Be Aware, Be Secure - Cyber Security

7/28/2019 Be Aware, Be Secure - Cyber Security

1/42

European Networkand Information

Security Agency

SyntheSiS o the reSultS o the irStEuropEan CybEr SECurity Month

be aware, be secure.

7/28/2019 Be Aware, Be Secure - Cyber Security

2/42

7/28/2019 Be Aware, Be Secure - Cyber Security

3/42

B e A W A r e , B e S e C u r e . I

Ackwdgms

eniSA wss ackwdg ad ak aMmb Sas ad epa CmmssDca-Ga Cmmcasnwks, C ad tcg, wccbd s dcm w mavws, vaab sgs, bsvas adsggss. t c wd b cmpad cc w p.

A p: isaba Saa (eniSA)

7/28/2019 Be Aware, Be Secure - Cyber Security

4/42

I I B e A W A r e , B e S e C u r e .

Ab eniSA

t epa nwk ad imaSc Agc (eniSA) s a c wk ad ma sc xps eu, s mmb sas, pvasc ad eps czs. eniSA wksw s gps dvp advc adcmmdas gd pacc ma sc. i assss eu mmbsas mpmg va eu gsaad wks mpv sc eps cca ma ascad wks. eniSA sks acxsg xps eu mmb sas bsppg dvpm css-bdcmms cmmd mpvg wkad ma sc g eu.M ma ab eniSA ad s wkca b d a www.sa.pa..

Cc dls

cacg eniSA ga qs Awass asg acvs pas s wg das:e-ma: [email protected]: p://www.sa.pa.

qss ad epa CbSc M, pas s wgdas:

e-ma: [email protected].

LegaL notiCe

nc ms b ak a s pbca pss vws ad pas

as ad ds, ss sad ws. ts pbca sd b csd b a ga ac eniSA eniSA bds ss adpd psa eniSArga (eC) n 460/2004 as as amdd b rga (eu) n 580/2011. tspbca ds cssa ps sa- -a ad eniSA ma pda mm m.

td-pa scs a qd as apppa. eniSA s spsb c xa scs cdg xa wbss cd s pbca.

ts pbca s dd ma ppss . i ms b accssb cag. n eniSA a ps acg s ba s spsb s amg b mad ma cad s pbca.rpdc s asd pvdd sc s ackwdgd.

A mags eniSA, xcp cv mag Davd Maa/G imags;ad pag 5 mag Sckp.cm/Adas Kma

epa nwk ad ima Sc Agc (eniSA), 2012

7/28/2019 Be Aware, Be Secure - Cyber Security

5/42

B e A W A r e , B e S e C u r e . I I I

Cs

1 ecu summr .................................................................................................................. 1

2 irduc .............................................................................................................................. 32.1 Pps ..................................................................................................................................... 32.2 raa ad pc cx ..................................................................................................... 42.3 Scp ......................................................................................................................................... 52.4 tag adc ......................................................................................................................... 52.5 Mdg .............................................................................................................................. 5

3 t eurp r ............................................................................................................ 63.1 eCSM p pjcs ................................................................................................................... 63.2 Sss dgs ................................................................................................................. 6

3.2.1 Pacpag cs ....................................................................................................... 73.2.2 2012 vs cada .......................................................................................................... 73.2.3 Gas ad bjcvs p pjcs .......................................................................... 83.2.4 tag adc(s) .............................................................................................................. 83.2.5 Sbjc ma .................................................................................................................... 93.2.6 tp mssags sd ...................................................................................................... 93.2.7 P pjcs mam ................................................................................................... 93.2.8 lagags ........................................................................................................................ 103.2.9 Dv cas ............................................................................................................. 103.2.10 tcqs ...................................................................................................................... 113.2.11 Css ............................................................................................................................... 113.2.12 Masg cvss awass pgamms ............................................. 11

4 Pl curs ........................................................................................................................ 154.1 Czc rpbc........................................................................................................................ 154.2 lxmbg ............................................................................................................................ 164.3 nwa..................................................................................................................................... 174.4 Pga ................................................................................................................................... 184.5 rmaa .................................................................................................................................. 19

4.5.1 Cb tas Cc 2012 ....................................................................................... 194.5.2 o ad sca mda campags ................................................................................ 19

4.6 Sva ................................................................................................................................... 204.7 Spa ........................................................................................................................................ 214.8 ud Kgdm ...................................................................................................................... 22

5 Rl pld eniSa.............................................................................................................. 245.1 Bad makg pa ............................................................................................................. 25

5.1.1 Vsa d .................................................................................................................... 255.1.2 Sga ............................................................................................................................... 255.1.3 Advsg campag ....................................................................................................... 255.1.4 Sca mda ..................................................................................................................... 25

5.1.4.1 acbk campags ................................................................................................. 265.1.4.1.1 ep ..................................................................................................................... 265.1.4.1.2 lxmbg ............................................................................................................ 275.1.4.1.3 nwa..................................................................................................................... 285.1.4.1.4 Pga ................................................................................................................... 295.1.4.1.5 Sva ................................................................................................................... 305.1.4.1.6 Spa ........................................................................................................................ 31

6 Lsss lrd ..................................................................................................................... 32

7 Ccluss ............................................................................................................................ 32

7/28/2019 Be Aware, Be Secure - Cyber Security

6/42

IV B e A W A r e , B e S e C u r e .

idx

ars

eCSM epa Cb Sc MeniSa epa nwk ad ima Sc AgceU epa uDae Dga Agda epniS nwk ad ima ScUSa ud Sas Amca

Ls furs

Fur 1: epa vvw .............................................................................................................. 6Fur 2: Gpg dv cas .......................................................................................... 10Fur 3: Adc lxmbgs acbk campag.............................................................. 27Fur 4: Adc nwass acbk campag .................................................................... 28Fur 5: Adc Pgas acbk campag .................................................................... 29Fur 6: Adc Svas acbk campag ..................................................................... 30Fur 7: Adc Spas acbk campag ......................................................................... 31

Ls ls

tl 1: 2012 vs cada............................................................................................................ 7tl 2: Cagsa ag gps .................................................................................... 8tl 3: Pmac dcas sd acss ep .................................................................... 12

tl 4: examps pmac dcas ................................................................................ 13tl 5: Czc rpbc smma ab ......................................................................................... 15tl 6: lxmbg smma ab .............................................................................................. 16tl 7: nwa smma ab ...................................................................................................... 17tl 8: Pga smma ab .................................................................................................... 18tl 9: rmaa smma ab .................................................................................................... 19tl 10: Sva smma ab ................................................................................................... 20tl 11: Spa smma ab ....................................................................................................... 21tl 12: ud Kgdm smma ab ...................................................................................... 23

Ls rps

grp 1: Wks w eCSM sc vs w gasd ......................................................... 9grp 2: Dv cas .............................................................................................................. 11

grp 3: rsps lxmbgs acbk campag ............................................................ 27grp 4: rsps nwass acbk campag ................................................................... 28grp 5: rsps Pgas acbk campag ................................................................... 29grp 6: rsps Svas acbk campag ................................................................... 30grp 7: rsps Spas acbk campag ........................................................................ 31

7/28/2019 Be Aware, Be Secure - Cyber Security

7/42

B e A W A r e , B e S e C u r e . 1

1 excv smma

s m, as ocb, a epaCb Sc M k pac as a ppjc acss ep. ts was as s euuSA Smm a p ad admap pdcd b awass-asgsb-gp euuSA Wkg Gp Cb-sc ad Cb-cm Dcmb2011. ts pjc was sppd b eniSAad epa Cmmss.

i s s p pjc, Czc Rpulc,Lumur, nr, Prul, Rm,Sl, Spad Ud Kdmpacpad vas acvs ad vsg ocb, as awass cb sc.

lava, g w Cc epa u, ca sppd pjc.

t bjcvs epa Cb ScM (eCSM) w pm cb scawass amg czs, md pcp cb as ad pvd

pdad sc ma gdca, gd paccs ad cmps. Advs ag acvs ad vs aggd adcs was d gep. ts cdd: tV ad da adadvsms; sca mda campagsad qzzs w pzs; ws acs;ccs; sd as; adsws; add abs.

eac p c dcdd p scpad mb acvs ad vs bgasd. eniSA pvdd gdac adxps w gas ma

sc campags, g w ps adadvc w b sa . Mv, Agc pvdd pma maa pacpag cs p pmawass. ts p pvds a vvw acvs gasd b ac c adpss a sss dgs bass vaa ad pmac ma pvdd b p cs gadb eniSA s. A vvw s pvdd bagggag daa a epa v. Daa sas dspad a aa v.

t p s scd ma pas: vvw sc-ad wksgasd a aa v acss ep;

gasaa sgs dvgeCSM avs ad ad acvms;

pad b eniSA; sss ad.

t s pa p s a gba vw eCSM p pjc. t ma dgs a:

maj Mmb Sas d asc wk wks;

pp campags cmpassgga ss vss s aggbsss ss s ams sam;

a wd va k mssags apmd acss d epacs;

ags mb vs wgasd wk ocb;

a sppg maa ad cmmcasw pdcd ca agag cs ccd;

pd maas (38 %) ad psca vs(25 %) ad ma cass; a Mmb Sas sd a va

cqs a w , xcg admvag;

pva sc was vvd sx pcs;

wd va dv cassd sggss pa va amacd appac a cd macd mssags d mdaad pps acss a scs adcs;

wbss a ms pm cas

cmmca sd, g w dsb gvawas (sv gp cs);

Mmb Sas adpd dmds assss cvss eCSM acvs ga, daagad ca b sd d v smak pmac dcas.

t scd pa pvds dad ma acvs ad vs gasd bac c. Qaav ad qaavma a was capd b pacpag cs w masg

acvms eCSM avs spd. A smma ab s cdd ac c p ad vw acvms a aa v.

