Top Banner
GENERAL INFORMATION INFORMATION PROVIDED IN THE APPLICATION COMMISSION ASSESSMENT Member State (applicant) POLAND Person in charge Mr Robert Kosla, Director of Cybersecurity Department, the Chancellery of the Prime Minister (email: [email protected], phone +48 22 245 57 05, mobile: +48601388022) INFORMATION ABOUT THE FULFILMENT OF CRITERIA Criterion 1: The date on which the Centre can become operational on site after the entry into force of the Regulation `This criterion concerns in particular the availability of appropriate office premises as well as the ability to redeploy and host the relevant staff, in time for the Centre to become operational. This should include the necessary logistics and sufficient space for offices, meeting rooms and off-site archiving, high-performing telecommunication and data storage networks as well as appropriate physical and IT security standards.` The locations are already existing and available immediately. More details in point 1.1.8. Additional information: See 1.1.4. and 1.1.8. 1.1.1 Necessary logistics and adequate office space (indicatively, around 2000 m 2 gross floor area above ground), corresponding to the scenario of up to 60 staff members (additional parking space for staff and visitors according to relevant local legislation) Poland can ultimately provide the following office space in the proposed locations: Office space will be provided as followed: Progress Park - 2 000 m2 gross area Crown Point - 2 000 m2 gross area Warsaw Spire - 1 992 m2 gross area Sufficient parking space for staff and visitors will be provided in all locations. The application indicates the availability of 3 premises; premises 1 with a gross area of 2 000 m 2 ; premises 2 with a gross area of 2 000 m 2 ; premises 3 with a gross area of 1 992 m 2 . The application indicates that sufficient parking spaces for staff will be provided in all premises, without specifying the number of spaces. Assessment CCC - Offer by Poland (PL) - Warsaw 1.1 Availability of appropriate office premises, including the proposed options of premises and estimated timeline of availabilty for each option (e.g. premises 1 to be finished in Q ....) The application indicates the availability of 3 premises in Warsaw: Crown Point (premises 1), Progress Park (premises 2) and Warsaw Spire Tower C (premises 3). The application indicates that all premises are available immediately and that they may be adapted to host the first staff members within 10 weeks from the decision on the seat of the Centre. Poland is offering three attractive and well-communicated locations for the future office of the Centre: Crown Point (Prosta 70 Street - https://goo.gl/maps/nJJf5KzjvRMGXFvZ7) - premises already existing. Crown Point is an office building perfectly located next to the Rondo Daszynskiego metro station, in the booming Wola business district. Crown Point is a 8-storey modern building with a total of over 11,000 m2 of leasable space located in Warsaw’s Wola district, which is the fastest growing business district of Warsaw. On the ground floor there is a main reception desk, as well as commercial and service functions such as: restaurant and kiosk. Progress Park (Postepu 21a Street/Postepu 21d Street - https://goo.gl/maps/ad8gCWYzDdJfj8aQ9) - premises already existing. The Progress Park complex comprises 4 office buildings, each of which has 7 stories. There are many office buildings in the area where international corporations have their headquarters, and there are bus and tram stops nearby, which facilitates efficient communication with all parts of the capital. The location enables quick access by car to the Chopin airport (10 min.) and to the centre of Warsaw (15 min.). Galeria Mokotow, one of the largest shopping and service centres in the city, is located in close proximity. Selected locations will be equipped according to the criteria with one large conference room for 65 people, 3 smaller meeting rooms, management's offices, open space, archive and secretarial office, social rooms, toilets, reception and facilities. The Progress Park complex (4 buildings) and Crown Point have BREEAM certificates (both on very good level). The BREEAM (Building Research Establishment's Environmental Assessment Method) is a multi-criteria system for assessing buildings in terms of their environmental impact. Warsaw Spire Tower C (Plac Europejski 2 - https://goo.gl/maps/wkj2kUbmgp9TAwkE8) - premises already existing. The building is located in the centre of Warsaw, which is one of the most modern business locations in Poland and this part of Europe. The location of the office building is within direct reach of the second metro line, which is being gradually extended. In addition, the building is located near the Warszawa Ochota train station, from which you can eventually get to the Chopin airport in about 15 minutes or in the direction of the city centre, alternatively to the Modlin airport. The proximity to the city centre and Poland’s most important state institutions increases the prestige of this place as a business centre of great importance. The Spire building complex, besides its BREEAM certificate (on an excellent level), has been awarded LEED Gold Certification. The LEED green building certification system is the world’s most widely used program for the design, construction, maintenance and operation of green buildings. Additionally, In the international CEEQA Awards competition in 2017 (organised in cooperation with the Financial Times), Warsaw Spire won in 2 categories: Best Office Development & Developer of the Year, Leading Green Building Development & Developer of the Year. It also received the Environmental Social and Sustainability Award (ESSA). The listed locations are already existing and available. Depending on the specific needs of the Centre's staff, the necessary arrangements of the office space can be completed within up to 8 weeks prior to the arrival of the first delegated employees of the Centre. Page 1
16

Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

Feb 02, 2023

Download

Documents

Khang Minh
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

GENERAL INFORMATION INFORMATION PROVIDED IN THE APPLICATION COMMISSION ASSESSMENT

Member State (applicant) POLAND

Person in charge Mr Robert Kosla, Director of Cybersecurity Department, the Chancellery of the Prime Minister (email: [email protected], phone +48 22 245 57 05, mobile:

+48601388022)

INFORMATION ABOUT THE FULFILMENT OF CRITERIA

Criterion 1: The date on which the Centre can become

operational on site after the entry into force of the Regulation

`This criterion concerns in particular the availability of

appropriate office premises as well as the ability to redeploy and

host the relevant staff, in time for the Centre to become

operational. This should include the necessary logistics and

sufficient space for offices, meeting rooms and off-site archiving,

high-performing telecommunication and data storage networks

as well as appropriate physical and IT security standards.`

The locations are already existing and available immediately. More details in point 1.1.8.

Additional information:

See 1.1.4. and 1.1.8.

1.1.1 Necessary logistics and adequate office space (indicatively,

around 2000 m2 gross floor area above ground), corresponding to

the scenario of up to 60 staff members (additional parking space

for staff and visitors according to relevant local legislation)

Poland can ultimately provide the following office space in the proposed locations:

Office space will be provided as followed:

Progress Park - 2 000 m2 gross area

Crown Point - 2 000 m2 gross area

Warsaw Spire - 1 992 m2 gross area

Sufficient parking space for staff and visitors will be provided in all locations.

The application indicates the availability of 3 premises; premises 1 with a gross area of

2 000 m2; premises 2 with a gross area of 2 000 m2; premises 3 with a gross area of 1 992 m2.

The application indicates that sufficient parking spaces for staff will be provided in all premises, without

specifying the number of spaces.

Assessment CCC - Offer by Poland (PL) - Warsaw

1.1 Availability of appropriate office premises, including the

proposed options of premises and estimated timeline of

availabilty for each option (e.g. premises 1 to be finished in Q ....)

The application indicates the availability of 3 premises in Warsaw: Crown Point (premises 1), Progress Park

(premises 2) and Warsaw Spire Tower C (premises 3). The application indicates that all premises are

available immediately and that they may be adapted to host the first staff members within 10 weeks from

the decision on the seat of the Centre.

Poland is offering three attractive and well-communicated locations for the future office of the Centre:

Crown Point (Prosta 70 Street - https://goo.gl/maps/nJJf5KzjvRMGXFvZ7) - premises already existing.

Crown Point is an office building perfectly located next to the Rondo Daszynskiego metro station, in the booming Wola business district. Crown Point is a 8-storey

modern building with a total of over 11,000 m2 of leasable space located in Warsaw’s Wola district, which is the fastest growing business district of Warsaw. On the

ground floor there is a main reception desk, as well as commercial and service functions such as: restaurant and kiosk.

Progress Park (Postepu 21a Street/Postepu 21d Street - https://goo.gl/maps/ad8gCWYzDdJfj8aQ9) - premises already existing.

The Progress Park complex comprises 4 office buildings, each of which has 7 stories. There are many office buildings in the area where international corporations

have their headquarters, and there are bus and tram stops nearby, which facilitates efficient communication with all parts of the capital. The location enables quick

access by car to the Chopin airport (10 min.) and to the centre of Warsaw (15 min.). Galeria Mokotow, one of the largest shopping and service centres in the city, is

located in close proximity. Selected locations will be equipped according to the criteria with one large conference room for 65 people, 3 smaller meeting rooms,

management's offices, open space, archive and secretarial office, social rooms, toilets, reception and facilities.

The Progress Park complex (4 buildings) and Crown Point have BREEAM certificates (both on very good level). The BREEAM (Building Research Establishment's

Environmental Assessment Method) is a multi-criteria system for assessing buildings in terms of their environmental impact.

Warsaw Spire Tower C (Plac Europejski 2 - https://goo.gl/maps/wkj2kUbmgp9TAwkE8) - premises already existing. The building is located in the centre of Warsaw,

which is one of the most modern business locations in Poland and this part of Europe. The location of the office building is within direct reach of the second metro

line, which is being gradually extended. In addition, the building is located near the Warszawa Ochota train station, from which you can eventually get to the Chopin

airport in about 15 minutes or in the direction of the city centre, alternatively to the Modlin airport. The proximity to the city centre and Poland’s most important

state institutions increases the prestige of this place as a business centre of great importance.

The Spire building complex, besides its BREEAM certificate (on an excellent level), has been awarded LEED Gold Certification. The LEED green building certification

system is the world’s most widely used program for the design, construction, maintenance and operation of green buildings.

Additionally, In the international CEEQA Awards competition in 2017 (organised in cooperation with the Financial Times), Warsaw Spire won in 2 categories: Best

Office Development & Developer of the Year, Leading Green Building Development & Developer of the Year. It also received the Environmental Social and

Sustainability Award (ESSA).

The listed locations are already existing and available. Depending on the specific needs of the Centre's staff, the necessary arrangements of the office space can be

completed within up to 8 weeks prior to the arrival of the first delegated employees of the Centre.

Page 1

Page 2: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

1.1.3 Off-site archiving capacities In all three locations there are special rooms on the premises of the office that are adapted to the storage and archiving of documentation.

Depending on specific archive needs, the necessary arrangements can be done within up to 8 weeks.

The Polish government will help to provide any off-site archiving storage.

The application indicates that PL will help providing off-site archiving storage.

1.1.2 Common infrastructure and rooms to accommodate for

meetings (space and logistics for meeting rooms, including the

number and size of offered meeting rooms)

All locations ensure necessary common infrastructure and meetings rooms.

Progress Park:

- A conference room with an area of about 163 m2, designed for maximum 80 people in a U-shaped arrangement

- at least 3 smaller meeting rooms designed for 4-5 people, with areas ranging from 10 to 11 m2

- Workspaces/open space

- Coffee point and social room

- Restrooms adapted to the needs of disabled people

- Separate offices for management.

Crown Point:

- Spacious conference room with an area of about 143 m2 for up to 70 people, U-shaped arrangement

- at least 3 conference rooms for 7 to 12 people, with an area from 14 m2 to about 25 m2

- Coffee point and social room

- Workspaces/open space

- Restrooms adapted to the needs of people with disabilities

- Separate offices for management.

Warsaw Spire Building C:

- Conference room with an area from 150 to 160 m2 designed for max 70/80 participants in a U-shape - can be freely arranged according to needs

- At least 3 smaller meeting rooms for up to 10/12 people - can be freely arranged according to needs;

- Workspaces/open space,

- Coffee points and social room

- Restrooms adapted to the needs of disabled people

- Separate offices for management.

The application indicates the existence of meeting rooms: on premises 1 of a conference room of around

163 m2 for up to 80 people and 3 meeting rooms of around 11 m

2 for up to 5 people; on premises 2 of a

conference room of around 143 m2 for up to 70 people and 3 meeting rooms of 14 to 25 m

2 for up to 12

people; on premises 3 of a conference room of around 160 m2 for up to 80 people and 3 meeting rooms

for up to 12 people.

1.1.4 Security and safety standards of the offered premises, in

particular cybersecurity standards, equivalent to those of the EU

Institutions

The facilities meet the highest security standards by providing 24-hour security, rotating gates at the entrance to the building and access for employees only to the

designated floors where they carry out their work. Additionally, it is possible to install special baggage scanning gates on the premises of the facility, which will allow

ensuring appropriate levels of security for the office staff.

In case of selection of the Polish offer, the locations may be adapted to accommodate the first employees within 10 weeks from the decision. In terms of establishing

technical conditions concerning e.g. preparation of the secretarial office/archive, the required time for e.g. preparation of special doors meeting ISO standards

requires about 8 weeks. This can be simultaneously handled together with the arrangement of office space. Apart from security, monitoring and entrance gates to

buildings, there is a possibility of implementing systems (access points) that would allow access to the agency's offices only for employees and authorised persons.

The premises offer highest security and safety standards - including:

• Security – professional security staff 24/7

• CCTV in the building from the garage to reception areas and lobbies

• Fire protection

• Security gates with door control

• Possibility of installing scanners for luggage and metal scanning equipment at the gates. Such installation is possible in the short term and the Polish government

offers support in the installation.

• Access to the building only for employees, including staff

• Reception

• A place for an archive including for classified materials (the managers of the proposed locations have experience in dealing with such matters for the Polish public

entities)

• Safe door secured with a card reader, entrance for staff only

• Poland can offer support from our CSIRT teams and exchange information on incidents and threats.

• Secure telecommunications links – Poland can support the Centre with a network of government fibre optic cables from the State owned company Exatel. Poland

can provide access to TESTA/sTESTA (Secure Trans European Services for Telematics between Administrations).

• Safe 4G/LTE and 5G mobile communication services (4 telecom operators - Play, Plus GSM, Orange and T-Mobile), including governmental communication

established under the #Polish5G framework.

• Ultra-fast and secure Internet from a number of commercial providers.

The application provides detailed information about the premises’ compliance with the highest standards

of security and safety, without providing information as to cybersecurity standards.

Page 2

Page 3: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

1.1.6 The terms concerning maintenance of the building including

upgrading and future extensions if needed

The financial terms are presented in 1.1.5.

It is possible to upgrade and extend the office space if needed in all 3 locations. The estimated time for upgrading or extending would be up to 10 weeks.

Poland will cover the rent for office space up to 2 000 metres.

The application indicates that office space in all premises can be upgraded and extended in 10 weeks.

1.1.7 Any special conditions offered with regard to all costs and

dedicated infrastructures

The Polish government will cover the rent for the office space for the Centre for the period of 10 years.

Poland will support the Centre in negotiations with the owner (administrator) of the building in regard to the detailed agreement concerning fitting out and tailoring

the building for the Centre’s needs.

The application does not indicate that any special conditions will be offered other than those concerning

rent as referred to in 1.1.5.

1.1.8 Estimated timeline for setting up an operational Centre on

site after the entry into force of the Regulation, on the basis of

the availability of appropriate office premises and the ability to

redeploy and host the relevant staff

The office spaces in all 3 locations are available immediately. The time needed to fulfil all the formal requirements and sign the rental agreement is estimated at 3

months.

The procedure to sign the rental contract can be initiated the day after the Centre chooses the preferred location. All preparatory works will be done before, so the

procedure could start immediately after the decision on the seat of the Centre in Warsaw.

In regards to the arrangement plans, the waiting time is 8-10 weeks from signing off the contract. The above deadline does not include time for delivery of non-

standard equipment such as baggage X-ray machines. The purchase and supply of such equipment (with the supplier's permission) may take up to 10 weeks.

Other guidelines such as security, monitoring and access points to each floor are available immediately. For special safe doors, there might be a maximum wait of 8

weeks.

The application indicates that the estimated timeline to fullfil all formal requirements and sign the rental

agreement is 3 months.

1.1.5 The financial terms for the Centre's use of the premises

(whether the Member State would pay the rent for a given period

of time or indefinitely)

The Polish government will cover the rent for the office space for the Centre for the period of 10 years. The rent does not include service charges and the costs of

maintenance (fees for utilities - water, electricity, telecommunication fees, car park rental) that should be covered by the Centre. However, it needs to be stressed

that the costs of maintenance of the proffered buildings are low (detailed numbers are mentioned in the section below).

In addition, the Centre will cover day-to-day office space maintenance by specialised staff.

The expected monthly and annual average cost of the office is:

Progress Park:

Office space: 2 000 m2 gross

Estimated monthly rent: xxxxxxxxxxxx EUR monthly / xxxxxxxxxxxx EUR annually

Estimated monthly service charges: xxxxxxxxxxx EUR monthly/ xxxxxxxxxxxxxxxx EUR annually.

Crown Point:

Office space: 2 000 m2 gross

Estimated monthly rent gross: xxxxxxxxx EUR monthly/ xxxxxxxxxx EUR annually

Estimated monthly service charges: xxxxxxxxx EUR monthly/ xxxxxxxxx EUR annually.

Warsaw Spire building C:

Office space: 1 992 m2 gross

Estimated monthly rent for 1 992 m2: xxxxxxxxxx EUR monthly / xxxxxxxxxx EUR annually

Estimated monthly service charges: xxxxxxxxxx EUR monthly/ xxxxxxxxx EUR annually.

The costs will be proportionally lower if the Centre decides that there will be less space needed at the beginning of its activities.

These are initial, starting rates that will be negotiated and we expect that real costs will be lower.

