informacij in združevanje informacij iz vseh virov ter pripravil analizo in oceno incidenta.
The Presidency may call round table meetings to support its preparation for Coreper or PSC, bringing in relevant stakeholders in the Member States, the institutions, the agencies, and third parties such as non-EU countries and international organisations.
Odziv (na zahtevo politične ravni):
These are crisis meetings to identify bottlenecks and produce proposals for action for cross-cutting issues.
Čezmejno sodelovanje z enotno kontaktno točko in nacionalnimi pristojnimi organi (direktiva o varnosti omrežij in informacij) za zmanjšanje posledic in učinkov.
The Commission lead service or the EEAS as ISAA lead prepares the ISAA report with contributions from ENISA, CSIRTs Network, Europol/EC3, EUMS INT, INTCEN and all other relevant actors.
Aktiviranje vseh tehničnih blažilnih ukrepov in usklajevanje tehničnih zmogljivosti, potrebnih za ustavitev ali zmanjšanje posledic napadov na ciljne informacijske sisteme.
The ISAA report represents an EU-wide assessment based on correlation of technical incidents and crisis assessment (threat analysis, risk assessment, non-technical consequences and effects, non-cyber aspects of the incident or crisis, etc.) which is tailored to the needs of operational and political levels.
Sodelovanje, in če je bilo tako odločeno, usklajevanje tehničnih zmogljivosti za skupen ali sodelovalen odziv v skladu s standardnimi operativnimi postopki mreže skupin CSIRT.
In case of ARGUS activation
Ocena potrebe po sodelovanju z relevantnimi tretjimi stranmi.
CERT-EU and EC3 [21] contribute directly to the exchange of information within the Commission.
Odločanje v sistemu ARGUS (če je aktiviran).
In case of the EEAS Crisis Response Mechanism activation:
Priprava sklepov in usklajevanje na podlagi ureditve IPCR (če je aktivirana).
The SIAC will intensify its information collection and aggregate the all-source information and prepare an analysis and assessment on the incident.
Podpora odločanju ESZD prek mehanizma ESZD za krizno odzivanje (če je aktiviran), tudi za stike s tretjimi državami in mednarodnimi organizacijami ter kateri koli ukrep, katerega cilj je varovanje misij in operacij SVOP ter delegacij EU.
Response (upon request from the political level):
Dogovor glede javnih sporočil o incidentu.
Cross-border cooperation with single points of contact and national competent authorities (NIS Directive) to mitigate the consequences and effects.
Sodelovanje na strateški/politični ravni
Activate all technical mitigation measures and coordinate technical capacities needed to stop or reduce the impact of the attacks on the targeted information systems.
za države članice: ministri, pristojni za kibernetsko varnost,
Cooperation and, if decided, coordination of technical capacities towards a joint or collaborative response in accordance with the CSIRTs Network SOPs.
za Evropski svet: predsednik,
Assess the need to cooperate with relevant third parties.
za Svet: šestmesečno predsedstvo,
(where activated) Decision-making within the ARGUS process.
za ukrepe iz „kibernetske diplomatske orodjarne“: PVO in Horizontalna delovna skupina,
(where activated) Preparing decisions and coordinating under the IPCR arrangements.
za Evropsko komisijo: predsednik ali pooblaščeni podpredsednik/komisar,
(where activated) support EEAS decision-making through the EEAS Crisis Response Mechanism including as regards contacts with third countries and international organisations as well as any measure aimed at protecting CSDP missions and operations and EU delegations.
visoki predstavnik Unije za zunanje zadeve in varnostno politiko ter podpredsednik Komisije.
Agree upon public messages regarding the incident.
Področje dejavnosti: Strateško in politično upravljanje kibernetskih in nekibernetskih vidikov krize, vključno z ukrepi iz okvira za skupni diplomatski odziv EU na zlonamerne kibernetske dejavnosti.
Cooperation at the strategic/political level
Opredelitev učinkov motenj, ki jih je kriza povzročila na delovanje Unije.
For Member States, Ministers responsible for cybersecurity
Aktiviranje dodatnih mehanizmov/instrumentov za krizno upravljanje je odvisno od vrste in učinka incidenta.
For the European Council, the President
Ti lahko na primer vključujejo mehanizem na področju civilne zaščite.
For the Council, the rotating Presidency
Sprejemanje ukrepov iz okvira za skupni diplomatski odziv EU na zlonamerne kibernetske dejavnosti.