7/28/2019 Be Aware, Be Secure - Cyber Security

8/42

2 B e A W A r e , B e S e C u r e .

t d pa dscbs pad beniSA as cda. t Agc was b a p cs, sppg eCSM, g w epaCmmss, b as pvdg sbjc maxps ad maa wc pd g mssag .

t pa sws sss ad ab ads d k cags,sss ad ss, makg a eCSMacv m cv. t ma dgs aas ws.

B d spcc adc a sagd b awass av d a mssag c aggps kwdg cca apd

sg ms cv cmmcacas. Pdc a va maa a asa ca agags pacpagcs.

Mak pss ass avaab a asa ca agags pacpagcs.

Pdc vd cps d mas d aw s tV advs.

Mak s a g sa avaabdg vs. Paca a sd bpad mb sa avaab dgwkds cmpad wkdas.

Pdc gvawas accdg sas dsb (.. -ss dsbd cd wa dd appa b a gdda).

ivv a casd mb pvacmpas cas mpac.

Da w cags pas ad kpsd pas md.

es mda cvag b pag pssbvws advac. B ppad as-m cacas.

t aass cad p ad ccs a s epa Cb

Sc M p pjc was sccss,spca bcas gagm,xsg gd paccs ad xpc pacpag cs.

7/28/2019 Be Aware, Be Secure - Cyber Security

9/42

B e A W A r e , B e S e C u r e . 3

2 idc

Czs a casg g i vda vs bakg,sppg, dca ad a mb svcs. i s, , mpa a a ab s i a sc adcd ma.

Makg i a b pac aczs s a sad spsb, a bepa ad gba v. t eu CbSc Sag, d a ,w s js w mpa s s, w

cc ppsas mpv dga sc.Mv, epa u as bwkg w uSA, ad a as as euuSA Smm, sva sps w agd p mak wd sc, bsds Aac.

t epa Cb Sc M s acv sm asg awassab nwk ad ima Sc (niS).

t ma bjcvs epa CbSc M a:

ga ga awass abnwk ad ima Sc;

pm sa s i ass;

bd a sg ack cd asawass g eCSM;

vv va sakds; cas aa mda s g epa ad aa dms pjc;

ac a ad s wgad ma sc gpca ad mda cda.

ts a, g cs pacpad s epa Cb Sc M: Czc rpbc, lxmbg, nwa,Pga, rmaa, Sva, Spa ad ud Kgdm. ts cs pdpsv a ca xpsss s gas Sc wkp pjcs s a mmbs awass-asg sb-gp euuSAWkg Gp Cb-sc ad Cb-cm, a cmmca campag pjc ad b eniSA.

ov cs m ocb, a

ag ca acvs ad vs w dacss ep as sc awass spcc ag gps. ts cdd,amg s:

ccs ad wksps nwa,Pga ad Spa;

mda ad sca mda campags nwa ad Sva;

-gvma gaza (nGo) dabs Czc rpbc;

cmps ad qzzs lxmbg,nwa ad Sva;

adsws ud Kgdm.

eac c b s w xsg acvsad xpc maxmm mpac.

2.1 Purps

t pps s dcm s csda vaas eCSM acvscmpd b p cs add pvdg a aass acvms avs gasd a aa vacss ep.

Amg pvd a gad pspcvacss a ps vaas, pggs ss ad mpac eCSM

acvs, dscsss sss ad addaws a ad sss w a vw acg eCSMs dvpmcvss.

7/28/2019 Be Aware, Be Secure - Cyber Security

10/42

4 B e A W A r e , B e S e C u r e .

i add, p ccas ag sss wc mg pad cs vaas as aas am a. Amg ams,

p s dd pvd a bass dscss b Mmb Sas, epa Cmmss ad eniSA w eCSM ca bs b gasd as cm. A cs a avg ac p a sma cag, a ga ssx, am w gag czs adcag ma sc bav.

2.2 Rl d plc c

ts sc pvds scd ma adacs a mva ad xpa dcs gas s epa Cb ScM. t ma ams s m cd:

gag ga awass abnwk ad ima Sc;

pmg sa s i ass;

bdg a sg ack cd asawass g eCSM;

vvg va sakds; casg aa mda s g epa ad aa dms pjc;

acg a ad s w gad

ma sc g pca admda cda.

Sc 2005, Cmmss (1) as ggd g d cda s bd s ad cdc sakds cc cmmcas ad svcs. ts d a sag a sc masc (2) was adpd 2006.

o 30 Mac 2009, Cmmss adpda cmmca Cca imaiasc Pc (CiiP) Pcgep m ag-sca cb aacks

ad dsps: acg ppadss,sc ad sc (3), sg a pa( CiiP ac pa) sg sc ad sc va maad cmmca cg (iCt)ascs. t am was smaad spp dvpm a g v ppadss, sc ad sccapabs a b aa ad epavs. ts appac was bad dsd b Cc 2009 (4).

(1) CoM(2005) 229.

(2) CoM(2006) 251.

(3) CoM(2009) 149.

(4) Cc rs 18 Dcmb 2009 a caba-v epa appac wk ad ma sc(2009/C 321/01).

i cx CiiP ac pa, eurp Frum r Mmr Ssdscssd ad dvpd epa pcpsad gds sc ad sab

i ( pcps) (5

). ipaca, pcps sa a:Public authorities, with the support o otherstakeholders, as appropriate, should striveto educate and raise awareness on the risksassociated with Internet-related activities.

It is recognised that certain categories ostakeholders are not always in a positionto properly understand the risks both orthemselves and or the stability and resilience othe Internet as a whole associated with theirInternet-related activities.

Without prejudice to the competences oMember States in the area o culture andeducation, and taking in the utmost account the

principle o subsidiarity, a shared EU approachto such activities, with a view to achieve a globalapproach, should be sought.

The private sector has an important role to playin supporting public authorities and in providingclear inormation to all stakeholders, concerningthe potential risks o their behaviours or thestability and resilience o the Internet, e.g.unwillingly propagating virus and other malware,having their computers enrolled in a Botnet, etc.

Strengthening education eorts in this areawill also have the beneft o producing skilledexperts in the needed ICT felds. Education andawareness-raising will also strengthen the

preventive abilities o stakeholders, which in turnwill help to avoid recourse to ex post or overlyinvasive security measures. (6)

o s s, Dga Agda ep(DAe) (7), adpd Ma 2010, ad ad Cc ccss (8) ggd sad dsadg a s ad sca dama pcds wdpak iCt ad acvg bjcvs sma gw dms ep 2020 sag (9). t DAempasss d a sakds

j cs a sc s sc ad sc iCt ascsb csg pv, ppadss ad

(5) epa pcps ad gds i s-c ad sab (p://c.pa./ma_sc/pc/s/dcs/pcps_cp/gds__.pd).

(6) epa pcps ad gds i s-c ad sab (p://c.pa./ma_sc/pc/s/dcs/pcps_cp/gds__.pd).

(7) CoM(2010) 245.

(8) Cc ccss 31 Ma 2010 Dga Agda ep (10130/10).

(9) CoM(2010) 2020 ad ccss epa C-c 25/26 Mac 2010 (euCo 7/10).

7/28/2019 Be Aware, Be Secure - Cyber Security

11/42

B e A W A r e , B e S e C u r e . 5

awass, as w as dvp cvad cdad mcasms spd w ad casg spscad ms cb aacks ad cb cm. ts appac

ss a b pvv ad acv dmss cag a dak acc.

ts dcms pvd aa adpc cx dscss ad cpaw Mmb Sas ad aagasas ad, w apppa, wpva sc gasas w bjcv assssg asb gasga sc m ep, pssb cda w ud Sas.

a, sggsd gds s

s eniSA, as w as bds(.g. Mmb Sas, Cmmssad/ ds), map pcps cc ad paa acvs sc as gasa eCSM.

2.3 Scp

t scp s p s eniSA :

pvd a vvw acvsgasd b ac p c;

ps a sss dgs bass

vaa ad pmac ma; gg ss ad mpac eCSM acvs;

ps sss ad; daw a sss w a vw acg eCSMs dvpmcvss.

2.4 tr udc

ts dcm s dd gasas, pbc pva, wc sppd eCSM d d s , as was it sc maags, pssas ad

a ag gp w add vsad ccs gasd acss epdg m ocb 2012.

2.5 Mdl

eniSA gad ma w gad Mmb Sas eCSM p gasas ad

acvms w d sags: pag pas dg Q1Q2 2012; ad vaa pas a 31 ocb 2012.

eniSA dvpd mpas a csd pgag das ab sc-ad wksgasd a aa v acss ep.eg Mmb Sas w agd (10) ad a m spdd.

t v m amd a xacgp ma s acvsad vs pad ad ssbad. eniSA pacpad eCSM

p pjcs gag sppmama.

A ma was cmpd ad qa cckd w va mssad gvma agcs vvd gasa eCSM p. i smcass w sppmd b addamaa, vws ad sac cad ca b eniSA.