The price for parking is as follows (monthly):

Progress Park: estimated xxxx EUR/indoor parking place

Crown Point: estimated xxxxxx EUR/ outdoor parking place, xxxxxx EUR/ indoor parking place

Warsaw Spire building C: estimated xxxxxx EUR net per parking space.

It is worth mentioning that the developers offer additional resources for fitting out the building and tailoring it for the Centre needs. These range from xxxxxxxx

EUR/m2. The estimated cost for the set-up depends on the length of the contract.

Budget for adjusting the arrangement to the tenant's needs is calculated from the net area.

The costs of arrangement include permanent furniture fittings connected with the building, i.e. furniture fittings in the kitchen, built-in wardrobes and, of course,

adjusting the area to the selected layout (ventilation, air-conditioning, lighting, electrical installations, etc.).

The application indicates that for all premises, PL will cover the rent for a period of 10 years.

Page 3

Page 4: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

Additional information:

See 1.1.4.and 1.1.8.

1.2 General compliance with the requirements set out in the

Commission’s Manual of Standard Building Specifications

All proposed locations meet the requirements specified in the Commission’s Manual of Standard Building Specifications, in particular:

• Those requirements relate to office rooms, conference spaces, parking lots and lobbies.

• The operator of the office space also provide the option of arranging rooms to meet specific needs.

• The proposed locations for the seat of the Centre meet the highest standards of functionality, and also provide access for disabled people.

• The operator of the office space have an obligation to carry out any repairs and changes to the rented premises if needed.

• All locations also meet the highest standards of occupational health and fire safety.

• Physical safety will be provided by implementing technical and organisational measures such as entry gates, metal scanners and other physical security systems.

• The buildings have appropriate air conditioning and air circulation systems, they also ensure that the temperature in the rooms is adjusted to the weather

conditions.

• The operator of the office space provides access to the latest telecommunications technologies, fibre optic networks and telephone connections.

The application indicates that all premises meet the requirements set out in the Commission’s Manual of

Standard Building Specifications.

Poland will cover the lease costs for the office space for 10 years. The rent does not include service charges and the costs of maintenance (fees for utilities - water,

electricity, telecommunication fees, car park rental) that should be covered by the Centre. However, it needs to be stressed that these building maintenance costs are

very low (detailed numbers are mentioned in the section below).

In addition, the Centre will cover day-to-day office space maintenance by specialised staff.

The expected monthly and annual average cost of the office is:

Progress Park:

Office space: 2 000 m2 gross

Estimated monthy rent: xxxxxxxx EUR monthly / xxxxxxxx EUR annually

Estimated monthy service charges: xxxxxxx EUR monthly/ xxxxxxx EUR annually.

Crown Point:

Office space: 2 000 m2 gross

Estimated monthy rent gross: xxxxxx EUR monthly/ xxxxxxx EUR annually

Estimated monthy service charges: xxxxxxx EUR monthly/ xxxxxx EUR annually.

Warsaw Spire building C:

Office space: 1 992 m2 gross

Estimated monthy rent for 1 992 m2: xxxxxxx EUR monthly / xxxxxxxxxxxx EUR annually

Estimated monthy service charges: xxxxxxxxxxxx EUR monthly/ xxxxxx EUR annually.

The costs will be proportionally lower if the Centre decides that there will be less space needed at the beginning of its activities.

These are initial, starting rates that will be negotiated and we expect that real costs will be lower.

The price for parking is as follows (monthly):

Progress Park: xxxxx EUR/indoor parking place

Crown Point: xxxxx EUR/ outdoor parking place, xxx EUR/ indoor parking place

Warsaw Spire building C: xxxx EUR net per parking space.

It is worth mentioning that the developers offer additional resources for fitting out the building and tailoring it for the Centre needs. The costs range from xxxxx

EUR/m2. The estimated cost for the set-up depends on the length of the contract.

Budget for adjusting the arrangement to the tenant's needs is calculated from the net area.

The costs of arrangement include permanent furniture fittings connected with the building, i.e. furniture fittings in the kitchen, built-in wardrobes and, of course,

adjusting the area to the selected layout (ventilation, air-conditioning, lighting, electrical installations, etc.).

1.1.9 The total estimated cost for set up and the expected annual

average thereafter

The application indicates that for all premises, PL will cover the rent for a period of 10 years.

The application does not provide information on the estimated cost for set-up of the Centre.

Page 4

Page 5: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

1.3 Other The above-mentioned locations are situated in the most important business districts of Warsaw and are in close proximity to key transportation routes connecting

the city centre with the airport.

Additionally, the office buildings offer:

• pleasant and friendly design

• helpful service at the highest level

• working standards as in luxury boutique hotels

• a range of services and facilities

• vast infrastructure:

- shops

- meeting rooms

- conference rooms and event venues

- facilities for sports activities such as showers and lockers

• An international community:

- a wide range of cultural events

- sports activities

- ways of expanding a network of contacts.

Crown Point, Progress Park and Warsaw Spire have facilities tailored for cyclists. There is bicycle parking, as well as cloakrooms and showers.

The premises have specific spaces that can be used for server rooms, kitchens, social rooms or storage rooms.

The application indicates that all premises are situated in one of the business disctricts of Warsaw.

SUMMARY OF THE ASSESSMENT OF CRITERION 1 The application indicates the availability of 3 premises in Warsaw: Crown Point (premises 1), Progress

Park (premises 2) and Warsaw Spire Tower C (premises 3), all available immediately. The application

provides information on the availability of office space between 1 992m2 and 2000 m

2, meeting rooms,

including 3 meetings rooms and 1 conference room in each premises, and parking spaces, without

indication of numbers. The application indicates that the premises ensure the highest standards of

security and safety, without providing information as to cybersecurity standards. The application

indicates that for all premises, Poland will cover the rent for a period of 10 years. The application

indicates that all premises comply with the Commission’s Manual of Standard Building Specifications.

Criterion 2: Accessibility of the location

`This criterion concerns the availability, frequency and duration

of public transport connections from the closest airport to the

location, as well as the quality and quantity of accommodation

facilities. In particular, this criterion implies the capacity to allow

for the expected meeting activities of the Centre.`

Warsaw is a top-class example of a communication hub that connects North with South, and West with East.

Warsaw is easy to reach thanks to 2 international airports (Warsaw Chopin Airport and Modlin Airport) with over 120 flight destinations to 65 countries. The city's

two airports handle around 16 million passengers a year. Major cities in Europe can be reached from Warsaw within maximum of 2h 30min, including regular flights

to all 26 Member States from Warsaw Chopin Airport. Furthermore, Modlin Airport, located 40 km from Warsaw, provides an additional 36 flight directions.

Warsaw has a very good access to all EU Member states, by traditional airlines and low cost carriers.

Apart from Europe, there are convenient direct connections from Warsaw Chopin Airport to cities in North America, Middle East and Asia.

2.1 Public transport connections from the closest airport to the

location

2.1.1 Availability Warsaw Chopin Airport can be reached directly by car or taxi, three bus lines, train or by two metro lines (north-south, west-east). There are dedicated paid parking

areas at the airport allowing vehicles to be left for a necessary period of time. Three different lines of buses reach the central districts of the city. There are also

nightlines that link the airport with the city centre. The train to the airport connects all major train stations in the city. Moreover, there are numerous taxi

corporations available for online reservation and a variety of ways of paying (cash, card, blik).

Warsaw Chopin Airport is also well connected at night. Apart from taxis providing services to foreign guests coming to Warsaw, Chopin Airport is supported by the

night bus - line N32, which runs on the route Central Station - Warsaw Chopin Airport.

Apart from buses, the railway also offers fast and convenient connections between both airports. On the route between Warsaw Modlin and Warsaw Chopin Airport,

a special RL train runs regularly every hour between the two locations via Central Warsaw and Western Warsaw. Apart from this line, there is a possibility to choose

the R90 train, which ends at the Warszawa Zachodnia stop, and the station itself is a transfer point and allows you to continue your journey towards Chopin Airport

with the trains of the S2 and S3 Rapid Urban Railway, running alternately and regularly every 30 minutes, while providing an interesting alternative to traditional bus

lines.

The application does not provide information on the availability of public transportation from the airport

to the premises.

2.1.2 Frequency Trains and buses run approximately every 20 minutes to the Warsaw Chopin Airport and every 30 minutes to Modlin Airport. The waiting time depends on the

schedule and the changes from day/night and peak hour delay.

The application does not provide information on the frequency of public transportation from the airport to

the premises.

2.1.3 Duration Trains and buses run approximately every 20 minutes to the Warsaw Chopin Airport and every 30 minutes to Modlin Airport. The waiting time depends on the

schedule and the changes from day/night and peak hour delay.

The application does not provide information about the duration of public transport connections from the

airport to the location.

2.2 Accommodation facilities The cost of living in Warsaw is lower than the average cost in the EU, whether in terms of purchasing food, material goods, fuel or real estate. The cost of renting a

flat of 38 to 60 m2 in Warsaw is approximately PLN 2700 (EUR 600), which, taking into account smaller and larger flats in Warsaw, gives an average rent of PLN 3600

(EUR 800). The rent of 60 to 90m2 in Warsaw is around 1 000 EUR. The average utilities cost is around 80 EUR per person, which is one of the lowest in the EU.

The rental market in Warsaw is very diversified, with very small, medium and large flats and detached houses near the centre or on the outskirts of the city, as well as

luxury apartment buildings in modern high-rise buildings in the centre of Warsaw.

The application does not provide information on the duration of the public transportation from the airport

to the premises.

Page 5

Page 6: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

2.2.1 Quality (indication of type of hotels with available rooms,

e.g. 3, 4, 5-star hotels)

89 hotels: 14 five-star hotels, 24 four-star hotels and 51 three-star hotels. The application indicates the availability of accomodating facilities ranging from 3- to 5-star hotels.

2.2.2 Quantity (number of rooms/hoter beds available) There are 89 hotels (5, 4 and 3-star hotels) in Warsaw, with total more than 26 000 hotel beds and more than 14 000 hotel rooms.

5-star hotels - 3 336 rooms (including 6 286 beds)

4-star hotels - 4 686 rooms (including 8 786 beds)

3-star hotels - 6 222 rooms (including 11 193 beds)

The application indicates the availability of 89 hotels with more than 14 000 hotel rooms and more than 26

000 beds.

Warsaw offers thousands of apartments to rent. There are currently between 9 and 10 thousand apartments in the market that are ready to be moved into.

As Poland’s largest city, Warsaw is an attractive place to live. This is shown not only by the results of various comparative rankings of cities, but primarily in the

opinions of residents on the quality of life in Warsaw.

Furthermore, Warsaw ranks first among the top 5 largest Polish cities in terms of green areas (which cover more than 40% of its surface). In Warsaw, the business

infrastructure is very well developed. Here, 89 hotels (5,4 and 3-star hotels) can be found, as well as many conference centres. It is in Warsaw that the country’s

largest cultural events are organized and the city itself has also become a home to world-class performers. The quality of the urban infrastructure used every day by

inhabitants and tourists is improving year on year. It is worth adding that Warsaw has excellent internal transport, and this is in accordance with the principles of

sustainable development, i.e. we have underground and modern metro lines that connect major parts of the city.

The average cost of lunch per person is 25 PLN/ 5.5 EUR, while the cost of dinner is 100 PLN/ 22 EUR.

Additional information:

See 2.1.2. And 2.1.3.

SUMMARY OF THE ASSESSMENT OF CRITERION 2 The application does not provide information on the availability, frequency or duration of public

transportation from the airport to the premises. The application provides information about the

availability, duration and frequency of public transportation from 2 airports to the city centre. The

application indicates the availability of accommodation facilities, ranging from 3- to 5-star hotels with

the offer of more than 14 000 hotel rooms and more than 26 000 beds in Warsaw.

Criterion 3: Existence of adequate education facilities for the

children of the Centre's staff

`This criterion concerns the availability of multi-lingual,

European-oriented schooling that can meet the needs for

education facilities for the children of the staff of the Centre.`

The Polish government offers full coverage of costs (registration fees and tuition fees) for ensuring the education (nursery, primary school, secondary school) of the

Centre’s staff up to 35 000 PLN (about 7800 EUR) (annually per child) in the period of the next 10 years.

2.3 Other The application provides information on the availability and frequency of public transportation from 2

airports to the city centre, varying from 20 minutes for the Modlin Airport and 30 minutes to Warsaw

Chopin Airport.

3.1 Detailed information about existing educational facilities and

availability of multi-lingual, European-oriented schooling

Warsaw offers a broad range of international schooling, including facilities that provide education in English, French, German and Italian. There are a number of

public and private international schools and kindergartens in Warsaw available for foreigners and locals - such as the American School of Warsaw, The British School

Warsaw, the French School in Warsaw, the Willy Brandt Polish-German School.

Examples of international schools and kindergartens:

1) International European School, Wiertnicza 140 street

2) American School of Warsaw, Warszawska 202 street, 05-520 Konstancin-Jeziorna (Bielawa)

3) MyVinci Preschool Biały Kamień, MyVinci School & Preschool Czerska, 05-410 Józefów, Sadowa 14 street

4) The British Primary School of Wilanów, Księdza Prymasa Augusta Hlonda 12 street

5) The British School, Limanowskiego 15 street

6) Casa dei Bambini, Badowska 19 street

7) International Trilingual School of Warsaw, Karowa 14/16 street

8) The English Playhouse, Płyćwiańska 14 street

9) International American School, Dembego 18 street

10) The International Preschool of Warsaw, Kalatówki 24 street

11) Lycee Francais de Varsovie, Walecznych 4/6 street (French Baccalaureate)

12) Monnet International School, Abramowskiego 4 street

13) Willy Brandt Schule, Urszuli Ledóchowskiej 3 street.

In addition, the Government of the Republic of Poland is working on the establishment of an Accredited European School in Warsaw, as a result of the Headquarters

Agreement signed with the EU Agency Frontex seated in Warsaw, obliging Poland to offer European schooling in Warsaw.

We already have a successful ongoing accreditation procedure for the International European School of Warsaw (IES) seated at Wiertnicza Street 140:

https://www.ies.waw.pl/pl/index.php.

Hence, the finalized audit and its positive opinion. It is expected that the Accreditation Agreement with IES will be signed mid-2021, which considering the retroactive

effect, shall constitute IES as an Accredited European School from the school year 2020/21.

Within the European Union, there are 20 Accredited European Schools in 13 countries. Four other schools – among them IES - are currently candidates for

accreditation.

An Accredited European School guarantees to provide their pupils with the same type of education as that provided in the European Schools, and guarantees the

equality of opportunity for pupils in terms of preparation for the European Baccalaureate in secondary school years 6 and 7, through strict application of the

provisions laid down by the Regulations pertaining to the European Baccalaureate.

While offering a European education that meets the pedagogical requirements laid down for the European Schools, an Accredited European School operates within

the framework of the national school network of a given EU Member State.

Furthermore, there are 96 bilingual Polish schools in Warsaw, where at least some subjects are taught in a language other than Polish (69 bilingual primary schools,

26 general secondary schools and 1 technical school in Warsaw). Furthermore, there are 341 bilingual branches in all primary and secondary schools, with 8171

pupils.

It is also possible to take in Warsaw the International Baccalaureate. This is recognised by educational institutes in many countries all over the world and allows the

holder to undertake studies therein.

Page 6

Page 7: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

3.1.1 Nursery Several dozen kindergartens and crèches, including dozens of international and bilingual establishments, operate in Warsaw.

Most of the international schools mentioned in section 3.1.2 have classes in the model of kindergarten, primary and secondary school.

The application indicates the existence of several dozens of kindergartens and crèches, including

international and bilingual establishments, without specifying the exact number or the linguistic offer.

3.1.2 Primary education Examples of international schools and kindergartens:

1) International European School, Wiertnicza 140 street

2) American School of Warsaw, Warszawska 202 street, 05-520 Konstancin-Jeziorna (Bielawa)

3) MyVinci Preschool Biały Kamień, MyVinci School & Preschool Czerska, 05-410 Józefów, Sadowa 14 street

4) The British Primary School of Wilanów, Księdza Prymasa Augusta Hlonda 12 street

5) The British School, Limanowskiego 15 street

6) Casa dei Bambini, Badowska 19 street

7) International Trilingual School of Warsaw, Karowa 14/16 street

8) The English Playhouse, Płyćwiańska 14 street

9) International American School, Dembego 18 street

10) The International Preschool of Warsaw, Kalatówki 24 street

11) Lycee Francais de Varsovie, Walecznych 4/6 street (French Baccalaureate)

12) Monnet International School, Abramowskiego 4 street

13) Willy Brandt Schule, Urszuli Ledóchowskiej 3 street.

Additionally, there are 69 Polish bilingual primary schools.

The application indicates the existence of 13 international schools and 69 PL bilingual schools offering

primary education, without specifying the linguistic offer.

3.1.3 Secondary education Most of the international schools listed in 3.1.2. also offer classes at the secondary school level.

Additionally, there are 27 Polish bilingual secondary schools (26 general secondary schools and 1 technical school in Warsaw) in Warsaw.

The application indicates the existence of international schools offering secondary education, without

specifying the number and the linguistic offer, and of 27 PL bilingual secondary schools, without specifying

the linguistic offer. The application provides information on the PL Government's plans to establish an

accredited European School in Warsaw.

3.1.4 Higher education Warsaw is a leading Polish academic centre with the best and largest Polish universities. There are 61 private and 15 public universities in Warsaw, with

approximately 240 000 students and 57 000 annual graduates.