When measures within the ‘Cyber Diplomatic Toolbox’, PSC and Horizontal Working Party
Dajanje nujne pomoči prizadetim državam članicam, na primer aktiviranje sklada za nujno odzivanje na kibernetske grožnje [22], ko bo na voljo.Sodelovanje in usklajevanje z mednarodnimi organizacijami, kadar je to primerno, kot so Združeni narodi (ZN), Organizacija za varnost in sodelovanje v Evropi (OVSE) in zlasti Nato.
For the European Commission, the President or the delegated Vice-President/Commissioner
Ocena posledic za nacionalno varnost in obrambo.
The High Representative of the Union for Foreign Affairs Security Policy/Vice-President of the Commission.
Določitev skupne strategije komuniciranja z javnostjo.
Scope of activities: Strategic and political management of both cyber and non-cyber aspects of the crisis including measures under the Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities.
ODZIV, USKLAJEVAN NA RAVNI EU Z DRŽAVAMI ČLANICAMI V OKVIRU UREDITVE IPCR
Identify the impacts of the disruptions caused by the crisis on the functioning of the Union.
V skladu z načelom dopolnjevanja na ravni EU ta oddelek uvaja in obravnava zlasti glavni cilj ter odgovornosti in dejavnosti organov držav članic, mreže skupin CSIRT, ENISA, CERT-EU, Europola/EC3, INTCEN, hibridne fuzijske celice EU in Horizontalne delovne skupine Sveta o kibernetskih vprašanjih v postopku IPCR.
Activate additional crisis management mechanisms/instruments depending on the nature and impact of the incident.
Pričakuje se, da akterji ravnajo v skladu z uveljavljenimi postopki na ravni EU ali nacionalni ravni.
These may include, for example, the Civil Protection Mechanism.
Bistveno je omeniti, da se, kot kaže slika 1, dejavnosti na nacionalni ravni in sodelovanje v mreži skupin CSIRT (kadar je to potrebno) izvajajo čez ves incident/krizo po načelih subsidiarnosti in sorazmernosti, ne glede na aktivacijo mehanizmov EU za krizno upravljanje.
Take measures within the Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities.
Slika 1
Make available emergency support to affected Member States for example activating the Cybersecurity Emergency Response Fund [22] once applicable.Cooperation and Coordination with international organisations where appropriate such as the United Nations (UN), the Organisation for Security and Cooperation in Europe (OSCE) and particularly NATO.
Odziv na kibernetske incidente/krize na ravni EU
Assess national security and defence implications.
Vse dejavnosti, ki so opisane v nadaljevanju, se izvajajo v skladu s standardnimi operativnimi postopki/pravili pri zadevnih mehanizmih za sodelovanje ter v skladu z mandati in pristojnostmi posameznih akterjev in institucij.
Decide upon a common communication strategy towards the public.
Navedeni postopki/pravila se po potrebi nekoliko dopolnijo ali spremenijo za dosego čim boljšega sodelovanja in učinkovitega odziva na velike kibernetske incidente ali krize.
COORDINATED RESPONSE WITH MEMBER STATES AT THE EU LEVEL IN THE FRAMEWORK OF THE IPCR ARRANGEMENTS
Med posameznim incidentom morda ne bo treba ukrepati vsem akterjem, predstavljenim v nadaljevanju.
Following the principle of complementarity at EU level, this section introduces and focuses in particular on the core objective and the responsibilities and activities of the Member States Authorities, the CSIRTs Network, ENISA, CERT-EU, Europol/EC3, INTCEN, the EU Hybrid Fusion Cell and the Council Horizontal Working Party on Cyber issues within the IPCR process.
Kljub temu bi bilo v načrtih in ustreznih standardnih operativnih postopkih mehanizmov za sodelovanje treba predvideti njihovo morebitno udeležbo.
Actors are assumed to act in line with established procedures at EU or national level.
Glede na različne stopnje vpliva na družbo, ki ga lahko ima kibernetski incident ali kriza, bosta velika prožnost pri udeležbi sektorskih akterjev na vseh ravneh in vsak ustrezen odziv slonela na kibernetskih in nekibernetskih blažilnih dejavnostih.
It is essential to note that, as illustrated by Figure 1, irrespective of the activation of the EU crisis management mechanisms, activities at national level as well as cooperation within the CSIRTs Network (where necessary) take place throughout any incident/crisis following the principles of subsidiarity and proportionality.