Daa as b agggad b cmbgdaa ms m d scs pvd sgs ad d pas gasa sc vs acss epad bav ga pbc.

(10) t v wks mpa was s eCSMpacpag cs: Czc rpbc, lxmbg,nwa, Pga, rmaa, Sva, Spa ad udKgdm.

7/28/2019 Be Aware, Be Secure - Cyber Security

12/42

6 B e A W A r e , B e S e C u r e .

3 t epa vvw

3.1 eCSM pl prjcs

A eCSM p cs w askd pvdvaa ad pmac magadg a v acv gasd aaa v as czs masc awass dg m ocb 2012.

3.2 Sss fds

ts a a a g cs pacpad s v epa Cb ScM (g 1).

FigURe 1: eURoPean oveRview

o 20 Jaa 2012 a ca xpsss s gas Sc wk ppjcs cx eCSM was s a mmbs awass-asgsb-gp euuSA Wkg Gp Cb-sc ad Cb-cm, as w as psav eeA cs. tcs w askd gas vs as czs ma sc awassa aa v ad va b dpdga.

wg s ca, sx cs spddpsv: lxmbg, nwa, Pga,Sva, Spa ad ud Kgdm. tCzc rpbc ad rmaa jd a a asag wg a cmmca campag pjc, ad b Agc.

ts g cs ca b dvdd bwggapca zs as ws: 25 % ep, 50 % ca ep ad25 % s ep.

eniSA qd a gvm/pbc bd a c a pbcpvapasp gas acvs ad vs as a as 1 wk.

eac c dcdd p scpad mb acvs ad vs bgasd b bdg s w xsgacvs ad xpc maxmmmpac. t xpc gasg scvs as w as dga dvd bwpp d cs vad m p pjc a. t maj

cs ad gasd sc awassvs pas. ova, 37.5 % pacpag cs ad scawass avs b 2008.

ova, 37.5 % pacpag csgasd acvs m, 25 % m a 1 wk ad s (37.5 %)d vs 1 wk.

ov cs m ocb, aag ca acvs ad vs w dacss g pacpag cs: 27ccs ad wksps, w a sads,

sv cs scs ad v adsws.t maj cs (62.5 %) gasdsca mda ad campags cdgcmps.

eniSA pvdd gdac ad xps w gas ma sccampags, g w ps ad advc w b sa . Mv, Agc pvdd pma maa pacpag cs p pmawass.

t pacpa pp ad mda

cvag a cs was v g.

Pilot countries

73 %

Non - pilot countries

27 %

7/28/2019 Be Aware, Be Secure - Cyber Security

13/42

B e A W A r e , B e S e C u r e . 7

3.2.1 Prcp curs

t wg cs pacpad eCSM:

Czc rpbc lxmbg nwa Pga rmaa Sva Spa ud Kgdm.

o c ad a gasa (11)ca sppd eCSM b acgad dcag czs, mps adcmms g vs, acvs ad/

campag dsb mds:

lava Cc epa u.

n daa was ccd ad/ aasd c a avs gasd b eCSM camps.

(11) ha camps.

3.2.2 2012 s cldr

tabLe 1: 2012 eventS CaLenDaR

Country Event type Target group DatesPrivate sectorinvolved (Y/N)

Czech Republic Round table Proessionals; NGOs; politicians;public administration; media;industry

2226 October N

Online and media campaign General public

Luxembourg Fair stand General public 1321 October Y

Norway Conerence; seminars; radioadvert; online and socialmedia campaign

Citizens; SMEs All month Y

Portugal Conerence; workshop Proessionals 14 October Y

Romania Conerence Proessionals; governmentinstitutions

All month Y

Online and social mediacampaign

General public

Slovenia TV advert; social mediacampaign

General public 1731 October N

Fair stand Students

Spain Conerence Proessionals All month Y

Lecture Children; parents; teachers; schools;adults; teenagers

Social media campaign General public

United Kingdom Roadshow; lecture; onlinecampaign

General public 2226 October Y

7/28/2019 Be Aware, Be Secure - Cyber Security

14/42

8 B e A W A r e , B e S e C u r e .

3.2.3 gls d jcs plprjcs

A v eu, sc vs w

gasd amd a mg czs ab mpac ma sc adggg smp sps pp caak pc daa, w psa,aca pssa. t ma gas adbjcvs pd w asg awass,cagg bav ad pvdg scs a czs gadg w pcmsvs .

3.2.4 tr udc(s)

A cs, w xcp Pga, pd vs gasd a,dvdas, czs ga pbc.o a w pd avg a campag a v spcc ag gp, sc as cd,acs, pas, SMes c.

examps gps a w agd bma sc vs acss ep asd bw (12) ( a spcc ams

(12) t ma s sd apabca d.

psd a s pvdd b pcs, s gps a dscv):

ads

cd czs gvm ss ds sakds i s it cv svas it pssas (.g. it maags, cma cs, sc gs)

mda -gvma gasas (nGos) pas pcas pbc admsas scs

sma ad mdm pss (SMes) sds acs ags.

Gv ca vap bw sm pd gps, s s gp smaadcs bad cags ga ss, g pp ad bsssss as sw tab 2.

Table 2: CaTegorisaTion o The TargeT groups

Main category Target group

General users Adults

Citizens

Parents

Schools

Teachers

Young people Children

Students

Teenagers

Business users Government institutions

industry stakeholders

Internet hotlines

IT civil servants

IT proessionals

Media

NGOs

Politicians

Public administrationsSMEs

7/28/2019 Be Aware, Be Secure - Cyber Security

15/42

B e A W A r e , B e S e C u r e . 9

t pp campags cmpassgga ss vss s agg bsssss s ams sam. ts s d ms vs agg SMes ad it

pssas. B cas, mb sc vs spcca g pp sab a mb ddcad gass.

i s ww mpassg d b d spcc adc a sagd b awass av d a mssag c aggps kwdg cca apd sg ms cv cmmca cas.ts w maxms appa mssagad psad adc ak ac,spca mssag s w ag

gps ss ad ds.

3.2.5 Sujc mr

t aass cad b eniSA pda sc pcs ms addssdb aa sc vs acss epw:

i sa ad sc d daa pc/pvac passwds ad (scams, psg) cb cm cb bg sca wks wss accss cd pc cb sc ma sc cb as cd sc.

Daa avaab ds aw dawgccss w spc psa abv md sc pcs.

hwv, appas a sm spcs w m dma a s, .g.i sa ad sc, cb sc, ad, cb cm ad cb bg.i s ca a ms ms ddad pa vac eu czs cx bsss ad psa vs.

3.2.6 tp msss usd

i as b pssb cags mssags sd epa cs,ma bcas va ss adagags sd.

Daa swd a sgas ad b cad b pm sc vs smcs ad cas v cg

a czs ad w gad spccacvs. Cag a mag ad pssbspg pas was sw b gdpacc acss ep.

3.2.7 Pl prjcs mrm

Gap 1 pvds a vvw spad sc p pjcs g ocb, asgasd acss ep.

graph 1: Weeks When eCsM seCuriTy evenTsWere organised

Gap 1 sws a ags mb eCSM acvs w gasd wk ocb, wd b d wk,ad a qa mb acvs wgasd mag wks. ts daaxpas a pck mda cvagccd d ad wk ocb.

i sd b d a d sccssaac csa a mdaad ga pbc, s mpa spad eCSM acvs v acss cs m d av awassacvs g cs a m acss ep. ts appac wdaca as w pad b eniSA as

cda gasa eCSM,spca g pacpa acasd mb Mmb Sas, wcappas b a gwg d.

0

1

2

3

4

5

6

7

8

Numberofcountries

Week 1 Week 2 Week 3 Week 4 Week 5

Czech Republic

Luxembourg

Norway

Portugal

Romania

Spain

Slovenia

United Kingdom

7/28/2019 Be Aware, Be Secure - Cyber Security

16/42

10 B e A W A r e , B e S e C u r e .

3.2.8 Lus

t ca gas mpac czs,maas w avaab ca

agag(s) cs ccd. ts d, eniSA pdcd gdac maa,as w as eCSM g, a 23 caagags pp gag sakdsad czs.

o w p cs sd egs as w:Pga ad rmaa.

3.2.9 Dlr cls

eniSA dd 16 dv cas aw sd sm dg acss ep (13):

wbss gvawas (.g. k-cas, ps, -ss,ca bags, leD cs ad dg fgdscs)

ccs, smas, wksps,cs, d abs

magazs, bcs, bks ad pd maa

scks fs, afs pss sca wks vd cps wspap acs, mda campags cmps, daws, ss, qzzs xbs, xps tV, ad

(13) t ma s sd d ppa.

wss adsws -ag.

t wd va dv casdmsas a pacpag cscs dp mp cas. i assggss pa va a macdappac a cd mac d mssags d mda ad pps. Mv,daa m lxmbg, Sva, Spaad ud Kgdm dmsas awv cmps ad daws wgasd gvawas w dsbd,czs w m c pacpa a eCSM acv ad scv mcmab cv pacca advc ag m w pdag avs swa

wa paa c s.

D c cds av b sd gp d dv cas bad cags, basd p p mssag vvd: psca vs (w),cc mssags (g g), pdmaas (g b), dspa maas (pk)ad mda ad mmda pdcs (g).

g 2 sws bad pcags dv cags a w dd.Pd maas (38 %) ad psca vs(25 %) a ma cass.