In the QS EECA University Rankings 2018, the University of Warsaw (the country’s largest) came in 6th among 200 of the best universities in the Emerging Europe and

Central Asia region.

The University of Warsaw is at the top of the Higher Education Perspectives Ranking 2018, which classifies the best Polish higher education institutions (sharing this

position with the Jagiellonian University in Krakow). Warsaw University of Technology came in 3rd among public universities, while Kozminski University came in 1st

among private universities in Poland.

Warsaw's largest universities offer many courses in English. This includes Warsaw University of Technology (programmes at B.Sc., M.Sc. and Ph.D. levels in almost

every field of technology), Warsaw University, Warsaw School of Economics, Medical University of Warsaw, The Warsaw University of Life Sciences, Kozminski

University, College of Europe and others.

The application indicates the existence of 61 private and 15 public universities in Warsaw. The application

indicates that at least 7 universities offer courses in English.

Warsaw has almost all the most important and best universities in the country, both public and non-public, located either in the centre or in districts well connected

with the rest of the city. Many of them have beautiful green campuses, which include parks and historic or modern buildings.

In addition, in Warsaw there is College of Europe. This was the first academic institution in the world to offer postgraduate studies in European affairs, and remains

innovative and unique to this day. The origins of the College date back to 1948. The first College of Europe campus was established in Bruges (Belgium) in 1949. As a

result of changes in Central and Eastern Europe, with the support of the European Commission and the Polish government, the College of Europe campus was opened

in Natolin (Ursynow, Warsaw, Poland) in 1992. Currently, the College operates as a "One College - Two Camps". Both campuses are administered by the relevant

governing bodies, acting in accordance with Belgian and Polish law, respectively. In all matters related to education, they operate under the supervision of one

Academic Council.

Additional information:

See criterion 3.

3.2 Other The application indicates that PL will offer full coverage of costs (registration and tuition fees) for nursery,

primary and secondary schools for children of the Centre’s staff up to around €7 800 annually per child for

the first 10 years.

3.1 Detailed information about existing educational facilities and

availability of multi-lingual, European-oriented schooling

Warsaw offers a broad range of international schooling, including facilities that provide education in English, French, German and Italian. There are a number of

public and private international schools and kindergartens in Warsaw available for foreigners and locals - such as the American School of Warsaw, The British School

Warsaw, the French School in Warsaw, the Willy Brandt Polish-German School.

Examples of international schools and kindergartens:

1) International European School, Wiertnicza 140 street

2) American School of Warsaw, Warszawska 202 street, 05-520 Konstancin-Jeziorna (Bielawa)

3) MyVinci Preschool Biały Kamień, MyVinci School & Preschool Czerska, 05-410 Józefów, Sadowa 14 street

4) The British Primary School of Wilanów, Księdza Prymasa Augusta Hlonda 12 street

5) The British School, Limanowskiego 15 street

6) Casa dei Bambini, Badowska 19 street

7) International Trilingual School of Warsaw, Karowa 14/16 street

8) The English Playhouse, Płyćwiańska 14 street

9) International American School, Dembego 18 street

10) The International Preschool of Warsaw, Kalatówki 24 street

11) Lycee Francais de Varsovie, Walecznych 4/6 street (French Baccalaureate)

12) Monnet International School, Abramowskiego 4 street

13) Willy Brandt Schule, Urszuli Ledóchowskiej 3 street.

In addition, the Government of the Republic of Poland is working on the establishment of an Accredited European School in Warsaw, as a result of the Headquarters

Agreement signed with the EU Agency Frontex seated in Warsaw, obliging Poland to offer European schooling in Warsaw.

We already have a successful ongoing accreditation procedure for the International European School of Warsaw (IES) seated at Wiertnicza Street 140:

https://www.ies.waw.pl/pl/index.php.

Hence, the finalized audit and its positive opinion. It is expected that the Accreditation Agreement with IES will be signed mid-2021, which considering the retroactive

effect, shall constitute IES as an Accredited European School from the school year 2020/21.

Within the European Union, there are 20 Accredited European Schools in 13 countries. Four other schools – among them IES - are currently candidates for

accreditation.

An Accredited European School guarantees to provide their pupils with the same type of education as that provided in the European Schools, and guarantees the

equality of opportunity for pupils in terms of preparation for the European Baccalaureate in secondary school years 6 and 7, through strict application of the

provisions laid down by the Regulations pertaining to the European Baccalaureate.

While offering a European education that meets the pedagogical requirements laid down for the European Schools, an Accredited European School operates within

the framework of the national school network of a given EU Member State.

Furthermore, there are 96 bilingual Polish schools in Warsaw, where at least some subjects are taught in a language other than Polish (69 bilingual primary schools,

26 general secondary schools and 1 technical school in Warsaw). Furthermore, there are 341 bilingual branches in all primary and secondary schools, with 8171

pupils.

It is also possible to take in Warsaw the International Baccalaureate. This is recognised by educational institutes in many countries all over the world and allows the

holder to undertake studies therein.

Page 7

Page 8: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

SUMMARY OF THE ASSESSMENT OF CRITERION 3 The application indicates the existence of several dozens of kindergartens and crèches, including

international and bilingual establishments, without specifying the exact number or the linguistic offer. It

also provides information on the availability of 13 international and 69 Polish bilingual primary schools,

without specifying the linguistic offer, and the existence of international schools with secondary

education, without specifying the number or the linguistic offer, and of 27 Polish bilingual secondary

schools, without specifying the linguistic offer. The application provides information on the Polish

Government's plans to establish an accredited European School in Warsaw. The application indicates the

existence of 61 private and 15 public universities in Warsaw, with at least 7 universities offering courses

in English.

Criterion 4: Appropriate access to the labour market, social

security and medical care for both children and spouses

`This criterion concerns the capacity to meet the needs of the

children and spouses of staff for social security and medical care

as well as the availability to offer job opportunities for them.`

Warsaw is Poland’s main economic and business hub.

Despite the difficulties and challenges resulting from the Covid-19 pandemic, the unemployment rate in Poland remains very low (around 3%) and is the second

lowest in the EU. Warsaw, in particular, has the lowest unemployment rate in Poland.

The capital is also one of the most important and largest metropolises in Central and Eastern Europe, and has a tremendous investment potential.

The city’s modern economy features a significant knowledge-based services sector, including business process outsourcing centres (BPO), shared services centres

(SSC), IT centres, and research and development centres (R&D).

Warsaw is the capital city of Poland, not only in administrative, political, and financial capacities, but also in economic, educational and cultural terms. Its favourable

accessibility, easy to find talent, fast growing GPD and high quality of life has enabled the city to be the hub of the most recognised business destinations in the CEE

region. That is why Warsaw is the city where, currently, more than 400 thousand business entities, including prominent global and local companies, are based.

Thanks to its forward looking strategy and dynamics, more and more worldwide known brands, as well as start-ups feel great being located here and in Growing with

Warsaw.

4.1. Social security Citizens of the European Union, the European Economic Area and Switzerland may receive Polish benefits on the same basis as Poles receive benefits abroad, i.e. if

they work in Poland and stay here (so it can apply to children and spouses of staff). The benefits include: upbringing benefits: 1) 500+, i.e. PLN 500 per month for each

child up to the age of 18, regardless of the family income; 2) Good Start, i.e. PLN 300 per year for each child up to the age of 20 starting the school year, regardless of

the family income; 3) The Big Family Card, i.e. a system of discounts and additional entitlements for families with 3 or more children that operates both in public

institutions and private companies; 4) Family benefits, i.e. family allowance and supplements to family allowance, care benefits (nursing allowance, nursing benefit,

special care allowance, one-time aid for the birth of a child, and a single aid for the birth of a child, as well as one-off payment of PLN 1,000 for families meeting the

income criterion and a parental benefit to which the right is acquired in the manner specified in the Act of 28 November 2003 on family benefits; 5) paid annual

maternity allowance; 6) free child-raising allowance until the end of the calendar year in which the child turns six; 7) Benefits from the Maintenance Fund; 8) Social

Assistance; 9) employer's pension contributions and voluntary third pillar pension insurance; 10) sickness insurance; 11) unemployment benefits.

The application indicates access for the children and spouses of the Centre' staff, to the Polish social

benefits under the same conditions as for nationals, if they are EU citizens or citizens of the European

Economic Area or Switzerland.

4.2 Medical care The public health service in Poland is free of charge without restrictions and is open to all employees, their families and registered unemployed people. At the same

time, there is a private health service, which in Warsaw offers many specialised clinics and private hospitals. There are more than 1500 medical facilities in Warsaw,

including 88 hospitals (i.e. in-patient and 24-hour services). Warsaw also offers walk-in centres, as well as overnight and holiday healthcare facilities. Access to those

facilities is not limited and the medical staff speaks English. Hundreds of public hospitals, clinics, ambulatories are available, including facilities specialised in oncology

and cardiology. There are also dedicated health centres for children.

There are dozens of private entities that offer a full spectrum of medical services, including additional medical insurance.

Persons staying in Poland, insured in a EU or EFTA country, are invariably entitled to health services in kind provided by healthcare providers who have an agreement

with the National Health Fund. In accordance with the coordination of social security systems of EU/EFTA Member States, the scope of this right depends on the

nature of a person's stay in the territory of Poland and the type of document a given person has. Most often it is the European Health Insurance Card (EHIC/in Polish

EKUZ) or a Certificate of Temporary Replacement of EHIC. They confirm the entitlement to necessary benefits in kind during the stay in a Member State other than

the competent one. It does not matter whether the necessary healthcare provision is because of an accident or a contagious disease. The doctor shall choose the

benefits appropriate to the medical reasons and duration of the stay. The benefits are provided in accordance with the rules applicable to insured persons in the

country of stay.

The application provides information on access for families of all employees to the Polish public healthcare

system whose medical staff speaks English.

Page 8

Page 9: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

4.3 Information on the national job market and job opportunities • Warsaw offers perfect living conditions with very good medical care facilities and good job opportunities.

• Poland offers an open and stable job market that could easily meet the needs of the children and spouses of the Centre’s staff. Warsaw is a perfect place to seek-

out job opportunities, where more than 400 thousand business entities, including prominent global and local companies exist.

• Warsaw is listed at 1st place in the fDi Eastern European Cities of the Future 2020/21 and at 6th place in the European Cities of the Future 2020/21 listing. It is at

2nd place when it comes to business friendliness and at 8th place when it comes to Economic Potential (ranking published by the Financial Times).

• It is among the top three locations in Poland in terms of overall satisfaction of place for doing business (ABSL ranking).

• According to the "Global Best to Invest" ranking, in recent years, Poland has been in the top 10 in the world. At the same time, Poland is in the top 3 countries in

Europe that attracted the most foreign investments, and in 2019, foreign investors completed more than 370 projects in Poland.

• Warsaw, the capital of Poland, is ranked at 6th place on a list of top destinations for foreign direct investments in Europe for the 2020/21 period – the ranking

published by the Financial Times.

• It is one of the three largest business services locations in CEE

• Warsaw has the largest office market in CEE

• The city is the best-connected metropolis in Poland

• Despite the difficulties and challenges resulting from the Covid-19 pandemic, the unemployment rate in Poland remains very low (around 3%) and is the second

lowest in the EU.

• Indicators of the most frequently committed crimes, such as thefts and robberies, are significantly below the EU average. The situation is even better in Warsaw,

which is one of the safest Polish cities and one of the safest European capitals.

The application provides information on job opportunities and acess to the labour market for the children

and spouses of the Centre' staff. The application underlines the presence of business entities and gobal

companies, as well as the low level of unemployment in Warsaw.

4.4. Other Warsaw has the largest number of theatres, museums, cinemas, restaurants, entertainment and sports halls and other facilities related to culture, art and sport in

Poland and is one of the leading cities in Europe in this respect.

Warsaw culture life is very reach and differentiated. Warsaw hosts a number of concerts every week of all genres of music – from classical to jazz, rock or pop. Ballet

and dance performances along with theaters or open-air events and festivals offer or sorts of culture experiences. Numerous clubs provide entertainment scene for

those looking for relaxation and fun while dance groups offer chances to learn and master all sort of dances.

Warsaw offers rich culinary scene with thousands of restaurants catering for all tastes and cousins. Recently the city climbed top rankings in Europe for quickly

developing vegetarian and vegan sector.

There are many green areas within the administrative borders of Warsaw, not only on the outskirts, but also as wedges aerating the city inside. These are forests,

parks (the oldest , historical are called ‘gardens’ - the Saxon Garden or the Krasinski Garden), squares, allotment gardens, riverside areas along the Vistula, green

areas in old housing estates, and even nature reserves. Year by year there are more and more cycling paths and outdoor recreation areas in the city. In less than an

hour trip from the city centre one can reach large artificial lake offering sailing, windsurfing or boating and kayaking. There two beautiful golf courses within an hour

drive from the centre as well as numerous horsing clubs and facilities in Warsaw and around. Warsaw sport clubs offer opportunities to enjoy all sorts of disciplines

and physical activities.

Poland’s capital offers superb living conditions and accommodation options, high levels of security, educational and international facilities of the highest standard,

international job opportunities, good medical care facilities and well-functioning expats communities.

SUMMARY OF THE ASSESSMENT OF CRITERION 4 The application indicates access to Polish social benefits for children and spouses of the Centre' staff,

under the same conditions as for nationals, if they are EU citizens or citizens of the European Economic

Area or CH. The application provides detailed information on the nature and amount of Polish social

benefits. The application provides information on access for families of all employees to the Polish public

healthcare system, with English speaking medical staff. The application provides information on job

opportunities, underlying the presence of global companies and business entities, as well as the low

level of unemployment in Warsaw.

Criterion 5: Excellent connectivity, security and interoperability

with IT facilities for handling EU funding

`This criterion concerns the possibility of seamlessly take over

relevant IT processes relating to management of relevant EU

funding, including access to the TESTA network. It also concerns

solid capacities in terms of cybersecurity resilience of

communication networks.`

Page 9

Page 10: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

5.1 High-speed connectivity Exatel, a state owned telecommunications company offers ultra-speed fibre Internet connections. The estimated total length of fibre network in Poland currently

exceeds 20 thousand kilometres and the maximum bandwidth for a single connection to the DWDM network is up to 200 Gbps (offer for telcos). Exatel has huge

experience in connecting institutions derived from work for the Ministry of Interior and Polish Post. The company also has documented knowledge and experience in

ensuring connection to the TESTA network. In Warsaw, four countrywide mobile network operators (Play, Plus GSM, Orange, T-Mobile) offer broadband Internet

connection, including that of fast fibre-optic network, 4G network, LTE bandwidth and 5G network. The 5G network is being dynamically tested and developed in

Warsaw at this moment.

At the same time, there are many leading ISPs of super-fast Internet over the fibre-optic lines in the city, including UPC, Vectra and Netia. These offer attractive

Internet connections for both individuals and businesses. Warsaw also provides the possibility to obtain ultra-speed fibre connection (up to 2 Gbps).

Poland’s telecom regulatory body - the Office of Electronic Communications - has issued 2,800 permits for the start-up of further 5G base stations, most of which

relate to the 2100 MHz band. Additionally, a common fifth generation network is being built by operators and the Exatel company - #Polskie5G initiative. The main

goal is to develop a dedicated 5G network for the purpose of public administration.

The application indicates the availability of a high-speed connectivity infrastructure.

5.2 High-performing telecommunications and data storage

networks in line with physical and IT security standards (including

the possibility of supporting document management up to

SECRET UE/EU SECRET level)

Polish telecommunications companies, in particular, the 4 major mobile network operators and Exatel, offer a broad range of telecommunications, data storage and

IT solutions. Moreover, the Polish government provides certain entities (such as the Centre) the opportunity to use the existing secure telecommunications

infrastructure, which was developed and enabled by Exatel. The secure fixed fibre network may be used to ensure secured connection with the TESTA network.

Poland has experience in so doing gained by connecting FRONTEX with the TESTA. Moreover, Exatel also provides secured fibre networks to several government

administration entities, among them, the Ministry of Interior and Ministry of National Defence. In addition to the issue of access to the secure fibre-optic network,

Exatel is building a secure network in cooperation with the largest commercial telecommunications companies.

All three selected locations offered to seat the Centre allow access to the ultra-speed fibre network. The Centre may choose the provider from the list of several ISPs,

including: Vectra (up to 2Gbps), Netia (up to 1Gbps), UPC (up to 1Gbps), JMDI (up to 2Gbps), Orange (up to 1Gbps), T-Mobile (up to 1Gbps) etc. Many of these

companies also offer additional services including cloud services, VoIP, mobile services (4G, LTE, 5G), as well as data storage etc.

The application indicates the availability of high-performing telecommunication and data storage

networks in line with physical and IT standards (see 5.4), but does not indicate the possibility of supporting

document management up to SECRET UE/EU SECRET level.

5.3 Security of the connectivity infrastructure of the Centre in line

with the principles agreed by MS such as in the 5G cybersecurity

toolbox

• Poland is fully committed to implementing as soon as possible the recommendations delivered in the European 5G Toolbox. The relevant amendment in the Polish

legal system is now being processed. The first step was achieved in June 2020 with publication of Ordinance to the Telecommunication Law covering increased

security organizational and technical measures for telecom operators and new requirements for 5G operators. The next step is the ongoing amendment to the Law

on National Cybersecurity Systems and a new Law on Electronic Communication introducing all strategic and technical measures agreed within the 5G Toolbox.

