Some aspects of building the national cybersecurity system

Abstract

Today’s cybersecurity threats necessitate continuous improvement of the national cybersecurity system. A lot of attention is paid to this issue at the state level in many countries, including Ukraine. It is completely justified, since the level of security of information systems used by state and law enforcement agencies, as well as by critical infrastructure objects is essential not only for the stability and reliability of their operation but also and very often for the lives of people. Decrees of the President of Ukraine and Laws of Ukraine define national cybersecurity strategy, essential cybersecurity measures, measures to ensure cybersecurity of critical infrastructure objects and neutralize cybersecurity threats, main tasks of our state in the field of cybersecurity and major subjects which ensure cybersecurity. National system of cybersecurity is based on the centers of detection, management and response to cybersecurity threats. Based on the system approach, there can be built a concept of the national cybersecurity system visualized as a three-level pyramid. This model is based on the concept of the common information space to exchange data on cybersecurity incidents inside the country and internationally. The model also employs such principles as integrity, hierarchy, structuring, multiplicity and consistency. In order to increase efficiency of response to cybersecurity threats at the national level, co-operation of centers is established and exchange of information about detected cybersecurity incidents is made. Considering the fact that confrontation in the cyberspace intensifies and poses real danger to states, there is an urgent need for development and improvement of the cybersecurity system of Ukraine to respond to modern threats. Responsible for cybersecurity state bodies have to continuously update cybersecurity requirements for all objects of critical infrastructure, define the list of such objects and amend it when necessary. Top executives of such objects have to implement a fairly reliable cybersecurity system, taking into account all the requirements.