Accdg aass cad b eniSA,sx cs pd sg js dvmds ad w cs sd v.

igure 2: grouping o delivery Channels

Media and multimediaproducts

19 %

Physical events

25 %

Electronic messages

12 %

Display materials

6 %

Printed materials

38 %

7/28/2019 Be Aware, Be Secure - Cyber Security

17/42

B e A W A r e , B e S e C u r e . 11

t aass cad b eniSA pda, dv cas sd makczs awa sc sss, wbss,gvawas ad ccs/smas/

wksps, c. w ms cmm, assad Gap 2.

i paca, maj p cs(sv) sd a wbs as ma ca cmmca w ag gp.t wbs s backb ggcmmcas ad s s ggdback, wg wc adjsms ca bmad vas appacs. Mv,a wbs ca ps c mpadcs, s as pda ad maa,ca b as kd ma adca b gad w m a dv

ca, xamp sca mda, wbcassad -ma.

Wbss, as a cmmca vc, scd sam as dsb gvawas. tss a v cv wa aac ad spp.

a, gasa vs cmsv cs. usa, ccs, smasad mgs ca g mpac ad caac a v wd ag adcs b ca sc vs ad pcs. txpc lxmbg, Spa ad

ud Kgdm, xamp, dmsasw sccss ad cv psca vscd b d acv m ca.

3.2.10 tcqus

i ga, a Mmb Sas sd a va cqs wc w , xcg admvag d cac a adsma pbc w amd . Wassd mak ma sc vssg cdd:

s as--dsad ms; s d mssags ad acvs s awass was awas s;

s pacca mssags; gasa mmab acvs.

xamp, Sva ca acds eCSM campag w a vd psg, lxmbg gasd svaacvs b dvg g mssag d vss s a b a am a, ud Kgdm sdpacca mssags ad ps gag w

pbc g-ac aas sc assppg cs, awas sas, scs ad pbc cas.

3.2.11 Css

eniSA dd ga a ma xd vaab css ccd gasa aa awass avsacss ep. ts s bcas daa was avaab pbc dsb.

i a cas, sd b csdd a css

cd va ga m c adpdg mb vs gasd,maa pdcd, avaab scs,pvs pjcs, c. Csdg a svaabs ad, paca, cmpx campag gasd ad s da, wd b dc p cacadavag a bdg qs a eCSM ppjc.

3.2.12 Msur css rss prrmms

eniSA askd p cs pvdqaav ad qaav macapd w masg acvms eCSM avs.

0

1

2

3

4

5

6

7

8

Websites

Giveaways

Conferences/seminars/workshops/lectures/roundtables

Magazines/brochures/bookletsandotherprintedmaterial

Stickers

Flyers/leaflets

Posters

Socialnetworks

Videoclips

Newpaperarticles/mediacampaigns

Competition/draws/tests/quizzes

Exhibitions/expos

TV/radio

Newsletters

Roadshows

E-

learning

Numberofcountries

gRaPh 2: DeLiveRy ChanneLS

7/28/2019 Be Aware, Be Secure - Cyber Security

18/42

12 B e A W A r e , B e S e C u r e .

t ms cmm p daa cvd wasqaav daa. ts cd, amgss, a cs mcs sc as mb vs gasd, mb ads

a vs, mb s wbs cas pcag, ad mb gvawas dsbd. das a pvdd scs p ddcad acc.

D Mmb Sas adpd dmds assss cvss eCSMacvs. Mds sd cap daacdd, amg s, qsas,wbs sascs, ga bsvas,sascs m daa cs, daa ms, pss cppgs, pss ass admb pp ad.

Ga, daa wc av b gadcd ad v sma k pmacdcas. ts dcas a wa pcs d cv s bad sma.

tab 3 sas d pmacdcas a w ms sd acssep.

Table 3: perorManCe indiCaTors usedaCross europe

eac pmac dca ca b dcd a d appac (14).

Pcss mpvm: s appacasssss cvss campagb kg a s acvs. ts massa as d ad ga: wv, d dc mas w ds as mpvd sc.

(14) Inormation security awareness initiatives: Current prac-tice and the measurement o success, eniSA, J 2007.

Aack ssac: s appac massw ssa ss a a pa aack.ts appac pvds vdc v awass pp ccd.

hwv, mb aack scas sq g, ad mas w b spcc sca s sg.

ecc ad cvss: s appaccss aca xpc sccds. t daa ca b gad g va sc cd b ds cssa gv a fc scawass. i s js awass adms w cds ccd.hwv, g m, d ca ba gd dca awass.

ia pc: s appac asssssw w ss a pcd agas

as. t advaag s masss a pvd dc vdc ssbav. o, g, campags aamg cag bav. ts ca s ma mcs.

t daa sd b ca capdacss a p cs (as pmacmasm ad mg cvss a av sd b ddg ad a xc), ad sd dab vwd w a vw w acvsmg b mpvd ad mad m cv.ts ma sd b cmbd w

ss dvd m vaa mcs.t eCSM p pjcs bjcvs d b vsd b ac c g cvss ss. rvwg bjcvsaws a ss assssm ak pac.

t s d, a c sd cdcd beniSA (15) pd a vaa a awass campag pgamm sssa dsad s cvss, asw as s daa as a gd adjs av mak v m sccss.ts p sggss w d dcas mas sccss a awasspgamm as w as w cdcvaas. Bw a sm dcas wc w dd ad cd bsd mas eCSMs.

(15) The new users guide: How to raise inormation securityawareness, eniSA, nvmb 2010, avaab ap://www.sa.pa./acvs/c/sc-m/dvabs/2010/w-ss-gd

No Performance indicator Approach1 Number o materials distributed per week/

monthProcess improvement

2 Number o mate rial s dist ribute d per e di tion Proce ss improvement

3 Number o events listed per month Process improvement

4 Number o people attending events per location Process improvement

5 Number o hits on website per month Process improvement

6 Number o downloads per video clip Process improvement

7 Mean time between discovery and noticationo an attack and/or new threat

Attack resistance

8 Number o securit y incidents per month Ecienc y and eectiveness

9 Etc. Etc.

7/28/2019 Be Aware, Be Secure - Cyber Security

19/42

B e A W A r e , B e S e C u r e . 13

Table 4: exaMples o perorManCe indiCaTors

No KPIs (*)

1 % o budget spent on awareness training

2 % o time spent on awareness training per FTE

3 Age o employees attending an awareness training/average age o total employees

4 Cycle time in days between organisation o awareness activities and completion o campaign

5 Number o FTEs IT-security trained/total users

6 Number o qualied hits/month

7 Total cost o awareness initiative per year

8 Total costs o awareness training per FTE

9 Total personnel cost o the planning and management awareness initiatives

10 % customer satisaction with service delivery (i.e. timelines and quality)

11 % employee capability to perorm roles

12 % employee satis action

13 % increase condence or elderly

14 % senior management/executives; middle management/proessionals; operational works/sta that attended managementdevelopment programmes

15 % senior management/executives; middle management/proessionals; operational works/sta that received a security review

16 % service delivery perormance targets achieved

17 % stakeholder satisaction with communication about the programme

18 % stakeholder satisaction with governance arrangements

19 % stakeholder understanding o initiative benets

20 % stakeholdersresistance to change

21 % stakeholderssatisaction with ability o the system to meet business requirements

22 % employees understanding their role in achieving security goals

23 Average number o learning days per employee

24 Average personnel cost per FTE or the process change management

25 Average personnel cost per FTE or the process raising awareness

26 Frequency/relevance o surveys

27 Number o benets realised as stated in business case

28 Number o employees per develop and counsel-learningFTE

29 Number o changes in managersroles

30 Number o changes in sta activities

31 Number o correct answers on sel security assessments/total questions

32 Number o employees in charge o development/total employees

33 Number o FTEs or the process develop and counsel-learningper EUR 1 000 cost o continuing operations

34 Number o participants in the awareness survey/total employees

35 Number o sel security assessment done/year36 Total cost o the process develop and counsel-learningper EUR 1 000 cost o continuing operations

7/28/2019 Be Aware, Be Secure - Cyber Security

20/42

14 B e A W A r e , B e S e C u r e .

No KPIs (*)

37 Total internal personnel cost o the process develop and counsel-learningper EUR 1 000 cost o Continuing operations

38 Contribution o ICT training to value added per person engaged in % points

39 Number o employees who passed the exam or certication/total Number o employees

40 Number o organisations adopting the tools/year

41 Number o people who passed the exam or certication/total Number o people interviewed

42 Numbe r o tools downloaded/month

43 Number o topics on security in high school and education/total topics

44 Number o topics on security in standard primary and secondary school education/total topics

45 % o budget allocated to awareness training

46 % o employees born ater 1950

47 % o businesses with 10 or more employees using Internet

48 Number o access lines and channels in total/per 100 inhabitants

49 Number o households with access to home computer/country

50 Number o households with access to Internet/country

51 Number o mobile subscribers in total/per 100 inhabitants

52 Number o broadband subscribers/per 100 inhabitants

53 Training cost per FTE

54 Cycle time in days to resolve a security problem

55 Mean time between discovery and notication o a new threat

56 Numbe r o ide nt ied ault/yea r

57 Number o alerts, advisories, notications, recommendations/month

58 Number o communications with other countries/year

59 Number o systems without implemented password policy/total Number o systems

60 Number o tokens/certicates/eID cards issued/total population

61 Number o reported incidents per category/year

62 Number o certication scheme adopted by local or international companies

63 Number o e-government projects using the standards/total projects

64 Number o editions/year

65 Numbe r o eve nts l isted/month

66 Number o material distributed/edition

67 Number o material distributed/year

68 Number o people attending awareness trainings per campaign

69 Number o training days per sta/year

70 Numbe r o unique v isi tors /month

71 Time to organise an awareness initiative

(*) Ms KPis a xpssd a p aa bass (.. mb s p te p eur 1 000 spd) a a abs ms.