• The #Polskie5G initiative was launched with an aim at developing dedicated to emergency services and public authorities, a secure 5G network. The project is led by

the state-owned company Exatel, in cooperation with the 4 major Telco’s. The project is supported by the Polish Development Fund.

• To make a 5G technology secure and delivered only by trusted vendors, together with Germany, we are leading the work on developing a common 5G cybersecurity

certification scheme at the European level. In this initiative, Poland has partnered with Germany to implement a dedicated process on 5G cybersecurity

standardization and certification. In co-chairing the 5G Cybersecurity Standardization and Certification Sub-Group (under the NIS Cooperation Group), we are working

on mapping existing industry standards and developing the necessary testing and evaluation criteria. Such national bilateral commitment by Poland and Germany will

directly support and speed up work on developing a common 5G cybersecurity certification scheme at the European level.

• A few biggest cyber and tech companies have launched massive investments in the Polish market in the last 2 years.

Samsung located their R&D centre (SRPOL) in Warsaw. Samsung R&D Institute Poland is one of the largest and fastest growing R&D centres in the CEE region, and

have a diverse team of experts working in the areas of human language technology, computer vision, Big Data, Internet of Things, and many more. SRPOL develops

and implements innovative solutions for future Samsung products.

Likewise, Ericsson – a global company and one of the biggest service provider for telecommunications operators – also invests in Poland. The company's products

include: fixed and mobile network infrastructure, broadband Internet and multimedia solutions. Ericsson is an active promoter of 5G technology in Poland and a

member of the Agreement for the "5G for Poland" strategy.

Ericsson has two R&D’s centres in Lodz and Krakow and employs nearly 2000 engineers responsible for the development of further Ericsson ICT products used

worldwide.

Ericsson has announced recently its decision to invest in the city of Tczew to produce breakthrough mobile technology solutions. The factory in Tczew will fully serve

the European market.

Moreover, a new n Nokia laboratory is under construction in Wroclaw. In the Nokia R&D centre in Wroclaw, engineers deal with software for telecommunications

systems, working on such technologies as 2G - GSM, 3G - WCDMA and 4G - LTE, as well as dealing with the standardisation process for 5G technologies. Various state-

of the-art solutions are being developed in Wroclaw ranging from 5G network infrastructure and the Internet of Things to new virtual reality and digital health

applications.

It is also worth mentioning that Samsung, Nokia and Ericsson participate in the Polish hub of knowledge and competences - Cybersecurity Cooperation Program

(PWCyber). It is a PPP in Cyber Security launched by the Ministry of Digital Affairs (now The Chancellery of the Prime Minister) in order to increase cybersecurity of

Poland.

The application provides information on security of connectivity infrastructure and commitment to the 5G

cybersecurity toolbox.

Page 10

Page 11: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

5.4 Compliance of the security of premises and IT infrastructure

for handling information up to SECRET UE/EU SECRET with the

relevant rules for classified information

In view of the valuable experience gained from the establishment of the European Border and Coast Guard Agency (FRONTEX) in Warsaw, Poland offers the

possibility of using its secure IT infrastructure for any facility in the context of the establishment of the European Competence Centre for processing information up to

EU SECRET level, using the existing TESTA and Exatel secured fibre optics network.

All of three selected locations ensure high quality security level, including physical safety of the personnel, as well as security of IT infrastructure. The office space

may be easily adopted to include a dedicated room to meet even higher security requirements for handling classified information. It needs be noticed that the

company managing two out of the three locations has documented experience in adapting spaces to meet security requirements for storing classified information.

The application indicates compliance of the security of premises and IT infrastructure and the possibility to

meet security requirements for handling classified information and refers to experience of processing

information up to EU SECRET level.

5.5 Ability to seamlessly take over IT processes relating to

management of relevant EU funding, including access to TESTA

network where possible

We can ensure excellent connectivity, security and interoperability with IT facilities for handling EU funding. Poland has a great experience in facilitating connection

with the TESTA network. It was already provided with EU’s agency in Warsaw - the European Border and Coast Guard Agency (FRONTEX).

Poland has a long experience of successful implementation of the EU funds. It has created an environment where private sector, local and central administrations and

other shareholders developed well-functioning system of distributing and using EU funds for bigger and smaller projects. Therefore, we guarantee excellent

connectivity, security and interoperability with IT facilities in handling EU funding.

The application provides information on the ability to seamlessly take over IT processes relating to

management of relevant EU funding, including access to TESTA network.

5.6 Regarding the meeting rooms, high-quality fixed and wireless

(4G or higher) connectivity, as well as audio and video conference

facilities

In Warsaw, broadband Internet access to 4G, LTE or 5G super-fast networks is available.

Each proposed location provides the requested meeting rooms, as well as audio and video conference facilities. Within each of the indicated locations it is possible to

connect the Centre to broadband fibre-optic internet, as well as to use 5G mobile services offered by the 4 major mobile network operators. All three selected

locations allow access to the ultra-speed Internet via secured fibre networks.

The application indicates the availability of meeting rooms with high-quality fixed and wireless (4G or

higher) connectivity, as well as audio and video conference facilities, in all premises.

5.7 Other Having in mind that providing the EU entity cybersecurity services is the sole competence of the EU itself, Poland offers close cooperation with 3 CSIRTs at the

national level, as well as other governmental institutions that deal with cybersecurity matters, including sharing information on incidents, cyber threats and

vulnerabilities, to ensure that the Centre, if established in Poland, will be able to obtain a global picture of the cyber environment. CSIRTs will also, at the request of

the Centre, ensure support in handling incidents.

SUMMARY OF THE ASSESSMENT OF CRITERION 5 The application indicates the availability of a high-speed connectivity infrastructure. The application

indicates the availability of high-performing telecommunication and data storage networks; it does not

indicate the possibility of supporting document management up to SECRET UE/EU SECRET level. The

application provides information on security of connectivity and commitment to the 5G cybersecurity

toolbox. The application indicates compliance of the security of premises and IT infrastructure and the

possibility to meet security requirements for handling classified information and refers to experience of

processing information up to EU SECRET level. The application provides information on the ability to

seamlessly take over IT processes relating to management of relevant EU funding, including access to

TESTA network. The application indicates the availability of meeting rooms with high-quality fixed and

wireless (4G or higher) connectivity, as well as audio and video conference facilities, in the 3 premises.

Criterion 6: Existence of a cybersecurity ecosystem

`This criterion concerns the existance of a relevant ecosystem of

organisations active in the field of cybersecurity in the host city,

such as other cybersecurity (research) institutions, knowledge

institutions or relevant companies and/or communities.`

Poland follows a decentralized and fully harmonized model of cybersecurity. We have several Competent Authorities and 3 CSIRTs at the national level. Coordination

is ensured by the Government Plenipotentiary for Cybersecurity and by the Advisory Committee for Cybersecurity. The Polish cyber-ecosystem is composed of many

entities represented by public, as well as private sectors. There are more than 160 Operators of Essential Services and more than 60 Digital Service Providers

operating in the country. The system is also going towards a tight linking of the cybersecurity system with the critical infrastructure. Moreover, it is worth mentioning

that Poland’s cyber-ecosystem includes local government units (over 3,000 entities), as well as universities and research institutes. Poland has a well-organised and a

well-functioning cyber community, including Government, Academia and Industry bodies. The Government has supported establishment of an initiative Polish

Cybersecurity Cluster #CyberMadeinPoland - it is the biggest IT-sec cluster in Poland and CEE, gathering 44 innovative cybersecurity companies from the start-ups and

SME sector, as well as national leaders in the industry.

The main topics on the agenda of #CyberMadeinPoland are:

• export of innovative Polish technologies,

• education of the market,

• regulatory and certification issues,

• active mapping of the cybersecurity potential of Poland and the CEE.

Focusing on the last point, on researching the Polish start-up and scale-up landscape, we can point to at least four niches of regional specialization in the most

promising branches of, not only the European, but the global cybersecurity market. These are:

1. security of industrial systems reliant on distributed endpoints – IoT and SCADA;

2. security of software code, web applications and programming process;

3. identity verification;

4. cryptography;

Summary of the Polish Cybersecurity Cluster #CyberMadeInPoland:

• 50+ cyber competences

• 40+ companies

• 25+ development projects

• 20+ partners.

Importantly, the cybersecurity industry in Poland is maturing and taking on a more active role in the regional IT ecosystem. The global cybersecurity market is now

(2020) estimated to be worth between 115 and 180 billion USD per year. The Three Seas region and high-calibre technical staff forged at Central and Eastern

European universities are the foundation for the competitive edge of locally developed products. Regarding the size of the CEE cybersecurity markets; Poland is the

leader in terms of size.

The first sectoral Computer Incident Response Team in Poland, created by the Polish Financial Supervision Authority, was established to comprehensively secure the

banking and financial sector in Poland. Moreover, the first Information Exchange and Analysis Centre (ISAC) in the CEE was established for the railway sector in

Poland.

Poland can, therefore, assure a perfect connection to a EU-wide cybersecurity ecosystem and ensure its funding. The Polish ICT sector and cyber R&D projects stands

out because:

A significant boost in the ICT sector in Poland has been observed in recent years;

The number of enterprises hiring 10 or more people in the ICT sector in Poland reached nearly 2400 companies in 2018, and the number of people employed in the

ICT sector has exceeded 250.000;

Between 2012 and 2016, the digital economy grew in Poland by 7%, whereas the average growth of EU’s BIG5 was only 3.1%;

For instance, Polish CD Project RED became in 2020, the largest gaming company in Europe.

In 2018, expenditure on R&D in the ICT sector reached 3,4 billion PLN and increased by 94.7% compared to 2015;

IT services were also the field of activity in which enterprises hired the biggest number of persons of all those employed in ICT services (72.2%);

The value of net revenues from sales in the ICT sector has amounted to 158 billion PLN in 2018 - a yearly increase by 5.2%;

In 2016–2018, over one third of all ICT sector enterprises introduced innovations.

Page 11

Page 12: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

6.1 Description of the existence of a relevant cybersecurity

ecosystem in the host city (such as other cybersecurity (research)

institutions, knowledge institutions or relevant companies

and/or communities)

At present, there are about 30 IT hubs / clusters in Poland, and over 20 research institutes. Some occupy unique and important roles, such as:

1) The Research and Academic Computer Network – National Research Institute (NASK-PIB), a leading research institute for IT solutions in Poland. The NASK-PIB

operates one of three CSIRTs at national level and specialises in supporting the private sector.

Although Poland was embargoed for western computer technologies until 1990, at present, Poland’s online service market is one of the most developed in Europe. In

Poland, 13,9 million bank account owners uses mobile services (bank apps, BLIK and smartphone payments), 18 million residents of Poland use online bank services

through Internet browsers, 19 million people actively use social media. This gives the Polish society a great deal of convenience and opportunity to learn, meet

people, discover the world, but it comes with certain risks. NASK recognizes those risks and its main research and operational activity is focused on preventing them

and helping society to use the new services safely and securely.

Security – CSIRT NASK is one of three top level CSIRTs responsible for cybersecurity in Poland. It is also a member of the EU cybersecurity system. It benefits greatly

from the experience of CERT Poland, which was formed in 1996 and is one of the oldest CERTs in Europe.

Safety – the Polish Safer Internet Centre (PSIC) was established in 2005 under the European Commission's Safer Internet Programme. NASK is a member of the

consortium, governing the Centre. Its activities include professional conferences and educational programmes. It also supports Dyżurnet.pl, which is a hotline

responding to harmful and illegal content, including child sexual abuse materials distributed on the Internet.

Education - The Polish Nationwide Educational Network is a program that provides teachers and students in public schools free access to fast and safe Internet and to

modern educational tools. NASK operates the program and provides the security tools.

Academia – NASK provides a creative environment for young scientists and engineers to develop their skills and interests, as well as to achieve their research goals.

The Institute is also one of the founders of a PhD Programme in Biomedical Technologies, together with the Polish Academy of Sciences.

R&D – our various teams work constantly on improving our security through many different ways. NASK conducts research and develops new solutions in areas such

as Artificial Intelligence, Internet of Things, network threat monitoring and situational awareness, Industrial Automation security, banking security, social research

and user behaviour, education and awareness rising

Global cooperation – in the global network both threats and security efforts also need to be global. NASK cooperates with various partners in many areas, including

military telecommunication security, global threat monitoring and response, and knowledge sharing. NASK experts take part in international research programmes,

operational activities, as well as exercise, contests and conferences

Fostering cooperation

We do believe in cooperation and trust building among various essential and critical sectors such as energy, banking, transport or water supply. Hence, in 2016, we

launched, together with Poland’s government, the Partnership for Cybersecurity programme, which involves 68 partners from both the private and public sectors.

This collaboration assumes the form of public-private partnerships. All partners can increase their cybersecurity at technical, strategic and competence levels.

In this framework, we also support the establishment of sectorial ISACs (Information Sharing and Analysis Centres). ISAC is also in the form of a public-private

partnership. Members of an ISAC agree to share their knowledge and good practices in order to improve the security of their operations. Our experts assist and

support essential and critical sectors in creating and developing ISACs.

The developed MWDB (malware data base) system was established to aid malware researchers. Through it, experts can upload malware samples to be shared with

the research community. The MWDB System assists the work of cybersecurity researchers, such as CSIRT employees (who are responsible for Poland’s cybersecurity)

or academics. Results of such research are shared with companies, institutions and individuals engaged in fighting cybercrime.

Capability building

Cybersecurity Certification – NASK, together with other institutes is building a cybersecurity evaluation and certification scheme in Poland based on the Common

Criteria approach. The project is a direct response to the European Commission’s initiative focused on developing the European Certification Framework for IT

products, services and processes.

Poland’s forensic Lab provides the user with a complete set of tools and devices to collect all kinds of electronic evidences and conduct comprehensive analysis. It is

divided into two modules: stationary and a very innovative mobile part installed in a special vehicle. The design of the methodology and operating procedures of the

laboratory will help to increase the detection of cybercrimes, and, thus, increase the security of cyberspace by eliminating harmful activities, particularly those

related to organized crime.

Global security

NASK values and is heavily involved in international cooperation. NASK represents Poland in ENISA. It facilitates “Together-safer, stronger, smarter" - an

international annual session for entities responsible for the national cybersecurity of different countries that is part of the annual SECURE conference – the oldest

cybersecurity conference in this part of Europe.

NASK, through the EU is involved in research projects on a worldwide scale, because cybersecurity calls for complex, innovative solutions and a holistic approach.

Over the years we have created novel cyber security solutions, together with several international partners in R&D projects. Among these are:

• SISSDEN project (under Horizon 2020) coordinated by NASK. The project developed the tools necessary to create the platform of a worldwide sensor network of

212 sensors in 52 countries that was deployed and operated by the project's consortium. In accomplishing this, our researchers developed innovative platform

architecture that enabled the monitoring of about 900 000 IP addresses, which resulted in the biggest database of precisely selected and informative data necessary

for identifying malware and suspicious behaviour.

• AMCE – “Advance threat Monitoring and Cooperation on the European and national levels”. This is a project financed by the Connecting Europe Facility program.

The main goal of the AMCE project is to improve cooperation at the operational level among incident response teams within the European Union, by linking existing

monitoring and analysis systems to key information exchange systems. As a result, all teams will be able to better detect and respond to online threats. AMCE is

based on the platform of the SISSDEN project.

• Melicertes2 - NASK leads the consortium implementing the MeliCERTes II project (SMART 2018/1024). The project aims at improving and extending collaboration

tools for the CSIRTs Network with emphasis on information exchange and communication. The project was begun in December 2019 and will last for three years.

Apart from CERT Poland, other European CSIRTs taking part in the project are CERT.at, CERT-EE, CIRCL and SK-CERT, with support from Deloitte, and the project is

being developed in close collaboration with ENISA.

The result of cooperation between Poland’s Internal Security Agency (where operates CSIRT GOV) with CSIRT NASK is the functioning of the ARAKIS-GOV system – an

early warning system that aims at supporting the protection of governmental administration and critical infrastructure ICT resources. The ARAKIS-GOV system offers

security for a rapidly changing society.

National hotline for harmful and illegal Internet content

„Dyżurnet.pl” - has been functioning within the NASK since 2005. It responds to reports received from Internet users about illegal content, mainly related to sexual

abuse of children. Dyżurnet.pl also carries out awareness raising and educational activities to increase the level of the online safety of children and young people.

Since 2005, Dyżurnet.pl has been a member of INHOPE (the International Association of Internet Hotlines).

2) The National Institute of Telecommunications (NIT) is a national research and development institution for telecommunications and information technologies. It

conducts development work on state telecommunication networks, system and telecommunication device normalization and standardization. It works for the

development of Poland’s society and knowledge-based industries.

The National Institute of Telecommunications was established in 1928, and supports cybersecurity in the telecom sector – e.g. by establishing a Crypto and IT

evaluation laboratory and partnering in 5G security testing.

At the international level, it actively participates in the international standard community, including establishing several international standards such as:

a) ISO/IEC 27000 Information security management systems – Vocabulary and Overview (4th edition)

b) ISO/IEC 27005 Information security risk management (4th edition)

c) ISO/IEC 15408-1 Evaluation Criteria for IT Security – Part 1: Introduction and general model (3rd edition)

The National Institute of Telecommunications has experts on Cybersecurity Terminology acting as Convenors of the Advisory Group on Concept and Terminology in

the field of Cybersecurity, and who are members of the Advisory Group on ICT terminology - both within the ISO community of experts.