Krizno upravljanje kibernetske varnosti – vključevanje kibernetske varnosti v postopek IPCR
Figure 1
Ureditev IPCR iz standardnih operativnih postopkov za IPCR [23] sledi zaporedju korakov, opisanem v nadaljevanju (uporaba posameznega koraka bo odvisna od razmer).
Cybersecurity incident/crisis response at EU level
Pri vsakem koraku so navedene dejavnosti in akterji, ki so specifični za kibernetsko varnost.
All of the activities described below are to be carried out in accordance with and following the standard operating procedures/rules of the cooperation mechanisms involved and in line with the established mandates and competencies of individual actors and institutions.
Za lažje branje je pri vsakem koraku navedeno besedilo iz standardnih operativnih postopkov IPCR, ki mu sledijo dejavnosti, ki so specifične za načrt.
These procedures/rules may need some additions or modifications in order to achieve best possible cooperation and effective response to large-scale cybersecurity incidents and crises.
Ta pristop po korakih omogoča tudi, da se pri potrebnih zmogljivostih in postopkih jasno opredelijo obstoječe vrzeli, ki ovirajo učinkovit odziv na kibernetske krize.
Not all actors presented below may be required to take action during any one particular incident.
Slika 2 (spodaj [24]) je grafični prikaz postopka IPCR, pri čemer so novi uvedeni elementi označeni z modro.
Nevertheless, the Blueprint and the relevant standard operating procedures of the cooperation mechanisms should foresee their potential involvement.
Slika 2
Given the different degree of impact on society that a cybersecurity incident or crisis may have, a high degree of flexibility as regards the involvement of sectoral actors on all levels and any appropriate response will rely upon both cyber and non-cyber mitigation activities.
Elementi v IPCR, specifični za kibernetsko varnost
Cybersecurity crisis management — Integrating cybersecurity in the IPCR process
Opomba: Zaradi narave hibridnih groženj na kibernetskem področju, ki so zasnovane tako, da ostanejo pod pragom prepoznavne krize, mora EU izvajati ukrepe za preprečevanje in pripravljenost.
The IPCR arrangements, described in the IPCR SOPs [23], follow sequentially the steps described hereunder (the use of some of these steps will depend on the situation).
Hibridni fuzijski celici EU je dana naloga, da hitro analizira relevantne incidente in obvesti ustrezne usklajevalne strukture.
At each step we specify cybersecurity-specific activities and actors.
Redno poročanje iz fuzijske celice lahko prispeva k obveščenosti pri sektorskem oblikovanju politik za izboljšanje pripravljenosti.
For the reader's convenience, at each step the text from the IPCR SOPs is provided followed by the Blueprint-specific activities.
Korak 1 – Redno sektorsko spremljanje in opozarjanje: obstoječa, redna sektorska poročila o stanju in opozorila predsedstvo Sveta oskrbujejo s podatki o razvijajoči se krizi in njenem mogočem poteku;
This step-by-step approach also allows for clear identification of existing gaps in necessary capabilities and procedures that hamper an effective response to cybersecurity crises.
Opredeljene vrzeli: Trenutno ni rednih in usklajevanih poročil o stanju in opozoril na področju kibernetske varnosti v zvezi s kibernetskimi incidenti (in grožnjami) na ravni EU.
Figure 2 (below [24]) is a graphical representation of the IPCR process where the new elements being introduced are highlighted in blue.
Načrt: Spremljanje stanja in poročanje o njem na področju kibernetske varnosti v EU
Figure 2
Redno tehnično poročilo o stanju na področju kibernetske varnosti v EU glede kibernetskih incidentov in groženj bo pripravila ENISA na podlagi javno dostopnih informacij, lastnih analiz ter poročil, ki ji jih pošljejo skupine CSIRT v državah članicah (prostovoljno) ali enotne kontaktne točke iz direktive o varnosti omrežij in informacij, Evropski center za boj proti kibernetski kriminaliteti (EC3) pri Europolu, CERT-EU ter Obveščevalni in situacijski center Evropske unije (INTCEN) pri Evropski službi za zunanje delovanje (ESZD).
Cybersecurity-specific elements in IPCR
Poročilo bi moralo biti dostopno tudi ustreznim telesom Sveta, Komisije in mreže skupin CSIRT.
Note: Given the nature of hybrid threats in the cyber domain that are designed to stay below the threshold of a recognisable crisis, the EU needs to undertake preventive and preparedness measures.
V imenu SIAC bi morala hibridna fuzijska celica EU sestaviti operativno poročilo o stanju na področju kibernetske varnosti v EU.