% = pcag; te = -m qva.

7/28/2019 Be Aware, Be Secure - Cyber Security

21/42

B e A W A r e , B e S e C u r e . 15

4 P cs

4.1 Czc Rpulc

t Czc rpbc pacpad eCSMm 22 26 ocb 2012.

t Ms i Czcrpbc sppd ad pmd epa Cb Sc M Czcrpbc.

Acvs ad vs w scdd ak

pac as ws.

A d ab nGos gagd d cd pc, Czc is, cmp sc cdsps ams (CSirts) ad dssakds. t v was gasdd aspcs M Kbc, Ms i Czc rpbc,ad Ms Smkva, gvmsCmmss hma rgs.

o ac ad pmpas g wbsp://www.sa.czad

wss. Mda campag.

t Czc Sa i C (nCBi)jd eCSM p pjcs ad beniSA sa sa ad sc . tnCBi gasd s d ab nGos, pbc admsa psavsad gasas pag CSirts/Certs(cmp mgc sps ams) Czc rpbc.

t v k pac 26 ocb 2012 Pag d aspcs M Kbc,

Ms i Czc rpbc,ad Ms Smkva, gvmsCmmss hma rgs. t Dc Cert-eu, M dd Dz, addssd ads d ab w sspc.

t ma bjcv d ab was cas ma ma xcagad cpa bw gasas adcmpas a a acv gadg dca ad pm ac, sa s i, cm pv addag w sca pagca pma i, a pa as sdag w i as.

A mg, a was pad wg sss:

spcc acvs dvdagasas ad pssbs cscpa, ad cda pbms cd, pas ad acs aa cmmca;

pssbs ad was sggcpa amg nGos, vapbc ss ad bds acv cma pcdgs gadg pc cds gs i adpvg cm;

ps ad was a cmm appac dag w pcas ad pbcadmsas casg pc i ss, spca cd.

Vss p://www.sa.czwbs w md ab eCSMavs gasd Czc rpbc.ts wbs was ma sc ma, ad ac casd sgca 2 824 vss, 70.25 % wm w w

vss. t sam ma ab eCSM acvs was as dsbd 6 500 Czc scs va Sa iws.

Table 5: CzeCh republiC suMMary Table

Czech Republic

Government/national entities taking partin the ECSM

Ministry o the Interior o the Czech Republic

Private sector involved No

Duration 2226 Oct. 2012

Languages used CZ

Number o events organised 1 (round table)

Number o attendees > 30

Number o locations 1 (Prague)

Target audience NGOs; Czech Internet hotlines; CSIRTs; Industrystakeholders; Politicians; Public administration; Media

Number o other activities organised 2 (online and media campaigns)

Subject matter Internet saety; Online child p rotection; Cyber bullying

Delivery channels Conerence; Giveaways; Stickers; Newsletter; Website;Media

Number o ENISA giveaways distributed 464

7/28/2019 Be Aware, Be Secure - Cyber Security

22/42

16 B e A W A r e , B e S e C u r e .

4.2 Lumur

lxmbg pacpad Scwk p pjc w s aa campag

csd s a (201213) sks ad bg ad sakg.

t Bee SeCure av m lxmbg gvm was ps ws 80 m2 a b a am a m13 21 ocb 2012. Sc ps wsad vss b akgg sm avaab bcsad afs b pg vss sw sg passwd was g acmp avaab a sad. tabs wa dspsa czs sd akgpa cmps ad daws. A ab was

gasd a kds w pasw vsg sad. t a aacd ma 43 000 vss. t sad was vsdb sads czs, mpg b campag maa. Dg pgcm Gad Dk lxmbg pada vs sad.

Table 6: luxeMbourg suMMary Table

Luxembourg

Government/national entities taking part in the ECSM BEE SECURE, an initiative o the Ministry o Education, Ministry o Family and

Integration and Ministry o the Economy and Foreign Trade, operated by SNJ(the National Youth Agency) and SMILE (Security Made In Ltzebuerg)

Private sector involved Yes

Duration 1321 Oct. 2012

Languages used FR, DE

Number o events organised 1 (air booth)

Number o attendees 43 000 at the air, ~ 10 000 at the stand

Number o locations 1 (Luxembourg)

Target audience Citizens

Number o other activities organised 2 (distribution o posters and fyers through partners)

Subject matter Internet saety and security; Strong passwords; Online child protection;Cyber bullying; Stalking

Delivery channels Fair stand; Giveaways; Stickers; Leafets; Website; Competitions, draws;Brochures and other printed material; Posters

Number o posters distributed 3 300

Number o ENISA giveaways distributed 9 250

Number o other giveaways distributed 18 556

Number o fyers and activity reports distributed 6 350

Number o partners fyers distributed Hundreds

7/28/2019 Be Aware, Be Secure - Cyber Security

23/42

B e A W A r e , B e S e C u r e . 17

4.3 nr

nwa pacpad epa CbSc M b gasg acvs ad

vs czs ad SMes g m ocb.

t nwga C imaSc (nSiS) a Spp. tk. Kkk.(Sp. tk. Cc.) campag dgocb cba epa ScM. t vs ad acvs w pa aaa pbc awass campag amd acasg dsadg cb asad abg nwga czs b saad m sc .

t campags ma bjcv was p a

czs bcm m awa as ad, paca, b dsad w pc:

psa ma ad d b sgsg passwds;

bssss b kpg sc swac.

t gvm ad pva gasaswcmd av.

Acvs ad vs w scdd akpac dg m ocb asws.

Kck- v b mas a cc.t pg addss was gv b Ms Gvm Admsa,rm ad Cc Aas, Ms rgmAasd. Vd cps w sd dg da.

Da ad advsms. i advsms. Acs ws. Dsb dcaa packags SMes, cdg psas, vds,pss ad gadgs asg ma

sc awass appxma 60 000nwga mps. Wbs campag (p://www.skk.).18 500 vss w gsd pd.

Sca mda campags acbk(nasja Skksmd) ad tw(#skksmd).

M a 37 ccs ad smasw d g nwa, m navk os, tdm, Gjvk,Savag ad sva cas c.

ia smas/mgs, w vspaks, gasd a nwgacmpas g naa ScM pjc ad admsd g

p://www.skk.. Cmpas cs pc b cvd dg sma/mg m 30 d psas.

nSiS gav 30 psas a dsmas ad ccs.

A dca packag was dsbd 115bssss nwa dg m Spmb d av ag acvsgasd -s dg m ocb. t packag cdd wg:psas, -ag, bcs wsc ps mps, pss, vds,gadgs.

Table 7: norWay suMMary Table

Norway

Government/national entities taking partin the ECSM

Norwegian Centre or Inormation Security

Private sector involved Yes

Duration Whole o October 2012

Languages used NO

Number o events organised 37 (conerences and seminars)

Number o attendees Approximately 2 0002 500

Number o locations 12 (Bergen, Brum, Bod, Gjvik, Kristiansand,Lillehammer, Narvik, Nittedal, Oslo, Skien, Stavanger,Trondheim)

Target audience Citizens; SMEs

Number o other activities organised 7 (distribution o posters and educational material orSMEs; radio and Internet advertisements; video clips;articles on magazines and newspapers)

Subject matter Internet saety; Updating programs; Privacy; Passwords;Encryption; Security sotware

Delivery channels Conerences; Seminars; Giveaways; Stickers; Educational

packages or SMEs including e-learning, presentations,videos, security tips, posters and gadgets; Leafets;Posters; Website; Internet advertisement; Videoclips; Social media; Articles; Press releases; Radioadvertisements

Number o posters distributed 1 000

Number o ENISA giveaways distributed 1 098

Number o radio ad vertisements listeners Approximately 5 000 000

7/28/2019 Be Aware, Be Secure - Cyber Security

24/42

18 B e A W A r e , B e S e C u r e .

4.4 Prul

t naa Sc oc, cabaw SadwSeC ad ud nas

iga Cm ad Jsc rsacis (uniCri), gasd scdd iscDa d aspcs epa Cb Sc M.

Pga pacpad Sc wkp pjc b gasg a cc ada ss wksps amd a dscssg ma aa ad aa dsad mgg sks gadg cb sc.t vs w d 14 ocb 2012 lsb. A ss wksps w d 13 ocb ad a cc 4 ocb.t vs w p it pssas, cv

svas ad gvm ss.

Table 8: porTugal suMMary Table

ov 4 das, Pgs vs saw 240pacpas (83 adg wksps ad157 ma cc) m appxma75 cmpas ad 16 spaks.

t ma m ad agda vsw v w cvd b a ads, asw as qa ma sadad m dscsss wc wasawd.

t scd d iscDa cvdxc pss cvag. t wbsddcad vs ad v pd aa 341 vss w a cas w vssb 67,16 %.