At the European level, NIT actively participates in the work of the European standard community, including the edition of European Standard „Cybersecurity

evaluation methodology for ICT products” (project no. CEN 013029)

At the national (Polish) level, NIT is a member of the national technical committee that deals with cybersecurity, i.e. KT no. 182 “Information security in ICTsystems”.

KT 182 adopts international standards into the Polish Norm (PN) systems. The set of standards adopted in 2019-2020 includes (in Polish):

a) Projects identifiable information protection,

b) PN-ISO/IEC 29134 Information technology — Security techniques — Guidelines for privacy impact assessment,

c) PrPN ISO/IEC 18986-1 Information technology — Cloud computing ─ Service Level Agreement (SLA) framework — Part 1: Overview and concepts,

Cybersecurity ecosystem – R&D activities and commercial implementation.

NIT is the leader or a member of consortia involved in several R&D projects in the field of cybersecurity. Among these are the

National schema for the security and privacy evaluation and certification of IT products and systems compliant with Common Criteria (KSO3C). NIT shares

responsibility for the Innovative - hardware - software component, based on a dedicated integrated circuit and software to perform various cryptographic

application, with particular attention paid to:

- electronic identification systems with a high level of confidence (IDSoC) (leader of consortium)

- a National Platform of Cybersecurity (NPC) (member of consortium)

- an experimental platform for automatic verification and validation of cryptographic algorithms and protocols (EPW) (leader of consortium).

In Poland, NIT provides implementation of the above-mentioned R&D projects. One recent achievement in this field is the development of first Polish laboratory for

evaluating ICT products, including both SW and HE components. The laboratory is equipped with advanced SW and HW tools for evaluation, and is managed by

experienced researchers.

NIT is building an R&D ecosystem on cybersecurity by providing dissemination activities such as conferences, workshops, etc. As an example, NIT recently organized

the conference “Future Standards in cybersecurity” (https://nitconference.pl) with more than 400 participants from 40 countries.

Regarding cybersecurity ecosystems, NIT is building a strong PL position by implementing the Cybersecurity Act UE 2019/881.

NIT has been active in developing the CyberSecurity Act UE 2019/881 by:

a) contributing to the European Cybersecurity Certification Group (ECCG)

b) enacting SOG-IS, via the JIL Working Group and Working Group Crypto.

NIT is also present in the ENISA project called “Proposed methodology for consistent, risk-based definition of cybersecurity certification schemes” which is a

fundamental work for coordinated the CyberSecurity Act.

Of note: one representative from NIT (dr Elżbieta Andrukiewicz) is a member of the specially created working group at ENISA for the first European Certification

programme (next SOG-IS edition).

3) The Institute of Innovative Technologies (EMAG) is a part of the Łukasiewicz Research Network and provides unique activities in this part of Europe – it develops

and implements innovative solutions in the range of information technology, operational technology, cyber security and Industry 4.0. They join science with business.

EMAG’s achievements include obtaining several hundred patents, protection rights, registered trademarks, as well as numerous awards. Among its recognized

achievements are medals granted during domestic and international fair and exhibitions.

4) Military University of Technology (WAT) –a source of educated military staff for the Polish Armed Forces, it also holds scientific units carrying out comprehensive

scientific research in the field of cybersecurity and defence in the areas of risk monitoring, diagnostics and exploitation of infrastructure, nanotechnology and

biomedical engineering, electronics and telecommunications, IT and IT support for decision-making and crisis management. WAT closely cooperates with several

civilian partners - research institutes, universities and IT companies.

Cybersecurity – a priority in education

The cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw:

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers, and the Military Technical University - with dedicated Cryptology Studies).

The field of IT and digitization has been greatly developed in Poland. According to the data of the Central Statistical Office, in Poland, approximately 15,000 students

have graduated in IT studies, including that in cybersecurity , every year for the last 15 years.

Indeed, there are almost 60 universities or academia offering IT studies in Warsaw alone. Some, such as the Warsaw University of Technology and the Military

University of Technology provide education on cybersecurity, IT, as well as BA, MA, postgraduate studies related to digitization.

Every year hundreds of workshops, expert conferences including such brand marks as: CYBERSEC, SECURE, Security Case Study and other seminars are organised in

Poland. Most of these take place in Warsaw.

Military cyber-education

Each year, 1,500 secondary school graduates volunteer for military service and begin their studies at the Military University of Technology (WAT). By the end of 2025,

nearly 2,000 officers will have been educated in electronics and telecommunications, computer science, cryptology, cybersecurity, and information systems. In

October 2019, WAT, in cooperation with the University of Genoa, opened MBA studies in the field of cybersecurity management. These are the first studies of this

type in Poland in the field of cybersecurity, and offer the student, the development of a strong technological background, hence, enabling experienced managers to

build expertise in the field.

In October 2019, the SONDA NCO School in Zegrze was launched. Its task is to educate enlisted officer candidates, education in the field of telecommunication and

information technology, among others, for the needs of building Cyber Defence Forces and the cyber component in Poland’s Territorial Defence Forces.

5) Many NGOs are engaged in increasing the capacity of the Polish cyber-ecosystem. In cooperation with Poland’s public administration or separately, they provide a

major input into increasing awareness of cybersecurity among society. - The Cybersecurity Foundation is one of the

key Polish organisations in the field of cybersecurity. Its main activities are: awareness raising, research and development activities.

- The Kosciuszko Institute is a Polish independent, non-profit, non-governmental think tank and research institute. Its areas of expertise include cybersecurity. The

Kosciuszko Institute organises the well-known cyber conference ‘CYBERSEC’.

- The Bridge Foundation specialises in cybersecurity education and interactive cybersecurity challenges in Poland. It has launched the ‘Regional Cyber Labs’ project.

- Polish Confederation of Private Employers (‘Lewiatan’) – represents the interests of Polish private entrepreneurs, including that in the field of cybersecurity.

Poland’s public administration, by the participation of NASK, is also engaged in projects developed by the European Cybersecurity Organisation (ECSO). The

cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw: the

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers; the Military Technical University - with dedicated Cryptology Studies). Poland as a

Project Member of the EU’s Cyber Rapid Response Teams (CRRTs) within Permanent Structured Cooperation agreements (PESCO), actively cooperates with Member

States to help each other ensure a higher level of cyber resilience and collectively respond to cyber incidents.

An agreement was signed in 2020 on the establishment of the ISAC-Railway Information Exchange and Analysis Centre. The signatories of the document are railway

companies, the Railway Institute and NASK. This is the first initiative of this kind in Poland.

The initiative is also of key importance from the point of view of the operation of the whole railway network, as it contributes to increasing resistance to cyber-

threatening of information and communication systems used by rail transport. Raising the level of IT security will contribute to an increase in the overall security of

critical railway infrastructure, which consists of management of railway lines and passenger and freight transport.

As of 1 July 2020, a CSIRT team dedicated to the banking sector was established in the Cyber Security Department of the Polish Financial Supervision Authority (CRIST

KNF). The team's tasks include analysing trends and threats specific to the Polish financial sector, as well as transferring this information to supervised entities.

In 2019, the Silesian Internet Cluster of SINOTAIC Items was established. It is the first such undertaking in Poland. The founders of the Cluster emphasize that the

introduction of technologies related to the broadly understood ‘Internet of Things’ to the regional economy is necessary to increase the competitiveness and

innovation of Silesia. The IoT Cluster is a business support platform and the initiator of the Cluster is the Silesian Voivodship, and the coordinator is the company

‘Secure Smart Network’ in Gliwice. The remaining members of the Cluster are: University of Silesia, Silesian University of Technology, The Upper Silesian Fund, SPIN-

US, APA Group, Revolve and EMAG Katowice.

‘Govtech’ is an interdepartmental team working alongside the Prime Minister - and its efforts extend across the whole public sector. Its purpose is to coordinate

strategic digital projects, involving entrepreneurs, officials, citizens and all those who can support the transformation of the Polish public sector with their ideas. They

draw on the best international experience, but they also share their knowledge with other countries, showing Poland as a country that is able to contribute as much

in the digital sphere as the world's biggest players. Moreover, Govtech organizes many Hackathons in Poland, such as Hackathon of Public Data, New Data Page -

Hackathon, Hackathon #OpenData, Hackathon ESGI and many others.

The development of FinTech in Poland is visualised by the project of creating optimal conditions for the dynamic development of financial innovations and

popularization of access to modern financial services in Poland. It is an important step towards the establishment of a financial innovation centre in Central and

Eastern Europe (NewTech Poland) within our country.

The project is implemented by the Ministry of Finance (MF) and the Office of the Financial Supervision Authority (UKNF), with the support of the European Bank for

Reconstruction and Development (EBRD) and the European Commission (EC).

Moreover, it is also worth mentioning that Poland has become a winner of CodeWeek 2020. This year's historic result would not have been possible without the

involvement of teachers, parents, schools, kindergartens, non-governmental organisations, public institutions and private companies.

The application provides information on the existence of a relevant cybersecurity ecosystem in Warsaw,

such as other cybersecurity (research) institutions, knowledge institutions or relevant companies and/or

communities.

Criterion 6: Existence of a cybersecurity ecosystem

`This criterion concerns the existance of a relevant ecosystem of

organisations active in the field of cybersecurity in the host city,

such as other cybersecurity (research) institutions, knowledge

institutions or relevant companies and/or communities.`

Poland follows a decentralized and fully harmonized model of cybersecurity. We have several Competent Authorities and 3 CSIRTs at the national level. Coordination

is ensured by the Government Plenipotentiary for Cybersecurity and by the Advisory Committee for Cybersecurity. The Polish cyber-ecosystem is composed of many

entities represented by public, as well as private sectors. There are more than 160 Operators of Essential Services and more than 60 Digital Service Providers

operating in the country. The system is also going towards a tight linking of the cybersecurity system with the critical infrastructure. Moreover, it is worth mentioning

that Poland’s cyber-ecosystem includes local government units (over 3,000 entities), as well as universities and research institutes. Poland has a well-organised and a

well-functioning cyber community, including Government, Academia and Industry bodies. The Government has supported establishment of an initiative Polish

Cybersecurity Cluster #CyberMadeinPoland - it is the biggest IT-sec cluster in Poland and CEE, gathering 44 innovative cybersecurity companies from the start-ups and

SME sector, as well as national leaders in the industry.

The main topics on the agenda of #CyberMadeinPoland are:

• export of innovative Polish technologies,

• education of the market,

• regulatory and certification issues,

• active mapping of the cybersecurity potential of Poland and the CEE.

Focusing on the last point, on researching the Polish start-up and scale-up landscape, we can point to at least four niches of regional specialization in the most

promising branches of, not only the European, but the global cybersecurity market. These are:

1. security of industrial systems reliant on distributed endpoints – IoT and SCADA;

2. security of software code, web applications and programming process;

3. identity verification;

4. cryptography;

Summary of the Polish Cybersecurity Cluster #CyberMadeInPoland:

• 50+ cyber competences

• 40+ companies

• 25+ development projects

• 20+ partners.

Importantly, the cybersecurity industry in Poland is maturing and taking on a more active role in the regional IT ecosystem. The global cybersecurity market is now

(2020) estimated to be worth between 115 and 180 billion USD per year. The Three Seas region and high-calibre technical staff forged at Central and Eastern

European universities are the foundation for the competitive edge of locally developed products. Regarding the size of the CEE cybersecurity markets; Poland is the

leader in terms of size.

The first sectoral Computer Incident Response Team in Poland, created by the Polish Financial Supervision Authority, was established to comprehensively secure the

banking and financial sector in Poland. Moreover, the first Information Exchange and Analysis Centre (ISAC) in the CEE was established for the railway sector in

Poland.

Poland can, therefore, assure a perfect connection to a EU-wide cybersecurity ecosystem and ensure its funding. The Polish ICT sector and cyber R&D projects stands

out because:

A significant boost in the ICT sector in Poland has been observed in recent years;

The number of enterprises hiring 10 or more people in the ICT sector in Poland reached nearly 2400 companies in 2018, and the number of people employed in the

ICT sector has exceeded 250.000;

Between 2012 and 2016, the digital economy grew in Poland by 7%, whereas the average growth of EU’s BIG5 was only 3.1%;

For instance, Polish CD Project RED became in 2020, the largest gaming company in Europe.

In 2018, expenditure on R&D in the ICT sector reached 3,4 billion PLN and increased by 94.7% compared to 2015;

IT services were also the field of activity in which enterprises hired the biggest number of persons of all those employed in ICT services (72.2%);

The value of net revenues from sales in the ICT sector has amounted to 158 billion PLN in 2018 - a yearly increase by 5.2%;

In 2016–2018, over one third of all ICT sector enterprises introduced innovations.

Page 12

Page 13: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

6.1 Description of the existence of a relevant cybersecurity

ecosystem in the host city (such as other cybersecurity (research)

institutions, knowledge institutions or relevant companies

and/or communities)

At present, there are about 30 IT hubs / clusters in Poland, and over 20 research institutes. Some occupy unique and important roles, such as:

1) The Research and Academic Computer Network – National Research Institute (NASK-PIB), a leading research institute for IT solutions in Poland. The NASK-PIB

operates one of three CSIRTs at national level and specialises in supporting the private sector.

Although Poland was embargoed for western computer technologies until 1990, at present, Poland’s online service market is one of the most developed in Europe. In

Poland, 13,9 million bank account owners uses mobile services (bank apps, BLIK and smartphone payments), 18 million residents of Poland use online bank services

through Internet browsers, 19 million people actively use social media. This gives the Polish society a great deal of convenience and opportunity to learn, meet

people, discover the world, but it comes with certain risks. NASK recognizes those risks and its main research and operational activity is focused on preventing them

and helping society to use the new services safely and securely.

Security – CSIRT NASK is one of three top level CSIRTs responsible for cybersecurity in Poland. It is also a member of the EU cybersecurity system. It benefits greatly

from the experience of CERT Poland, which was formed in 1996 and is one of the oldest CERTs in Europe.

Safety – the Polish Safer Internet Centre (PSIC) was established in 2005 under the European Commission's Safer Internet Programme. NASK is a member of the

consortium, governing the Centre. Its activities include professional conferences and educational programmes. It also supports Dyżurnet.pl, which is a hotline

responding to harmful and illegal content, including child sexual abuse materials distributed on the Internet.

Education - The Polish Nationwide Educational Network is a program that provides teachers and students in public schools free access to fast and safe Internet and to

modern educational tools. NASK operates the program and provides the security tools.

Academia – NASK provides a creative environment for young scientists and engineers to develop their skills and interests, as well as to achieve their research goals.

The Institute is also one of the founders of a PhD Programme in Biomedical Technologies, together with the Polish Academy of Sciences.

R&D – our various teams work constantly on improving our security through many different ways. NASK conducts research and develops new solutions in areas such

as Artificial Intelligence, Internet of Things, network threat monitoring and situational awareness, Industrial Automation security, banking security, social research

and user behaviour, education and awareness rising

Global cooperation – in the global network both threats and security efforts also need to be global. NASK cooperates with various partners in many areas, including

military telecommunication security, global threat monitoring and response, and knowledge sharing. NASK experts take part in international research programmes,

operational activities, as well as exercise, contests and conferences

Fostering cooperation

We do believe in cooperation and trust building among various essential and critical sectors such as energy, banking, transport or water supply. Hence, in 2016, we

launched, together with Poland’s government, the Partnership for Cybersecurity programme, which involves 68 partners from both the private and public sectors.

This collaboration assumes the form of public-private partnerships. All partners can increase their cybersecurity at technical, strategic and competence levels.

In this framework, we also support the establishment of sectorial ISACs (Information Sharing and Analysis Centres). ISAC is also in the form of a public-private

partnership. Members of an ISAC agree to share their knowledge and good practices in order to improve the security of their operations. Our experts assist and

support essential and critical sectors in creating and developing ISACs.

The developed MWDB (malware data base) system was established to aid malware researchers. Through it, experts can upload malware samples to be shared with

the research community. The MWDB System assists the work of cybersecurity researchers, such as CSIRT employees (who are responsible for Poland’s cybersecurity)

or academics. Results of such research are shared with companies, institutions and individuals engaged in fighting cybercrime.

Capability building

Cybersecurity Certification – NASK, together with other institutes is building a cybersecurity evaluation and certification scheme in Poland based on the Common

Criteria approach. The project is a direct response to the European Commission’s initiative focused on developing the European Certification Framework for IT

products, services and processes.

Poland’s forensic Lab provides the user with a complete set of tools and devices to collect all kinds of electronic evidences and conduct comprehensive analysis. It is

divided into two modules: stationary and a very innovative mobile part installed in a special vehicle. The design of the methodology and operating procedures of the

laboratory will help to increase the detection of cybercrimes, and, thus, increase the security of cyberspace by eliminating harmful activities, particularly those

related to organized crime.

Global security

NASK values and is heavily involved in international cooperation. NASK represents Poland in ENISA. It facilitates “Together-safer, stronger, smarter" - an

international annual session for entities responsible for the national cybersecurity of different countries that is part of the annual SECURE conference – the oldest

cybersecurity conference in this part of Europe.

NASK, through the EU is involved in research projects on a worldwide scale, because cybersecurity calls for complex, innovative solutions and a holistic approach.

Over the years we have created novel cyber security solutions, together with several international partners in R&D projects. Among these are:

• SISSDEN project (under Horizon 2020) coordinated by NASK. The project developed the tools necessary to create the platform of a worldwide sensor network of

212 sensors in 52 countries that was deployed and operated by the project's consortium. In accomplishing this, our researchers developed innovative platform

architecture that enabled the monitoring of about 900 000 IP addresses, which resulted in the biggest database of precisely selected and informative data necessary

for identifying malware and suspicious behaviour.