The EU Hybrid Fusion Cell is tasked to rapidly analyse relevant incidents and inform the appropriate coordination structures.
Po odkritju incidenta
The regular reporting from the Fusion Cell can contribute to inform sectoral policymaking to enhance preparedness.
Korak 2 – Analiza in svetovanje: na podlagi dostopnega spremljanja in opozarjanja se službe Komisije, ESZD in generalni sekretariat Sveta sproti medsebojno obveščajo o mogočem razvoju dogodkov, da so pripravljeni svetovati predsedstvu pri morebitni aktivaciji (v celoti ali v načinu izmenjave informaciji) IPCR;
Identified gap: There are currently no regular and coordinated cybersecurity situation reports and alerts as regards cybersecurity incidents (and threats) at EU level.
Za Komisijo: GD CNECT, GD HOME, DG HR.DS in DG DIGIT s podporo ENISA, EC3 in CERT-EU.
Blueprint: EU Cybersecurity situation monitoring/reporting
ESZD.
A regular EU Cybersecurity Technical Situation Report on cybersecurity incidents and threats will be prepared by ENISA on incidents and threats, based on publicly available information, its own analysis and reports shared with it by Member States' CSIRTs (on a voluntary basis) or NIS Directive single points of contact, European Cybercrime Centre (EC3) at Europol, CERT-EU and European Union Intelligence Centre (INTCEN) at the European External Action Service (EEAS).
Na podlagi dela situacijske sobe in obveščevalnih virov hibridna fuzijska celica EU omogoča situacijsko zavedanje o dejanskih in morebitnih hibridnih grožnjah, ki zadevajo EU in njene partnerice, vključno s kibernetskimi grožnjami.
The report should be made available to the relevant instances of the Council, the Commission and the CSIRTs Network.
Ko analiza in ocena hibridne fuzijske celice EU kažeta na obstoj morebitnih groženj, usmerjenih proti državi članici, partnerski državi ali organizaciji, bo zato INTCEN (na prvi stopnji) obvestil operativno raven po uveljavljenih postopkih.
On behalf of SIAC, the EU Hybrid Fusion Cell should compile an EU Cybersecurity Operational Situation Report.
Operativna raven bo nato pripravila priporočila za politično strateško raven, vključno z morebitno aktivacijo ukrepov kriznega upravljanja v načinu spremljanja (npr. mehanizem za krizno odzivanje ESZD ali stran za spremljanje IPCR).
The report also supports the Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities.
Predsednik mreže skupin CSIRT ob podpori ENISA pripravi poročilo o stanju v zvezi s kibernetskim incidentom v EU [25], ki se prek skupine CSIRT šestmesečnega predsedstva predloži predsedstvu, Komisiji in visokemu predstavniku Unije za zunanje zadeve in varnostno politiko.
Both reports are disseminated to EU and national stakeholders to contribute to their own situational awareness and inform decision-making and facilitate cross-border regional cooperation.
Korak 3 – Ocena/odločitev o aktivaciji IPCR: predsedstvo oceni potrebo po političnem usklajevanju, izmenjavi informacij ali odločanju na ravni EU.
After an incident has been detected
V ta namen lahko predsedstvo skliče neuradno okroglo mizo.
Step 2 — Analysis and advice: based on available monitoring and alerting, the Commission services, the EEAS, and the GSC keep each other informed on possible developments, in order to be ready to advise the Presidency for a possible activation (in full or in information-sharing mode) of the IPCR.
Predsedstvo opravi začetno opredelitev področij, ki zahtevajo udeležbo Coreperja ali Sveta.
Blueprint:
Ta bo podlaga za smernice za izdelavo poročil o celovitem situacijskem zavedanju in analizi (ISAA).
For the Commission, DG CNECT, DG HOME, DG HR.DS and DG DIGIT, supported by ENISA, EC3 and CERT-EU.
Predsedstvo bo glede na značilnosti krize, njene mogoče posledice in z njo povezane politične potrebe odločilo o primernosti sklicanja sej zadevnih delovnih skupin Sveta in/ali Coreperja in/ali PVO.
EEAS.
Udeleženci okrogle mize:
Drawing on the work of the Sitroom, and intelligence sources, the EU Hybrid Fusion Cell provides situational awareness on actual and potential hybrid threats affecting the EU and its partners including cyber threats.
službe Komisije in ESZD bodo predsedstvu svetovale na svojih področjih pristojnosti;