Portugal

Government/national entities taking partin the ECSM

National Security Oce (GNS)

Private sector involved Yes

Duration 14 October 2012

Languages used PT, EN

Number o events organised 4 (workshops and conerence)

Number o attendees 240

Number o locations 1 (Lisbon)

Target audience IT proessionals; IT civil ser vants; Government institutions

Number o other activities organised NA

Subject matter Cyber crime legislation; National cyber security strategy;Cyber threats; Digital investigation; Data protection; ISO27001; Cloud security; Responding to security incidents;Public-private partnerships; Sotware development

Delivery channels Conerences; Seminars; Giveaways; Leafets; Website;Brochures and other printed material; Stickers

Number o posters distributed NA

Number o ENISA giveaways distributed 708

7/28/2019 Be Aware, Be Secure - Cyber Security

25/42

B e A W A r e , B e S e C u r e . 19

4.5 Rm

rmaa pacpad epa CbSc M (eCSM) b gasg vas

acvs as rmaas masc awass g m ocb, cagg ga pas cv pd 1519 ocb 2012.ts was ma d ac gascgsd a sca mda ad campags wd av b m cvad sccss a as a pd wks.

t rmaa Cert gasd vasacvs as ma scawass as ws.

Cb tas 2012: pbc cc cb sc.

Sca wks ad campags:ma sc advc ad acsw pvdd vss wbsp://www.c-. ad vaacbk, tw, Gg+ ad lkdiaccs.

Pss ass m ppaab vs gasd b Cert-ro dg m.

4.5.1 Cr trs Crc 2012

t cc was ddcad asgawass amg i ss ab dags cb aacks, spca

aca ad bakg scs. ts a,202 pp add cc, wcg pa dscsss cvd wg:

mpcas paa adsc sks gad b it acvs adcmmcas bakg sc;

cb as ad xsg ss daa pc.

4.5.2 ol d scl mdcmps

Vas ad sca mda campagsa dg m ocb.

A ddcad sc Cert-ro wbs

(p://www.c-./eCSM2012.pp ) wasdvpd ad ppad w maab eCSM, s maa ad pss (18 a) mas ad i sc.t pss cssd acs, gds, psad advc, ad pss ass. Mv, 15mda acs rmaa w pbsdad as dsbd va sca mda cassc as acbk, tw, Gg+ adlkdi.

Sca mda w sd sa ma eCSM ad acvs scdd rmaa, as w as sa, agagg wa, mas gadg masc ad ad sks ad as.tws w psd rmaa ad egs.

Table 9: roMania suMMary Table

Romania

Government/national entities taking part in the ECSM CERT-RO

Private sector involved Yes

Duration Whole o October 2012

Languages used RO, EN

Number o events organised 1 (conerence)

Number o attendees 202

Number o locations 1 (Bucharest)

Target audience IT proessionals; IT civil servants; Government institutions

Number o other activities organised 2 (online and social media campaigns)

Subject matter Cyber security

Delivery channels Conerence; Social networks; Website; Media; Video clip; Posters

Number o posters distributed 200

Number o ENISA giveaways distributed NA

Number o other giveaways distributed 222

7/28/2019 Be Aware, Be Secure - Cyber Security

26/42

20 B e A W A r e , B e S e C u r e .

4.6 Sl

Sva pacpad eCSM bgasg vas acvs as

Svas ma sc awass 2 wks (1731 ocb 2012).

t Sva Cert gasd vasacvs as ma scawass as ws.

acbk campag: va s sca mdapam, ma sc ps wpvdd vss pag. Qzzsab ma sc k pac adpzs w dsbd. B 30 ocb,250 pp ad pacpad qz,gsg 2 200 w ks

ddcad acbk pag. tvs campag: tV advs wbadcas pd campag. t advs, mdgpp w pc m ad,cagd vws vs dcaapa Sa i ad g m ab ma sc.

Table 10: slovenia suMMary Table

Sds a (2325 ocb 2012): Sva Cert was ps w s ba sds a. lafs ad t ABC sa bk w dsbd.Vss sad ad cac pacpa a qz gam: A a wbdcv? A cp nga scams wasacd dg s av (16).

t w vd cps w acd caba w w ams Svacmdas. B 30 ocb, vds as aw ad cvd m a 18 600 vws ytb (17).

o 17 ocb, Sva ca acds eCSM campag w a vd psg (18), a acbk qz, tV ads adbas. i s 24 s, wbsp://www.vaa.s/ad m a2 700 vws, w a a cas ac 200 %. Dg campag wbsg m a 18 000 q vss.

(16) p://www.b.cm/wac?v=bDPpm6QGXM&s=uu4-56idZZn3szlqbMgVw&dx=1&a=pcp

(17) t vd ab ad ss s avaab ap://.b/PhhoestvKQ

(18) p://www.b.cm/wac?v=A0SQp9es

Slovenia

Government/national entities taking partin the ECSM ARNES SI-CERT

Private sector involved No

Duration 1731 October 2012

Languages used SL

Number o events organised 1 (air booth)

Number o attendees More than 21 000 students and young adults visitedthe studentsair. The booth was visited by around 200people who also participated in the quiz

Number o locations 1 (Ljubljana)

Target audience Citizens; Students

Number o other activities organised 3 (social media campaign; TV adverts; online quizzes)

Subject matter Online saety; Online raud (Nigerian scams, phishing,ake online stores)

Delivery channels Social media (Facebook, Twitter and YouTube); Onlinecampaigns (i.e. web banners, articles on nationalonline news portals); TV adverts; Fair stand; Video clips;Giveaways; Quizzes, competitions; Leafets; Booklets

Number o posters distributed NA

Number o ENISA giveaways distributed 500

7/28/2019 Be Aware, Be Secure - Cyber Security

27/42

B e A W A r e , B e S e C u r e . 21

4.7 Sp

Spa pacpad epa CbSc M (eCSM) b gasg

a cc ma scpssas ad sva acvs cd, ags ad ads g m ocb 2012.

ic (19) pacpad eCSM bgasg sx eniSe (iaaMg ima Sc). tcc k pac 2324 ocb 2012,gsg 386 ads ad 18 000 m bvd samg.

Mv, acvs ad vs as ma sc awass cd,

ags ad ads w scdd akpac g m ocb asws.

Wa d kw ab sc? sad dawg cmps cdm 5 12 as d. i drcr, 15 scs pacpad w 525dawgs. i sr cr, 22 scspacpad w 350 ss.

Cs masc campag: sav d ac basc scccps sds m 5 8 asd. t cd cs a masc m Ms oSi wbs w xpadma sc m. A a scs pacpad s p pjc.B dpg s av a scs,ps ad cs w b aasd ad maavwd.

lcs ab i sc ad scawks csd cd, ags,pas ad acs. ts cs kpac sva scs a v Spa: sxcs scs, w 326 ads(309 cd ad 17 pas ad acs).t scd was as ws:

9/10/2012 w cs sds aSa Ja d a Cz Sc (l);

9/10/2012 c pas adacs a Sa Ja d a Cz Sc(l);

15/10/2012 w cs sds aVg Baca Sc (l);

31/10/2012 c sds aD Bsc Sc (l).

Sca mda campags: masc ps w advsd gacbk ad tu (20). Vas advsw cad: t gsg a

(19) p://www.c.s

(20) t s a Spa-basd, va- pva scawkg wbs sds ad g pp.

cas 20 ws; 12 Fckp oSi gsg a cas 1 830ws; ad 12 Fck pPs, lu clc gsg a cas 1 443 ws.

ts acvs w gasd b icg oSi (p://www.s.s), s aasc pdsk czs. ts wbscvd 102 954 vss, a cas 21 %.

Table 11: spain suMMary Table

Spain

Government/national entities taking partin the ECSM

Instituto Nacional de Tecnologas de la Comunicacin(Inteco)

Private sector involved Yes

Duration Whole o October 2012

Languages used ES

Number o events organised 7 (lectures and conerence)

Number o attendees 722, and 18 000 vir tual attendees

Number o locations 1 (Len)

Target audience Inormation security proessionals; Children; Teenagers;Adults; Parents; Teachers; Schools

Number o other activities organised(competition, social media campaign, etc.)

3 (competition, social media campaign and choose yourmascotcampaign)

Subject matter Inormation security

Delivery channels Conerence; Lectures; Social networks; Competitions;Giveaways

Number o posters distributed NA

Number o ENISA giveaways distributed 1 004

7/28/2019 Be Aware, Be Secure - Cyber Security

28/42

22 B e A W A r e , B e S e C u r e .

4.8 Ud Kdm

t ud Kgdm pacpad Sc wk p pjc b gasg

avs ad vs v maj cs acss c m 22 26 ocb 2012.

G Sa o uKs adg sc , pacca, xp ma adadvc sa gasd sv aa G Sa o Wk d aspcs eCSM. ts as mwas Clck & tll, dsgd g as mapp as pssb acss uK pass sa ps ds, am, cags,gbs, vab pp, a wcd b m advc.

t cs G Sa o Wk was aadsw vsg v maj uK cs (Cad,ld, lds, edbg ad Bas),gagg w pbc g-ac aassc as ccss, sppg cs, awasas, s cs ad pbc

cas. t mssag was as cascaddb G Sa os pa cmm asw as sd pas. A mb cbs ad w-kw psasw cd ds s mpamssag.

t campag acd 124 160 943 czs.t G Sa o am vsd wgcas.