• AMCE – “Advance threat Monitoring and Cooperation on the European and national levels”. This is a project financed by the Connecting Europe Facility program.

The main goal of the AMCE project is to improve cooperation at the operational level among incident response teams within the European Union, by linking existing

monitoring and analysis systems to key information exchange systems. As a result, all teams will be able to better detect and respond to online threats. AMCE is

based on the platform of the SISSDEN project.

• Melicertes2 - NASK leads the consortium implementing the MeliCERTes II project (SMART 2018/1024). The project aims at improving and extending collaboration

tools for the CSIRTs Network with emphasis on information exchange and communication. The project was begun in December 2019 and will last for three years.

Apart from CERT Poland, other European CSIRTs taking part in the project are CERT.at, CERT-EE, CIRCL and SK-CERT, with support from Deloitte, and the project is

being developed in close collaboration with ENISA.

The result of cooperation between Poland’s Internal Security Agency (where operates CSIRT GOV) with CSIRT NASK is the functioning of the ARAKIS-GOV system – an

early warning system that aims at supporting the protection of governmental administration and critical infrastructure ICT resources. The ARAKIS-GOV system offers

security for a rapidly changing society.

National hotline for harmful and illegal Internet content

„Dyżurnet.pl” - has been functioning within the NASK since 2005. It responds to reports received from Internet users about illegal content, mainly related to sexual

abuse of children. Dyżurnet.pl also carries out awareness raising and educational activities to increase the level of the online safety of children and young people.

Since 2005, Dyżurnet.pl has been a member of INHOPE (the International Association of Internet Hotlines).

2) The National Institute of Telecommunications (NIT) is a national research and development institution for telecommunications and information technologies. It

conducts development work on state telecommunication networks, system and telecommunication device normalization and standardization. It works for the

development of Poland’s society and knowledge-based industries.

The National Institute of Telecommunications was established in 1928, and supports cybersecurity in the telecom sector – e.g. by establishing a Crypto and IT

evaluation laboratory and partnering in 5G security testing.

At the international level, it actively participates in the international standard community, including establishing several international standards such as:

a) ISO/IEC 27000 Information security management systems – Vocabulary and Overview (4th edition)

b) ISO/IEC 27005 Information security risk management (4th edition)

c) ISO/IEC 15408-1 Evaluation Criteria for IT Security – Part 1: Introduction and general model (3rd edition)

The National Institute of Telecommunications has experts on Cybersecurity Terminology acting as Convenors of the Advisory Group on Concept and Terminology in

the field of Cybersecurity, and who are members of the Advisory Group on ICT terminology - both within the ISO community of experts.

At the European level, NIT actively participates in the work of the European standard community, including the edition of European Standard „Cybersecurity

evaluation methodology for ICT products” (project no. CEN 013029)

At the national (Polish) level, NIT is a member of the national technical committee that deals with cybersecurity, i.e. KT no. 182 “Information security in ICTsystems”.

KT 182 adopts international standards into the Polish Norm (PN) systems. The set of standards adopted in 2019-2020 includes (in Polish):

a) Projects identifiable information protection,

b) PN-ISO/IEC 29134 Information technology — Security techniques — Guidelines for privacy impact assessment,

c) PrPN ISO/IEC 18986-1 Information technology — Cloud computing ─ Service Level Agreement (SLA) framework — Part 1: Overview and concepts,

Cybersecurity ecosystem – R&D activities and commercial implementation.

NIT is the leader or a member of consortia involved in several R&D projects in the field of cybersecurity. Among these are the

National schema for the security and privacy evaluation and certification of IT products and systems compliant with Common Criteria (KSO3C). NIT shares

responsibility for the Innovative - hardware - software component, based on a dedicated integrated circuit and software to perform various cryptographic

application, with particular attention paid to:

- electronic identification systems with a high level of confidence (IDSoC) (leader of consortium)

- a National Platform of Cybersecurity (NPC) (member of consortium)

- an experimental platform for automatic verification and validation of cryptographic algorithms and protocols (EPW) (leader of consortium).

In Poland, NIT provides implementation of the above-mentioned R&D projects. One recent achievement in this field is the development of first Polish laboratory for

evaluating ICT products, including both SW and HE components. The laboratory is equipped with advanced SW and HW tools for evaluation, and is managed by

experienced researchers.

NIT is building an R&D ecosystem on cybersecurity by providing dissemination activities such as conferences, workshops, etc. As an example, NIT recently organized

the conference “Future Standards in cybersecurity” (https://nitconference.pl) with more than 400 participants from 40 countries.

Regarding cybersecurity ecosystems, NIT is building a strong PL position by implementing the Cybersecurity Act UE 2019/881.

NIT has been active in developing the CyberSecurity Act UE 2019/881 by:

a) contributing to the European Cybersecurity Certification Group (ECCG)

b) enacting SOG-IS, via the JIL Working Group and Working Group Crypto.

NIT is also present in the ENISA project called “Proposed methodology for consistent, risk-based definition of cybersecurity certification schemes” which is a

fundamental work for coordinated the CyberSecurity Act.

Of note: one representative from NIT (dr Elżbieta Andrukiewicz) is a member of the specially created working group at ENISA for the first European Certification

programme (next SOG-IS edition).

3) The Institute of Innovative Technologies (EMAG) is a part of the Łukasiewicz Research Network and provides unique activities in this part of Europe – it develops

and implements innovative solutions in the range of information technology, operational technology, cyber security and Industry 4.0. They join science with business.

EMAG’s achievements include obtaining several hundred patents, protection rights, registered trademarks, as well as numerous awards. Among its recognized

achievements are medals granted during domestic and international fair and exhibitions.

4) Military University of Technology (WAT) –a source of educated military staff for the Polish Armed Forces, it also holds scientific units carrying out comprehensive

scientific research in the field of cybersecurity and defence in the areas of risk monitoring, diagnostics and exploitation of infrastructure, nanotechnology and

biomedical engineering, electronics and telecommunications, IT and IT support for decision-making and crisis management. WAT closely cooperates with several

civilian partners - research institutes, universities and IT companies.

Cybersecurity – a priority in education

The cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw:

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers, and the Military Technical University - with dedicated Cryptology Studies).

The field of IT and digitization has been greatly developed in Poland. According to the data of the Central Statistical Office, in Poland, approximately 15,000 students

have graduated in IT studies, including that in cybersecurity , every year for the last 15 years.

Indeed, there are almost 60 universities or academia offering IT studies in Warsaw alone. Some, such as the Warsaw University of Technology and the Military

University of Technology provide education on cybersecurity, IT, as well as BA, MA, postgraduate studies related to digitization.

Every year hundreds of workshops, expert conferences including such brand marks as: CYBERSEC, SECURE, Security Case Study and other seminars are organised in

Poland. Most of these take place in Warsaw.

Military cyber-education

Each year, 1,500 secondary school graduates volunteer for military service and begin their studies at the Military University of Technology (WAT). By the end of 2025,

nearly 2,000 officers will have been educated in electronics and telecommunications, computer science, cryptology, cybersecurity, and information systems. In

October 2019, WAT, in cooperation with the University of Genoa, opened MBA studies in the field of cybersecurity management. These are the first studies of this

type in Poland in the field of cybersecurity, and offer the student, the development of a strong technological background, hence, enabling experienced managers to

build expertise in the field.

In October 2019, the SONDA NCO School in Zegrze was launched. Its task is to educate enlisted officer candidates, education in the field of telecommunication and

information technology, among others, for the needs of building Cyber Defence Forces and the cyber component in Poland’s Territorial Defence Forces.

5) Many NGOs are engaged in increasing the capacity of the Polish cyber-ecosystem. In cooperation with Poland’s public administration or separately, they provide a

major input into increasing awareness of cybersecurity among society. - The Cybersecurity Foundation is one of the

key Polish organisations in the field of cybersecurity. Its main activities are: awareness raising, research and development activities.

- The Kosciuszko Institute is a Polish independent, non-profit, non-governmental think tank and research institute. Its areas of expertise include cybersecurity. The

Kosciuszko Institute organises the well-known cyber conference ‘CYBERSEC’.

- The Bridge Foundation specialises in cybersecurity education and interactive cybersecurity challenges in Poland. It has launched the ‘Regional Cyber Labs’ project.

- Polish Confederation of Private Employers (‘Lewiatan’) – represents the interests of Polish private entrepreneurs, including that in the field of cybersecurity.

Poland’s public administration, by the participation of NASK, is also engaged in projects developed by the European Cybersecurity Organisation (ECSO). The

cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw: the

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers; the Military Technical University - with dedicated Cryptology Studies). Poland as a

Project Member of the EU’s Cyber Rapid Response Teams (CRRTs) within Permanent Structured Cooperation agreements (PESCO), actively cooperates with Member

States to help each other ensure a higher level of cyber resilience and collectively respond to cyber incidents.

An agreement was signed in 2020 on the establishment of the ISAC-Railway Information Exchange and Analysis Centre. The signatories of the document are railway

companies, the Railway Institute and NASK. This is the first initiative of this kind in Poland.

The initiative is also of key importance from the point of view of the operation of the whole railway network, as it contributes to increasing resistance to cyber-

threatening of information and communication systems used by rail transport. Raising the level of IT security will contribute to an increase in the overall security of

critical railway infrastructure, which consists of management of railway lines and passenger and freight transport.

As of 1 July 2020, a CSIRT team dedicated to the banking sector was established in the Cyber Security Department of the Polish Financial Supervision Authority (CRIST

KNF). The team's tasks include analysing trends and threats specific to the Polish financial sector, as well as transferring this information to supervised entities.

In 2019, the Silesian Internet Cluster of SINOTAIC Items was established. It is the first such undertaking in Poland. The founders of the Cluster emphasize that the

introduction of technologies related to the broadly understood ‘Internet of Things’ to the regional economy is necessary to increase the competitiveness and

innovation of Silesia. The IoT Cluster is a business support platform and the initiator of the Cluster is the Silesian Voivodship, and the coordinator is the company

‘Secure Smart Network’ in Gliwice. The remaining members of the Cluster are: University of Silesia, Silesian University of Technology, The Upper Silesian Fund, SPIN-

US, APA Group, Revolve and EMAG Katowice.

‘Govtech’ is an interdepartmental team working alongside the Prime Minister - and its efforts extend across the whole public sector. Its purpose is to coordinate

strategic digital projects, involving entrepreneurs, officials, citizens and all those who can support the transformation of the Polish public sector with their ideas. They

draw on the best international experience, but they also share their knowledge with other countries, showing Poland as a country that is able to contribute as much

in the digital sphere as the world's biggest players. Moreover, Govtech organizes many Hackathons in Poland, such as Hackathon of Public Data, New Data Page -

Hackathon, Hackathon #OpenData, Hackathon ESGI and many others.

The development of FinTech in Poland is visualised by the project of creating optimal conditions for the dynamic development of financial innovations and

popularization of access to modern financial services in Poland. It is an important step towards the establishment of a financial innovation centre in Central and

Eastern Europe (NewTech Poland) within our country.

The project is implemented by the Ministry of Finance (MF) and the Office of the Financial Supervision Authority (UKNF), with the support of the European Bank for

Reconstruction and Development (EBRD) and the European Commission (EC).

Moreover, it is also worth mentioning that Poland has become a winner of CodeWeek 2020. This year's historic result would not have been possible without the

involvement of teachers, parents, schools, kindergartens, non-governmental organisations, public institutions and private companies.

The application provides information on the existence of a relevant cybersecurity ecosystem in Warsaw,

such as other cybersecurity (research) institutions, knowledge institutions or relevant companies and/or

communities.

Page 13

Page 14: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

6.1 Description of the existence of a relevant cybersecurity

ecosystem in the host city (such as other cybersecurity (research)

institutions, knowledge institutions or relevant companies

and/or communities)

At present, there are about 30 IT hubs / clusters in Poland, and over 20 research institutes. Some occupy unique and important roles, such as:

1) The Research and Academic Computer Network – National Research Institute (NASK-PIB), a leading research institute for IT solutions in Poland. The NASK-PIB

operates one of three CSIRTs at national level and specialises in supporting the private sector.

Although Poland was embargoed for western computer technologies until 1990, at present, Poland’s online service market is one of the most developed in Europe. In

Poland, 13,9 million bank account owners uses mobile services (bank apps, BLIK and smartphone payments), 18 million residents of Poland use online bank services

through Internet browsers, 19 million people actively use social media. This gives the Polish society a great deal of convenience and opportunity to learn, meet

people, discover the world, but it comes with certain risks. NASK recognizes those risks and its main research and operational activity is focused on preventing them

and helping society to use the new services safely and securely.

Security – CSIRT NASK is one of three top level CSIRTs responsible for cybersecurity in Poland. It is also a member of the EU cybersecurity system. It benefits greatly

from the experience of CERT Poland, which was formed in 1996 and is one of the oldest CERTs in Europe.

Safety – the Polish Safer Internet Centre (PSIC) was established in 2005 under the European Commission's Safer Internet Programme. NASK is a member of the

consortium, governing the Centre. Its activities include professional conferences and educational programmes. It also supports Dyżurnet.pl, which is a hotline

responding to harmful and illegal content, including child sexual abuse materials distributed on the Internet.

Education - The Polish Nationwide Educational Network is a program that provides teachers and students in public schools free access to fast and safe Internet and to

modern educational tools. NASK operates the program and provides the security tools.

Academia – NASK provides a creative environment for young scientists and engineers to develop their skills and interests, as well as to achieve their research goals.

The Institute is also one of the founders of a PhD Programme in Biomedical Technologies, together with the Polish Academy of Sciences.

R&D – our various teams work constantly on improving our security through many different ways. NASK conducts research and develops new solutions in areas such

as Artificial Intelligence, Internet of Things, network threat monitoring and situational awareness, Industrial Automation security, banking security, social research

and user behaviour, education and awareness rising

Global cooperation – in the global network both threats and security efforts also need to be global. NASK cooperates with various partners in many areas, including

military telecommunication security, global threat monitoring and response, and knowledge sharing. NASK experts take part in international research programmes,

operational activities, as well as exercise, contests and conferences

Fostering cooperation

We do believe in cooperation and trust building among various essential and critical sectors such as energy, banking, transport or water supply. Hence, in 2016, we

launched, together with Poland’s government, the Partnership for Cybersecurity programme, which involves 68 partners from both the private and public sectors.

This collaboration assumes the form of public-private partnerships. All partners can increase their cybersecurity at technical, strategic and competence levels.

In this framework, we also support the establishment of sectorial ISACs (Information Sharing and Analysis Centres). ISAC is also in the form of a public-private

partnership. Members of an ISAC agree to share their knowledge and good practices in order to improve the security of their operations. Our experts assist and

support essential and critical sectors in creating and developing ISACs.

The developed MWDB (malware data base) system was established to aid malware researchers. Through it, experts can upload malware samples to be shared with

the research community. The MWDB System assists the work of cybersecurity researchers, such as CSIRT employees (who are responsible for Poland’s cybersecurity)

or academics. Results of such research are shared with companies, institutions and individuals engaged in fighting cybercrime.

Capability building

Cybersecurity Certification – NASK, together with other institutes is building a cybersecurity evaluation and certification scheme in Poland based on the Common

Criteria approach. The project is a direct response to the European Commission’s initiative focused on developing the European Certification Framework for IT

products, services and processes.

Poland’s forensic Lab provides the user with a complete set of tools and devices to collect all kinds of electronic evidences and conduct comprehensive analysis. It is

divided into two modules: stationary and a very innovative mobile part installed in a special vehicle. The design of the methodology and operating procedures of the

laboratory will help to increase the detection of cybercrimes, and, thus, increase the security of cyberspace by eliminating harmful activities, particularly those

related to organized crime.

Global security

NASK values and is heavily involved in international cooperation. NASK represents Poland in ENISA. It facilitates “Together-safer, stronger, smarter" - an

international annual session for entities responsible for the national cybersecurity of different countries that is part of the annual SECURE conference – the oldest

cybersecurity conference in this part of Europe.

NASK, through the EU is involved in research projects on a worldwide scale, because cybersecurity calls for complex, innovative solutions and a holistic approach.

Over the years we have created novel cyber security solutions, together with several international partners in R&D projects. Among these are:

• SISSDEN project (under Horizon 2020) coordinated by NASK. The project developed the tools necessary to create the platform of a worldwide sensor network of

212 sensors in 52 countries that was deployed and operated by the project's consortium. In accomplishing this, our researchers developed innovative platform

architecture that enabled the monitoring of about 900 000 IP addresses, which resulted in the biggest database of precisely selected and informative data necessary

for identifying malware and suspicious behaviour.

• AMCE – “Advance threat Monitoring and Cooperation on the European and national levels”. This is a project financed by the Connecting Europe Facility program.

The main goal of the AMCE project is to improve cooperation at the operational level among incident response teams within the European Union, by linking existing

monitoring and analysis systems to key information exchange systems. As a result, all teams will be able to better detect and respond to online threats. AMCE is

based on the platform of the SISSDEN project.

• Melicertes2 - NASK leads the consortium implementing the MeliCERTes II project (SMART 2018/1024). The project aims at improving and extending collaboration

tools for the CSIRTs Network with emphasis on information exchange and communication. The project was begun in December 2019 and will last for three years.