Crd

Cad ca sa: m a mg 9.15 a.m. am gav

afs ad gvawas cmms, w aaasc sps. t ma sa a sa w Cck & t badgs a da.

Qs Acad: a sad was s p sppg c, w afs wadd gd spps SWas ag w Cck & t am adsad mm scks. t cac was pakdsd acad a da, ad , paccaadvc was gv ag m w pdag avs swa cd bmakg a ads cmp sw dw, wa paa c swa s avaab Pads, c. M Davd Js, Sca

Sa Was, vsd cac ca w am ad a gp cdm S Cadcs r. C. Pma Sc lam, Cad. t cd ascad w G sa o am ads gs xps ab sa v BBC rad Was.

Ld

Wa sa: a am sv pcd Cck & t pp-p dspa a Wasa, mag s 10 a.m.g advc cmms ad adg

afs ad gds. Adma Ac, taaga Sqa: cacpakd a Adma Ac, taaga Sqaw a sad fw pp dppd spak xps bad.

S J Cass da Sx mCg Sp G: a cp pp m c am addssd sc assmb ab sa.la da, G Sa o amad cgs gss cac a ascacg p w Paama Sca Cab oc C Sm, w wasvsg a sam m. t ms asm spps m SoCA, Smac, Mpa Pc, hMrC, PPaPs,Gm, t ad gvmambassads m Cab oc ad Dpam Bsss, ivaad Sks.

7/28/2019 Be Aware, Be Secure - Cyber Security

29/42

B e A W A r e , B e S e C u r e . 23

Lds, ws yrksr

lds sa: am d advc cmms Ws yks, w w

v cpv av ad sa mssags. tsads fs adgvawas w dsbd.

Bgga: Cck & t cac was pakd cs ma sppg ss,w am gagd w pbc a aspcs sa.

edur

edbg sa: am akd cmms ab mpac isc.

S Jams Sppg C: afs,

-ss, am ads ad gd advcw dsbd sp Cck& t. Aga, sm ms smd pdma, w qss ab samag ad kpg cd pcd.

Cas S: cac pakd acssCas S, w czs w mddw sa sa ad sc .

bls

epa bs c ad Ga Vca Ssa: m 8 a.m. 9.30 a.m.

C ha: m 12 2 p.m. tsc exa Kckag rad: m 2.30p.m 3.30 p.m.

i a cas, afs ad gvawasw dsbd ad w cvd, pbabbcas sm 60 % ppa asb dc acd b cm, ws cds ud Kgdm.

Qs uvs ba: am cadw sds ab a mb aspcs sa.

Dg G Sa o Wk, wbsp://www.gsa.g/ad m a

25 000 q pag vws, w a a cas 57 % cmpad w pvs wk (21).

(21) t wbs p://www.gsa.g/ad 61 248pag vws p m 36 595 (+ 67.37 %) pvs wk.

t am ac gad m gwbss casd b v 75 % a wk dcag a wbss w pg pm G Sa o wbs ad

vs gasd cx G Sao Wk.

Ams 85 % pp w vsd wbs dg a wk ad vsd pvs, dcag xc ac pgamm.

Table 12: uniTed kingdoM suMMary Table

United Kingdom

Government/national entities taking partin the ECSM

Get Sae Online

Private sector involved Yes

Duration 2226 October 2012

Languages used EN

Number o events organised 2 (roadshow and lecture)

Number o attendees Not provided

Number o locations 5 (Cardi, London, Leeds, Edinburgh, Belast)

Target audience Citizens; Students; Schools

Number o other activities organised 6 (distribution o leafets, posters, giveaways, printedmaterial and brochures; online campaign)

Subject matter Get sae online

Delivery channels Roadshow; Lecture; Leafets; Posters; Giveaways; Printedmaterial, brochures; Website, blog

Number o posters distributed 5 000

Number o ENISA giveaways distributed NA

Number o other giveaways distributed 10 000 Trend Titanium licenses; 1 000 t-shirts; 1 000olduo fying discs; 2 000 Symantec USB sticks

Number o fyers distributed 10 000

7/28/2019 Be Aware, Be Secure - Cyber Security

30/42

24 B e A W A r e , B e S e C u r e .

5 r pad b eniSA

eniSA sppd gasa epa Cb Sc M p pjcs vas was, as:

cda gasa eCSM; b a pacpag cs; cc avaab maa ad ga sgs bw p cs;

sbjc-ma xp w gasma sc campags;

aca cmm mssagg w pacpag cs b pvdg ps adadvc w b sa ad sc ;

ca eCSM bad ad admakg pa;

dsb pma maa (ab15 000 gvawas ad 10 000 pss).

t Agc cdad gasa 2012 eCSM, g bcm b a p cs b pvdg sggss,pg qs ad gag sgsbw cs w pssb. xamp, ac bw lxmbgad nwa ad a bw udKgdm ad Sva, ag w nwa,dmsad w sccss sgs cdb.

eniSA pvdd gdac ad xps w gas ma sccampags b sg s mdg w ppa ad mpm awass campags(22), ad dvpd a ss cmmmssags ad maa p MmbSas ppa cb sc dcaad awass campags a sma was cx epa Cb ScM. ts maa was cgsd b acs as a mpa acgpp ad gg m cag bav, c gd bav.

ts maa cdd:

ps ad advc pvd -dpma w sa sa a va sgs, xamp scawkg ss, gamg ss ad mb dvc;

eCSM pss; eCSM wb bas; eCSM cca appcampa (w backgd ad cd

backgd); eCSM ad; eCSM PwP mpa; eCSM am ags m; eCSM vd cp (23).

Mv, Agc pdcd pmmaa Mmb Sas ppm awass mssags ad aspd d spaks vs.

(22) The new users guide: How to raise inormation securityawareness, eniSA, nvmb 2010, avaab a p://www.sa.pa./acvs/c/sc-m/dva-bs/2010/w-ss-gd

(23) As 15 nvmb 2012, eCSM cp ad 1 099vws. t vd s avaab ap://www.b.cm/wac?v=q00i0yWA s vs sam cp ad870 vws. t vd s avaab a p://www.b.cm/wac?v=7d96a3p0s

7/28/2019 Be Aware, Be Secure - Cyber Security

31/42

B e A W A r e , B e S e C u r e . 25

5.1 brd mrk pl

A ss acvs w pad mak epa Cb Sc M pjc.

5.1.1 vsul d

t sg vsb ad pbc cg epa Cb Sc M, eniSAcad a vsa d cdg a g, ac ca, pgap s, gds s mag, dsg mpas ad amaa ma gds pp s s ms.

t dsg was cad wg csaw Mmb Sas ad epaCmmss.

5.1.2 Sl

t sga B awa. B sc. was cad gv pjc a d ad a psvmag. i was sd sm maaad gvawas pdcd epaCb Sc M pjc. t sgaawas appad w ma scps w dspad pss ad a va maa.

5.1.3 adrs cmp

t epa Cb Sc Mad a dvs ag acvs advs, ad as pa bd-p eniSAacd a campag a gav pp cac a advsms ad pma maa b sdg pgaps msvs.

eniSA amd bg sga pjc, B awa. B sc., .

5.1.4 Scl md

Ddcad sca mda accs w cadas a sc s advc ab ma

sc ga, as w as ps adcmmdas w pc PCad psa ad bsss ma. taccs pvdd ma acvsad vs gasd ac pcs.

Accs w s p ad acvad wg sca wkg ss: tw acbk lkdi.

Mv, eniSA sca mda cas (24)

w sd advs eCSM acvs.M a 2 300 q pag vws (25) wgad m eniSA sca mda ac a epa Cb ScM. ts daa pss ams 25 % a q pag vws a eniSA scamda ac pd 18 Spmb 2012 31 ocb 2012.

(24) eniSA acd s sca mda cas 19 Sp-mb 2012. Sca Mda cas ca acd 19 Spmb cdd tw ad acbk. lkdi wasa amaca gad pag aad acv ad ytbpag was cad 6 J 2012.

(25) Daa ad pd 18 Spmb 2012 31 ocb2012.

7/28/2019 Be Aware, Be Secure - Cyber Security

32/42

26 B e A W A r e , B e S e C u r e .

CounTries:

Asa, Bgm, Bgaa, Cps, Czcrpbc, Dmak, esa, ad,ac, Gma, Gc, hga,icad, iad, ia, lava, lcs,laa, lxmbg, Maa, nads,nwa, Pad, Pga, rmaa,Svaka, Sva, Spa, Swd, udKgdm.

sTaTus:

cmpd

duraTion:

3/9/20121/10/2012

naMe:

J eu CbScM

adverT:

ocb s eu Cb Sc M.Cck w sa sa ad sc

TargeTing (30) :

98 580 420 ss:

w v Asa, Bgm, Bgaa,Cps, Czc rpbc, Dmak,esa, ad, ac, Gma,Gc, hga, icad, iad,ia, lava, lcs, laa,lxmbg, Maa, nads,nwa, Pad, Pga, rmaa,Svaka, Sva, Spa, Swd ud Kgdm;

agd 18 ad d, cags: scc/

cg, cmp pgammg, smabsss ws, mb (a), P,riM/Backb, Add, Wdws P,s, Pad, acv a p ss cg a adps.