Apart from CERT Poland, other European CSIRTs taking part in the project are CERT.at, CERT-EE, CIRCL and SK-CERT, with support from Deloitte, and the project is

being developed in close collaboration with ENISA.

The result of cooperation between Poland’s Internal Security Agency (where operates CSIRT GOV) with CSIRT NASK is the functioning of the ARAKIS-GOV system – an

early warning system that aims at supporting the protection of governmental administration and critical infrastructure ICT resources. The ARAKIS-GOV system offers

security for a rapidly changing society.

National hotline for harmful and illegal Internet content

„Dyżurnet.pl” - has been functioning within the NASK since 2005. It responds to reports received from Internet users about illegal content, mainly related to sexual

abuse of children. Dyżurnet.pl also carries out awareness raising and educational activities to increase the level of the online safety of children and young people.

Since 2005, Dyżurnet.pl has been a member of INHOPE (the International Association of Internet Hotlines).

2) The National Institute of Telecommunications (NIT) is a national research and development institution for telecommunications and information technologies. It

conducts development work on state telecommunication networks, system and telecommunication device normalization and standardization. It works for the

development of Poland’s society and knowledge-based industries.

The National Institute of Telecommunications was established in 1928, and supports cybersecurity in the telecom sector – e.g. by establishing a Crypto and IT

evaluation laboratory and partnering in 5G security testing.

At the international level, it actively participates in the international standard community, including establishing several international standards such as:

a) ISO/IEC 27000 Information security management systems – Vocabulary and Overview (4th edition)

b) ISO/IEC 27005 Information security risk management (4th edition)

c) ISO/IEC 15408-1 Evaluation Criteria for IT Security – Part 1: Introduction and general model (3rd edition)

The National Institute of Telecommunications has experts on Cybersecurity Terminology acting as Convenors of the Advisory Group on Concept and Terminology in

the field of Cybersecurity, and who are members of the Advisory Group on ICT terminology - both within the ISO community of experts.

At the European level, NIT actively participates in the work of the European standard community, including the edition of European Standard „Cybersecurity

evaluation methodology for ICT products” (project no. CEN 013029)

At the national (Polish) level, NIT is a member of the national technical committee that deals with cybersecurity, i.e. KT no. 182 “Information security in ICTsystems”.

KT 182 adopts international standards into the Polish Norm (PN) systems. The set of standards adopted in 2019-2020 includes (in Polish):

a) Projects identifiable information protection,

b) PN-ISO/IEC 29134 Information technology — Security techniques — Guidelines for privacy impact assessment,

c) PrPN ISO/IEC 18986-1 Information technology — Cloud computing ─ Service Level Agreement (SLA) framework — Part 1: Overview and concepts,

Cybersecurity ecosystem – R&D activities and commercial implementation.

NIT is the leader or a member of consortia involved in several R&D projects in the field of cybersecurity. Among these are the

National schema for the security and privacy evaluation and certification of IT products and systems compliant with Common Criteria (KSO3C). NIT shares

responsibility for the Innovative - hardware - software component, based on a dedicated integrated circuit and software to perform various cryptographic

application, with particular attention paid to:

- electronic identification systems with a high level of confidence (IDSoC) (leader of consortium)

- a National Platform of Cybersecurity (NPC) (member of consortium)

- an experimental platform for automatic verification and validation of cryptographic algorithms and protocols (EPW) (leader of consortium).

In Poland, NIT provides implementation of the above-mentioned R&D projects. One recent achievement in this field is the development of first Polish laboratory for

evaluating ICT products, including both SW and HE components. The laboratory is equipped with advanced SW and HW tools for evaluation, and is managed by

experienced researchers.

NIT is building an R&D ecosystem on cybersecurity by providing dissemination activities such as conferences, workshops, etc. As an example, NIT recently organized

the conference “Future Standards in cybersecurity” (https://nitconference.pl) with more than 400 participants from 40 countries.

Regarding cybersecurity ecosystems, NIT is building a strong PL position by implementing the Cybersecurity Act UE 2019/881.

NIT has been active in developing the CyberSecurity Act UE 2019/881 by:

a) contributing to the European Cybersecurity Certification Group (ECCG)

b) enacting SOG-IS, via the JIL Working Group and Working Group Crypto.

NIT is also present in the ENISA project called “Proposed methodology for consistent, risk-based definition of cybersecurity certification schemes” which is a

fundamental work for coordinated the CyberSecurity Act.

Of note: one representative from NIT (dr Elżbieta Andrukiewicz) is a member of the specially created working group at ENISA for the first European Certification

programme (next SOG-IS edition).

3) The Institute of Innovative Technologies (EMAG) is a part of the Łukasiewicz Research Network and provides unique activities in this part of Europe – it develops

and implements innovative solutions in the range of information technology, operational technology, cyber security and Industry 4.0. They join science with business.

EMAG’s achievements include obtaining several hundred patents, protection rights, registered trademarks, as well as numerous awards. Among its recognized

achievements are medals granted during domestic and international fair and exhibitions.

4) Military University of Technology (WAT) –a source of educated military staff for the Polish Armed Forces, it also holds scientific units carrying out comprehensive

scientific research in the field of cybersecurity and defence in the areas of risk monitoring, diagnostics and exploitation of infrastructure, nanotechnology and

biomedical engineering, electronics and telecommunications, IT and IT support for decision-making and crisis management. WAT closely cooperates with several

civilian partners - research institutes, universities and IT companies.

Cybersecurity – a priority in education

The cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw:

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers, and the Military Technical University - with dedicated Cryptology Studies).

The field of IT and digitization has been greatly developed in Poland. According to the data of the Central Statistical Office, in Poland, approximately 15,000 students

have graduated in IT studies, including that in cybersecurity , every year for the last 15 years.

Indeed, there are almost 60 universities or academia offering IT studies in Warsaw alone. Some, such as the Warsaw University of Technology and the Military

University of Technology provide education on cybersecurity, IT, as well as BA, MA, postgraduate studies related to digitization.

Every year hundreds of workshops, expert conferences including such brand marks as: CYBERSEC, SECURE, Security Case Study and other seminars are organised in

Poland. Most of these take place in Warsaw.

Military cyber-education

Each year, 1,500 secondary school graduates volunteer for military service and begin their studies at the Military University of Technology (WAT). By the end of 2025,

nearly 2,000 officers will have been educated in electronics and telecommunications, computer science, cryptology, cybersecurity, and information systems. In

October 2019, WAT, in cooperation with the University of Genoa, opened MBA studies in the field of cybersecurity management. These are the first studies of this

type in Poland in the field of cybersecurity, and offer the student, the development of a strong technological background, hence, enabling experienced managers to

build expertise in the field.

In October 2019, the SONDA NCO School in Zegrze was launched. Its task is to educate enlisted officer candidates, education in the field of telecommunication and

information technology, among others, for the needs of building Cyber Defence Forces and the cyber component in Poland’s Territorial Defence Forces.

5) Many NGOs are engaged in increasing the capacity of the Polish cyber-ecosystem. In cooperation with Poland’s public administration or separately, they provide a

major input into increasing awareness of cybersecurity among society. - The Cybersecurity Foundation is one of the

key Polish organisations in the field of cybersecurity. Its main activities are: awareness raising, research and development activities.

- The Kosciuszko Institute is a Polish independent, non-profit, non-governmental think tank and research institute. Its areas of expertise include cybersecurity. The

Kosciuszko Institute organises the well-known cyber conference ‘CYBERSEC’.

- The Bridge Foundation specialises in cybersecurity education and interactive cybersecurity challenges in Poland. It has launched the ‘Regional Cyber Labs’ project.

- Polish Confederation of Private Employers (‘Lewiatan’) – represents the interests of Polish private entrepreneurs, including that in the field of cybersecurity.

Poland’s public administration, by the participation of NASK, is also engaged in projects developed by the European Cybersecurity Organisation (ECSO). The

cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw: the

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers; the Military Technical University - with dedicated Cryptology Studies). Poland as a

Project Member of the EU’s Cyber Rapid Response Teams (CRRTs) within Permanent Structured Cooperation agreements (PESCO), actively cooperates with Member

States to help each other ensure a higher level of cyber resilience and collectively respond to cyber incidents.

An agreement was signed in 2020 on the establishment of the ISAC-Railway Information Exchange and Analysis Centre. The signatories of the document are railway

companies, the Railway Institute and NASK. This is the first initiative of this kind in Poland.

The initiative is also of key importance from the point of view of the operation of the whole railway network, as it contributes to increasing resistance to cyber-

threatening of information and communication systems used by rail transport. Raising the level of IT security will contribute to an increase in the overall security of

critical railway infrastructure, which consists of management of railway lines and passenger and freight transport.

As of 1 July 2020, a CSIRT team dedicated to the banking sector was established in the Cyber Security Department of the Polish Financial Supervision Authority (CRIST

KNF). The team's tasks include analysing trends and threats specific to the Polish financial sector, as well as transferring this information to supervised entities.

In 2019, the Silesian Internet Cluster of SINOTAIC Items was established. It is the first such undertaking in Poland. The founders of the Cluster emphasize that the

introduction of technologies related to the broadly understood ‘Internet of Things’ to the regional economy is necessary to increase the competitiveness and

innovation of Silesia. The IoT Cluster is a business support platform and the initiator of the Cluster is the Silesian Voivodship, and the coordinator is the company

‘Secure Smart Network’ in Gliwice. The remaining members of the Cluster are: University of Silesia, Silesian University of Technology, The Upper Silesian Fund, SPIN-

US, APA Group, Revolve and EMAG Katowice.

‘Govtech’ is an interdepartmental team working alongside the Prime Minister - and its efforts extend across the whole public sector. Its purpose is to coordinate

strategic digital projects, involving entrepreneurs, officials, citizens and all those who can support the transformation of the Polish public sector with their ideas. They

draw on the best international experience, but they also share their knowledge with other countries, showing Poland as a country that is able to contribute as much

in the digital sphere as the world's biggest players. Moreover, Govtech organizes many Hackathons in Poland, such as Hackathon of Public Data, New Data Page -

Hackathon, Hackathon #OpenData, Hackathon ESGI and many others.

The development of FinTech in Poland is visualised by the project of creating optimal conditions for the dynamic development of financial innovations and

popularization of access to modern financial services in Poland. It is an important step towards the establishment of a financial innovation centre in Central and

Eastern Europe (NewTech Poland) within our country.

The project is implemented by the Ministry of Finance (MF) and the Office of the Financial Supervision Authority (UKNF), with the support of the European Bank for

Reconstruction and Development (EBRD) and the European Commission (EC).

Moreover, it is also worth mentioning that Poland has become a winner of CodeWeek 2020. This year's historic result would not have been possible without the

involvement of teachers, parents, schools, kindergartens, non-governmental organisations, public institutions and private companies.

The application provides information on the existence of a relevant cybersecurity ecosystem in Warsaw,

such as other cybersecurity (research) institutions, knowledge institutions or relevant companies and/or

communities.

Page 14

Page 15: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

State supported R&D initiatives

A public initiative of the research and innovation called CyberSecIdent (Cybersecurity and e-Identity) has been established. This initiative is fully financed from the

state’s budget. So far, since 2017, more than 60 million EUR has been invested in R&D projects in the field of cybersecurity. As an outcome, several important

cybersecurity and e-identity programs have been implemented so far, including:

• The DAM (TAMA) – developed by EXATEL, a Polish stated owned company consortium. The outcome is a development of an automated system protecting against

DDoS attacks (Distributed Denial of Service).

• KSO3C – the national scheme for Common Criteria evaluation and certification – this results from the successful establishment of 2 Evaluation Facilities and the

Conformity Assessment Body. It is a joint venture of NASK-PIB, IŁ-PIB and the EMAG Institute.

• The National Cybersecurity Platform (NPC) is a project carried out under the aegis of the NASK-National Research Institute. It is a nationwide project for Risk

Management, Situation Awareness and Incident Response for essential sectors of economy. It will be fully operational in early 2021.

• Cryptomage – crypto analytics based network anomalies detection.

Cryptography? A Polish specialty

Polish traditions in mathematics and cryptology (cryptography and cryptanalysis, as well as development of mathematics, mathematical methods of information

protection and cryptology were enhanced in the period after Poland regained independence in 1918, especially by professor Stefan Banach within the Lviv School of

Mathematics. However, the application of mathematics in cryptanalysis was the domain of mathematicians from the University of Poznan - Marian Rejewski, Jerzy

Różycki and Henryk Zygalski, who were the first to perform ENIGMA cryptanalysis and to build a replica of the device only on the basis of its mathematical models.

Full documentation of the ENIGMA's cryptographic system, together with a fabricated copy of the device, was handed over to the allies from France and Great Britain

in July 1939, at the Cipher Bureau in Pyry, near Warsaw. This information allowed them to break subsequent modifications of the ENIGMA (including an extended

version for the Kriegsmarine).

Today’s Poland has significantly increased the capacity of its cryptologic industry. There are several Polish companies provide state-of-the-art

6.2 Other

6.1 Description of the existence of a relevant cybersecurity

ecosystem in the host city (such as other cybersecurity (research)

institutions, knowledge institutions or relevant companies

and/or communities)

At present, there are about 30 IT hubs / clusters in Poland, and over 20 research institutes. Some occupy unique and important roles, such as:

1) The Research and Academic Computer Network – National Research Institute (NASK-PIB), a leading research institute for IT solutions in Poland. The NASK-PIB

operates one of three CSIRTs at national level and specialises in supporting the private sector.

Although Poland was embargoed for western computer technologies until 1990, at present, Poland’s online service market is one of the most developed in Europe. In

Poland, 13,9 million bank account owners uses mobile services (bank apps, BLIK and smartphone payments), 18 million residents of Poland use online bank services

through Internet browsers, 19 million people actively use social media. This gives the Polish society a great deal of convenience and opportunity to learn, meet

people, discover the world, but it comes with certain risks. NASK recognizes those risks and its main research and operational activity is focused on preventing them

and helping society to use the new services safely and securely.

Security – CSIRT NASK is one of three top level CSIRTs responsible for cybersecurity in Poland. It is also a member of the EU cybersecurity system. It benefits greatly

from the experience of CERT Poland, which was formed in 1996 and is one of the oldest CERTs in Europe.

Safety – the Polish Safer Internet Centre (PSIC) was established in 2005 under the European Commission's Safer Internet Programme. NASK is a member of the

consortium, governing the Centre. Its activities include professional conferences and educational programmes. It also supports Dyżurnet.pl, which is a hotline

responding to harmful and illegal content, including child sexual abuse materials distributed on the Internet.

Education - The Polish Nationwide Educational Network is a program that provides teachers and students in public schools free access to fast and safe Internet and to

modern educational tools. NASK operates the program and provides the security tools.

Academia – NASK provides a creative environment for young scientists and engineers to develop their skills and interests, as well as to achieve their research goals.

The Institute is also one of the founders of a PhD Programme in Biomedical Technologies, together with the Polish Academy of Sciences.

R&D – our various teams work constantly on improving our security through many different ways. NASK conducts research and develops new solutions in areas such

as Artificial Intelligence, Internet of Things, network threat monitoring and situational awareness, Industrial Automation security, banking security, social research

and user behaviour, education and awareness rising

Global cooperation – in the global network both threats and security efforts also need to be global. NASK cooperates with various partners in many areas, including

military telecommunication security, global threat monitoring and response, and knowledge sharing. NASK experts take part in international research programmes,

operational activities, as well as exercise, contests and conferences

Fostering cooperation

We do believe in cooperation and trust building among various essential and critical sectors such as energy, banking, transport or water supply. Hence, in 2016, we

launched, together with Poland’s government, the Partnership for Cybersecurity programme, which involves 68 partners from both the private and public sectors.

This collaboration assumes the form of public-private partnerships. All partners can increase their cybersecurity at technical, strategic and competence levels.

In this framework, we also support the establishment of sectorial ISACs (Information Sharing and Analysis Centres). ISAC is also in the form of a public-private

partnership. Members of an ISAC agree to share their knowledge and good practices in order to improve the security of their operations. Our experts assist and

support essential and critical sectors in creating and developing ISACs.

The developed MWDB (malware data base) system was established to aid malware researchers. Through it, experts can upload malware samples to be shared with

the research community. The MWDB System assists the work of cybersecurity researchers, such as CSIRT employees (who are responsible for Poland’s cybersecurity)

or academics. Results of such research are shared with companies, institutions and individuals engaged in fighting cybercrime.

Capability building

Cybersecurity Certification – NASK, together with other institutes is building a cybersecurity evaluation and certification scheme in Poland based on the Common

Criteria approach. The project is a direct response to the European Commission’s initiative focused on developing the European Certification Framework for IT

products, services and processes.

Poland’s forensic Lab provides the user with a complete set of tools and devices to collect all kinds of electronic evidences and conduct comprehensive analysis. It is

divided into two modules: stationary and a very innovative mobile part installed in a special vehicle. The design of the methodology and operating procedures of the

laboratory will help to increase the detection of cybercrimes, and, thus, increase the security of cyberspace by eliminating harmful activities, particularly those

related to organized crime.

Global security

NASK values and is heavily involved in international cooperation. NASK represents Poland in ENISA. It facilitates “Together-safer, stronger, smarter" - an

international annual session for entities responsible for the national cybersecurity of different countries that is part of the annual SECURE conference – the oldest

cybersecurity conference in this part of Europe.

NASK, through the EU is involved in research projects on a worldwide scale, because cybersecurity calls for complex, innovative solutions and a holistic approach.

Over the years we have created novel cyber security solutions, together with several international partners in R&D projects. Among these are:

• SISSDEN project (under Horizon 2020) coordinated by NASK. The project developed the tools necessary to create the platform of a worldwide sensor network of

212 sensors in 52 countries that was deployed and operated by the project's consortium. In accomplishing this, our researchers developed innovative platform

architecture that enabled the monitoring of about 900 000 IP addresses, which resulted in the biggest database of precisely selected and informative data necessary

for identifying malware and suspicious behaviour.

• AMCE – “Advance threat Monitoring and Cooperation on the European and national levels”. This is a project financed by the Connecting Europe Facility program.

The main goal of the AMCE project is to improve cooperation at the operational level among incident response teams within the European Union, by linking existing

monitoring and analysis systems to key information exchange systems. As a result, all teams will be able to better detect and respond to online threats. AMCE is

based on the platform of the SISSDEN project.

• Melicertes2 - NASK leads the consortium implementing the MeliCERTes II project (SMART 2018/1024). The project aims at improving and extending collaboration

tools for the CSIRTs Network with emphasis on information exchange and communication. The project was begun in December 2019 and will last for three years.

Apart from CERT Poland, other European CSIRTs taking part in the project are CERT.at, CERT-EE, CIRCL and SK-CERT, with support from Deloitte, and the project is

being developed in close collaboration with ENISA.

The result of cooperation between Poland’s Internal Security Agency (where operates CSIRT GOV) with CSIRT NASK is the functioning of the ARAKIS-GOV system – an

early warning system that aims at supporting the protection of governmental administration and critical infrastructure ICT resources. The ARAKIS-GOV system offers

security for a rapidly changing society.

National hotline for harmful and illegal Internet content

„Dyżurnet.pl” - has been functioning within the NASK since 2005. It responds to reports received from Internet users about illegal content, mainly related to sexual

abuse of children. Dyżurnet.pl also carries out awareness raising and educational activities to increase the level of the online safety of children and young people.

Since 2005, Dyżurnet.pl has been a member of INHOPE (the International Association of Internet Hotlines).

2) The National Institute of Telecommunications (NIT) is a national research and development institution for telecommunications and information technologies. It

conducts development work on state telecommunication networks, system and telecommunication device normalization and standardization. It works for the

development of Poland’s society and knowledge-based industries.

The National Institute of Telecommunications was established in 1928, and supports cybersecurity in the telecom sector – e.g. by establishing a Crypto and IT

evaluation laboratory and partnering in 5G security testing.

At the international level, it actively participates in the international standard community, including establishing several international standards such as:

a) ISO/IEC 27000 Information security management systems – Vocabulary and Overview (4th edition)

b) ISO/IEC 27005 Information security risk management (4th edition)

c) ISO/IEC 15408-1 Evaluation Criteria for IT Security – Part 1: Introduction and general model (3rd edition)

The National Institute of Telecommunications has experts on Cybersecurity Terminology acting as Convenors of the Advisory Group on Concept and Terminology in

the field of Cybersecurity, and who are members of the Advisory Group on ICT terminology - both within the ISO community of experts.

At the European level, NIT actively participates in the work of the European standard community, including the edition of European Standard „Cybersecurity

evaluation methodology for ICT products” (project no. CEN 013029)

At the national (Polish) level, NIT is a member of the national technical committee that deals with cybersecurity, i.e. KT no. 182 “Information security in ICTsystems”.

KT 182 adopts international standards into the Polish Norm (PN) systems. The set of standards adopted in 2019-2020 includes (in Polish):

a) Projects identifiable information protection,

b) PN-ISO/IEC 29134 Information technology — Security techniques — Guidelines for privacy impact assessment,

c) PrPN ISO/IEC 18986-1 Information technology — Cloud computing ─ Service Level Agreement (SLA) framework — Part 1: Overview and concepts,

Cybersecurity ecosystem – R&D activities and commercial implementation.

NIT is the leader or a member of consortia involved in several R&D projects in the field of cybersecurity. Among these are the

National schema for the security and privacy evaluation and certification of IT products and systems compliant with Common Criteria (KSO3C). NIT shares

responsibility for the Innovative - hardware - software component, based on a dedicated integrated circuit and software to perform various cryptographic

application, with particular attention paid to:

- electronic identification systems with a high level of confidence (IDSoC) (leader of consortium)

- a National Platform of Cybersecurity (NPC) (member of consortium)

- an experimental platform for automatic verification and validation of cryptographic algorithms and protocols (EPW) (leader of consortium).

In Poland, NIT provides implementation of the above-mentioned R&D projects. One recent achievement in this field is the development of first Polish laboratory for

evaluating ICT products, including both SW and HE components. The laboratory is equipped with advanced SW and HW tools for evaluation, and is managed by

experienced researchers.

NIT is building an R&D ecosystem on cybersecurity by providing dissemination activities such as conferences, workshops, etc. As an example, NIT recently organized

the conference “Future Standards in cybersecurity” (https://nitconference.pl) with more than 400 participants from 40 countries.

Regarding cybersecurity ecosystems, NIT is building a strong PL position by implementing the Cybersecurity Act UE 2019/881.

NIT has been active in developing the CyberSecurity Act UE 2019/881 by:

a) contributing to the European Cybersecurity Certification Group (ECCG)

b) enacting SOG-IS, via the JIL Working Group and Working Group Crypto.

NIT is also present in the ENISA project called “Proposed methodology for consistent, risk-based definition of cybersecurity certification schemes” which is a

fundamental work for coordinated the CyberSecurity Act.

Of note: one representative from NIT (dr Elżbieta Andrukiewicz) is a member of the specially created working group at ENISA for the first European Certification

programme (next SOG-IS edition).

3) The Institute of Innovative Technologies (EMAG) is a part of the Łukasiewicz Research Network and provides unique activities in this part of Europe – it develops

and implements innovative solutions in the range of information technology, operational technology, cyber security and Industry 4.0. They join science with business.

EMAG’s achievements include obtaining several hundred patents, protection rights, registered trademarks, as well as numerous awards. Among its recognized

achievements are medals granted during domestic and international fair and exhibitions.

4) Military University of Technology (WAT) –a source of educated military staff for the Polish Armed Forces, it also holds scientific units carrying out comprehensive

scientific research in the field of cybersecurity and defence in the areas of risk monitoring, diagnostics and exploitation of infrastructure, nanotechnology and

biomedical engineering, electronics and telecommunications, IT and IT support for decision-making and crisis management. WAT closely cooperates with several

civilian partners - research institutes, universities and IT companies.

Cybersecurity – a priority in education

The cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw:

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers, and the Military Technical University - with dedicated Cryptology Studies).

The field of IT and digitization has been greatly developed in Poland. According to the data of the Central Statistical Office, in Poland, approximately 15,000 students

have graduated in IT studies, including that in cybersecurity , every year for the last 15 years.

Indeed, there are almost 60 universities or academia offering IT studies in Warsaw alone. Some, such as the Warsaw University of Technology and the Military

University of Technology provide education on cybersecurity, IT, as well as BA, MA, postgraduate studies related to digitization.

Every year hundreds of workshops, expert conferences including such brand marks as: CYBERSEC, SECURE, Security Case Study and other seminars are organised in

Poland. Most of these take place in Warsaw.

Military cyber-education

Each year, 1,500 secondary school graduates volunteer for military service and begin their studies at the Military University of Technology (WAT). By the end of 2025,

nearly 2,000 officers will have been educated in electronics and telecommunications, computer science, cryptology, cybersecurity, and information systems. In

October 2019, WAT, in cooperation with the University of Genoa, opened MBA studies in the field of cybersecurity management. These are the first studies of this

type in Poland in the field of cybersecurity, and offer the student, the development of a strong technological background, hence, enabling experienced managers to

build expertise in the field.

In October 2019, the SONDA NCO School in Zegrze was launched. Its task is to educate enlisted officer candidates, education in the field of telecommunication and

information technology, among others, for the needs of building Cyber Defence Forces and the cyber component in Poland’s Territorial Defence Forces.

5) Many NGOs are engaged in increasing the capacity of the Polish cyber-ecosystem. In cooperation with Poland’s public administration or separately, they provide a

major input into increasing awareness of cybersecurity among society. - The Cybersecurity Foundation is one of the

key Polish organisations in the field of cybersecurity. Its main activities are: awareness raising, research and development activities.

- The Kosciuszko Institute is a Polish independent, non-profit, non-governmental think tank and research institute. Its areas of expertise include cybersecurity. The

Kosciuszko Institute organises the well-known cyber conference ‘CYBERSEC’.

- The Bridge Foundation specialises in cybersecurity education and interactive cybersecurity challenges in Poland. It has launched the ‘Regional Cyber Labs’ project.

- Polish Confederation of Private Employers (‘Lewiatan’) – represents the interests of Polish private entrepreneurs, including that in the field of cybersecurity.

Poland’s public administration, by the participation of NASK, is also engaged in projects developed by the European Cybersecurity Organisation (ECSO). The

cybersecurity ecosystem in Poland is strongly supported by academia – especially a network of 16 Technical Universities and High Schools (e.g. based in Warsaw: the

Warsaw Technical University – with dedicated Cybersecurity Studies for engineers; the Military Technical University - with dedicated Cryptology Studies). Poland as a

Project Member of the EU’s Cyber Rapid Response Teams (CRRTs) within Permanent Structured Cooperation agreements (PESCO), actively cooperates with Member

States to help each other ensure a higher level of cyber resilience and collectively respond to cyber incidents.

An agreement was signed in 2020 on the establishment of the ISAC-Railway Information Exchange and Analysis Centre. The signatories of the document are railway

companies, the Railway Institute and NASK. This is the first initiative of this kind in Poland.

The initiative is also of key importance from the point of view of the operation of the whole railway network, as it contributes to increasing resistance to cyber-

threatening of information and communication systems used by rail transport. Raising the level of IT security will contribute to an increase in the overall security of

critical railway infrastructure, which consists of management of railway lines and passenger and freight transport.

As of 1 July 2020, a CSIRT team dedicated to the banking sector was established in the Cyber Security Department of the Polish Financial Supervision Authority (CRIST

KNF). The team's tasks include analysing trends and threats specific to the Polish financial sector, as well as transferring this information to supervised entities.

In 2019, the Silesian Internet Cluster of SINOTAIC Items was established. It is the first such undertaking in Poland. The founders of the Cluster emphasize that the

introduction of technologies related to the broadly understood ‘Internet of Things’ to the regional economy is necessary to increase the competitiveness and

innovation of Silesia. The IoT Cluster is a business support platform and the initiator of the Cluster is the Silesian Voivodship, and the coordinator is the company

‘Secure Smart Network’ in Gliwice. The remaining members of the Cluster are: University of Silesia, Silesian University of Technology, The Upper Silesian Fund, SPIN-

US, APA Group, Revolve and EMAG Katowice.

‘Govtech’ is an interdepartmental team working alongside the Prime Minister - and its efforts extend across the whole public sector. Its purpose is to coordinate

strategic digital projects, involving entrepreneurs, officials, citizens and all those who can support the transformation of the Polish public sector with their ideas. They

draw on the best international experience, but they also share their knowledge with other countries, showing Poland as a country that is able to contribute as much

in the digital sphere as the world's biggest players. Moreover, Govtech organizes many Hackathons in Poland, such as Hackathon of Public Data, New Data Page -

Hackathon, Hackathon #OpenData, Hackathon ESGI and many others.

The development of FinTech in Poland is visualised by the project of creating optimal conditions for the dynamic development of financial innovations and

popularization of access to modern financial services in Poland. It is an important step towards the establishment of a financial innovation centre in Central and

Eastern Europe (NewTech Poland) within our country.

The project is implemented by the Ministry of Finance (MF) and the Office of the Financial Supervision Authority (UKNF), with the support of the European Bank for

Reconstruction and Development (EBRD) and the European Commission (EC).

Moreover, it is also worth mentioning that Poland has become a winner of CodeWeek 2020. This year's historic result would not have been possible without the

involvement of teachers, parents, schools, kindergartens, non-governmental organisations, public institutions and private companies.

The application provides information on the existence of a relevant cybersecurity ecosystem in Warsaw,

such as other cybersecurity (research) institutions, knowledge institutions or relevant companies and/or

communities.

Page 15

Page 16: Assessment CCC - Offer by Poland (PL) - Warsaw - consilium ...

technologies. One of the important Polish companies operating in the field of cybersecurity is ‘Krypton Polska’. The company specialises in developing and providing

cryptologic solutions, and it designs and produces advanced solutions in the field of ICT security. Many advanced solutions are provided by other domestically born

companies, such as Siltec.

Strong participation of NGOs

Dozens of non-profit NGOs are engaged in increasing the capacity of the Polish cyber-ecosystem. In cooperation with the public administration or separately, they

provide a major input into increasing the awareness of cybersecurity within the greater society. Among others, the following standout:

- The Cybersecurity Foundation - one of the key Polish organisations in the field of cybersecurity, its main activities are: raising awareness, research and development.

- The Kosciuszko Institute – This is a Polish independent, non-profit, non-governmental think tank and research institute. The areas of expertise include cybersecurity.

The Kosciuszko Institute organises the well-known cyber conference: ‘CYBERSEC’.

- The Bridge Foundation – specialises in cybersecurity education and interactive cybersecurity challenges in Poland. The Bridge Foundation originated the Regional

Cyber Labs project.

- Polish Confederation of Private Employers - Lewiatan – this represents at the national and pan-national level, the interests of Polish private entrepreneurs, including

that operating in the field cybersecurity.

Military cyber-education

Each year, 1,500 secondary school graduates begin their studies at the Military University of Technology (WAT). By the end of 2025, nearly 2,000 officers educated in

electronics and telecommunications, computer science, cryptology, cybersecurity and information systems will have left the walls of Poland’s military universities.

In October 2019, WAT, in cooperation with the University of Genoa, opened MBA studies in the field of cybersecurity management. These are the first studies of this

type in Poland in the field of cybersecurity. By providing a strong technological background, WAT will enable experienced managers to build their expertise in the

field.

In October 2019, the SONDA NCO School in Zegrze was launched. Its task is to educate officer candidates drawn from the ranks, in the field of telecommunication and

information technology, for among other purposes, for the needs of building Cyber Defence Forces in Poland’s regular Armed Forces and the cyber component in the

Territorial Defence Forces.SUMMARY OF THE ASSESSMENT OF CRITERION 6 The application provides information on the existence of a relevant cybersecurity ecosystem Warsaw,

such as other cybersecurity (research) institutions, knowledge institutions or relevant companies and/or

communities.

Criterion 7: Geographical balance

`This criterion concerns the geographical balance in the

distribution of seats of Union bodies and agencies; having due

regard to the conclusions of the Representatives of the Member

States, meeting at Head of State or Government level in Brussels

on 13 December 2003, reiterated in the conclusions of the

European Council of 19/20 June 2008, while taking into account

the specific status of the Centre.`

Poland stands on the position that a geographical balance should be maintained in the EU when it comes to locating different EU bodies within the Member States.

7.1 Agencies and EU bodies currently hosted in the Member State Poland has great experience in hosting and facilitating in Warsaw, the EU entity: the ‘European Border and Coast Guard Agency’ (FRONTEX). FRONTEX is a large

agency, currently employing over 700 people, with an employment target of over 1000.

Poland is a Member State that acceded to the Union in 2004.

The application indicates that PL hosts 1 EU decentralised agency, the ‘European Border and Coast Guard

Agency’ (FRONTEX).

SUMMARY OF THE ASSESSMENT OF CRITERION 7 Poland is a Member State that acceded to the Union in 2004, and hosts 1 EU decentralised agency, the

‘European Border and Coast Guard Agency’ (FRONTEX).

GENERAL RULE for submitting an application:

Member State's commitment to confirming the conditions

included in the offer in a headquarters agreement with the

Centre

Poland commits to confirm the conditions included in the offer in a headquarters agreement with the Centre. The application indicates the commitment of PL to confirm the conditions included in the application in a

headquarters agreement with the Centre.

SPECIFIC ISSUES to be addressed in the application

Any benefits that would be granted to the Centre and/or its staff

in addition to those following from Protocol No 7 on the

Privileges and Immunities of the EU

The Polish government offers full coverage of costs (registration fees and tuition fees) for ensuring education of the Centre’s staff up to 35 000 PLN/ 7 800 EUR

(annually per child) for the period of 10 years.

Poland will also cover lease costs for an office space for the period of 10 years.

The Polish government ensures full application of the Protocol on the privileges and immunities of the European Union and the agreement introducing this Protocol -

Agreement between the Government of the Republic of Poland and the European Communities implementing the Protocol on the privileges and immunities of

European Community entities and staff, signed in Brussels on April 8, 1965, and drawn up in Brussels on April 13, 2005, including:

a) for the purposes of official communications and the transmission of all documents, that the Centre will enjoy the privileges accorded by the Polish side to

diplomatic missions.

b) Poland will ensure attractive financial conditions, including treasury and tax exemptions, for the Centre performing its statute tasks.

c) the premises of the Centre will remain inviolable, including the Centre's archives, as well as all documents and data belonging to or held by the Centre;

d) The Centre and its Staff will have immunity from legal proceedings in respect of acts performed in the territory of the Republic of Poland.

The application indicates that Poland will offer full coverage of costs (registration fees and tuition fees) for

nursery, primary and secondary school for children of the Centre’s staff up to around €7800 annually per

child for the first 10 years.

6.2 Other

Page 16