CaMpaign reaCh (31):

1 246 064

requenCy (32):

11.8

nuMber o iMpressions (33) :

7 507 532

nuMber o CliCks (34):

364 (pg p://www.sa.pa./acvs/c/sc-m/ps)

E

uropE

5.1.4.1 Fck cmps

eniSA a sx acbk campags d mak czs awa pjc ad

s acvs ad bd bad cg.Campags w gasd a epa adMmb Sas v agg: lxmbg;nwa; Pga; Sva; ad Spa.

A campags agd sam adcad w cad agag va c. t da accampag was s accdg g acvs pad agd pcs. A campags pd ddcad eniSA wbpags.

t acbk campags, ag w pss ass ad w ms pbsd b Agc dg ms Spmbad ocb, gsd a a 44 363

q pag vws (26

), a cas 5.44 %cmpad pvs 2 ms.

Mv, mda campag ad vd Vc Psd n Ks (27) acg epa Cb Sc M ad asgca mpac mda cvag, a mb acbk ks (28) ad mb ws eCSM twacc (29).

Das ab w sx acbk campagsw s-p ad ad daa ca b d scs bw.

5.1.4.1.1 eURoPe

(26) p://www.sa.pa./acvs/c/sc-m

(27) p://www.b.cm/wac?v=7uwtAWpGi

(28) p://www.acbk.cm/CbScM. As 19nvmb 2012, acbk CbScM accas 65 lks.

(

29

) ps://w.cm/CbScM. As 19 nvmb2012, tw CbScM acc as 230 -ws, 110 ws ad 61 wg.

(30) t mb dvda pp w w agd bs campag.

(31) t mb dvda pp w saw spsdss advs s campag dg dasscd. ts sd mpsss, wc cdspp sg m mp ms.

(32) t avag mb ms ac ps saw eCSM campags spsd ss advs

(33) t a mb ms advs av b sw s.

(34) t mb ccks s campags spsd ss advs av cvd.

7/28/2019 Be Aware, Be Secure - Cyber Security

33/42

B e A W A r e , B e S e C u r e . 27

LuXEMbo

urG

CounTry:

lxmbg

sTaTus:

cmpd

duraTion:

1/10/201213/10/2012

naMe:

Ms ue d Cbsc

adverT:

Dcvz s s acvs cas

masas pvs lxmbg

TargeTing:

125 660 ss

w v lxmbg; agd 18 ad d; cags: scc/cg, cmp pgammg,sma bsss ws, cg aadps, mb ss (a), smap/ab ss, a p ss, S,lG, Ma, htC, Add (),Samsg Add (a).

graph 3: response To luxeMbourgsaCebook CaMpaign

CaMpaign reaCh:

33 987

requenCy:

19.9

nuMber o iMpressions:

676 101

nuMber o CliCks:

39 (pg p://www.sa.pa./acvs/c/sc-m/ps/xmbg)

igure 3: audienCe o luxeMbourgsaCebook CaMpaign

Targeted 125 660

Reached 33 987

Clicks Actions

7.5

5.0

2.5

0

02/10 05/10 08/10 11/10 14/10

5.1.4.1.2 LUxeMboURg

7/28/2019 Be Aware, Be Secure - Cyber Security

34/42

28 B e A W A r e , B e S e C u r e .

CounTry:

nwasTaTus:

cmpdduraTion:

29/9/201226/10/2012naMe:

Da eu-CbScM

adverT:

S vk ka akv g aagmsm paag ng

TargeTing:

1 641 940 ss

w v nwa; agd 18 ad d; cags: scc/cg, cmp pgammg,sma bsss ws, cg aadps, mb ss (a), smap/ab ss, a p ss, S,lG, Ma, htC, Add (),Samsg Add (a).

graph 4: response To norWays aCebookCaMpaign

CaMpaign reaCh:

27 476requenCy:

8.8

nuMber o iMpressions:

247 474

nuMber o CliCks:

3 (pg p://www.sa.pa./acvs/c/sc-m/ps/wa)

igure 4: audienCe o norWays aCebookCaMpaign

Targeted 1 641 940

Reached 27 476

Clicks Actions

3

2

1

0

02/10 05/10 08/10 11/10 14/10

norwa

y5.1.4.1.3 noRway

7/28/2019 Be Aware, Be Secure - Cyber Security

35/42

B e A W A r e , B e S e C u r e . 29

CounTry:

Pga

sTaTus:

cmpd

duraTion:

4/9/20122/10/2012

naMe:

Ms d CbsgaaAdv: Ca a vadad d acvdadscas vs a sm azads mPga

TargeTing:1 452 440 ss

w v Pga; agd 18 ad d; cags: cmppgammg, sma bsss ws,mb ss (a), smap/abss, a p ss, S,lG, Ma, htC, Add () Samsg.

graph 5: response To porTugalsaCebook CaMpaign

CaMpaign reaCh:

184 746

requenCy:

9.5

nuMber o iMpressions:

1 752 870

nuMber o CliCks:

86 (pg p://www.sa.pa./acvs/c/sc-m/ps/pga)

igure 5: audienCe o porTugalsaCebook CaMpaign

Targeted 1 452 440

Reached 184 746

Clicks Actions

30

20

10

0

08/10 11/10 14/10 17/10 20/10 23/10 26/10 29/10

portuGa

L

5.1.4.1.4 PoRtUgaL

7/28/2019 Be Aware, Be Secure - Cyber Security

36/42

30 B e A W A r e , B e S e C u r e .

SLovEni

aCounTry:SvasTaTus:

cmpd

duraTion:

24/9/20125/10/2012

naMe:

eu msc sp vas

adverT:

Pv ka djavs dgdk, k sbd dvja v Svj. Pd s am!

TargeTing:

282 840 ss

w v Sva; agd 18 ad d; cags: scc/cg, cmp pgammg,sma bsss ws, cg aadps, mb ss (a), smap/ab ss, a p ss, S,lG, Ma, htC, Add (),Samsg Add (a).

graph 6: response To sloveniasaCebook CaMpaign

CaMpaign reaCh:

99 005

requenCy:

18.9

nuMber o iMpressions:

1 869 882

nuMber o CliCks:

85 (pg p://www.sa.pa./acvs/c/sc-m/ps/sva)

igure 6: audienCe o sloveniasaCebook CaMpaign

Targeted 282 840

Reached 99 005

Clicks Actions

30

20

10

0

11/09 14/09 17/09 20/09 23/09 26/09 29/09 02/10

5.1.4.1.5 SLovenia

7/28/2019 Be Aware, Be Secure - Cyber Security

37/42

B e A W A r e , B e S e C u r e . 31

S

pain

CounTry:

Spa

sTaTus:

cmpdduraTion:

10/9/20125/10/2012

naMe:

Ms sgdad cbca

adverT:

Csa das as acvdads q scba espaa paa ms p

d sgdad

TargeTing:

9 926 640 ss

w v Spa; agd 18 ad d; cags: scc/cg, cmp pgammg, smabsss ws, mb (a), P,riM/Backb, Add, Wdws P,s, Pad, acv a p ss cg a adps.

graph 7: response To spains aCebookCaMpaign

CaMpaign reaCh:

422 012

requenCy:

3.4

nuMber o iMpressions:

692 416

nuMber o CliCks:

85 (pg p://www.sa.pa./acvs/c/sc-m/ps/spa)

igure 7: audienCe o spains aCebookCaMpaign

Targeted 9 926 640

Reached 422 012

Clicks Actions

30

40

20

10

0

11/09 14/09 17/09 20/09 23/09 26/09 29/09 02/10

5.1.4.1.6 SPain

7/28/2019 Be Aware, Be Secure - Cyber Security

38/42

32 B e A W A r e , B e S e C u r e .

6 lsss ad

t aass daa gad gs p as w as ps cvd b pacpag cs pd da s sss ad. i add, xpc eniSA s cda eCSM was k w pmg sxcs. ts sss cd b appd eCSMs.

B d spcc adc a sagd b awass av d a mssag c aggps kwdg cca apdsg ms cv cmmcacas.

Pdc a va maa a asa ca agags pacpagcs.

Mak pss ass avaab a asa ca agags pacpagcs.

Pdc vd cps d mas d aw s tV advs.

Mak s a g sa avaabdg vs. Paca a sd bpad mb sa avaab dgwkds cmpad wkdas.

Pdc gvawas accdg sas dsb (.. -ss dsbd cd wa dd appa b a gdda).

ivv a casd mb pvacmpas cas mpac.

Da w cags pas ad kpsd pas md.

es mda cvag b pag pssbvws advac. B ppad as-m cacas.

7/28/2019 Be Aware, Be Secure - Cyber Security

39/42

B e A W A r e , B e S e C u r e . 33

7 Ccss

t daa gad ad aass cad d ccs a sv epa Cb Sc M wasa sccss p pjc. t sgcaxpc eCSMs pacpagcs ad cmmm acvgg-asg cag ma bav adpcp sks w w k msa d a sccss pjc.

t eCSM amd a bgg czs fc mpac bg sa ad sc ad asg awass niS sss.Mv, p cs cvd bsm s av b:

cdg aa sc vs aepa av cx;

casg vsb a epa v; mpvg psv pbc p abma sc;

casg cc gasgeCSM avs;vagg xsgmaa;

sag xpcs ad ma w cs ad eniSA.

Sva ms sd sccss gasa eCSM: Mmb Sas w gagd; mdas w vvd ams acs;

mda cvag was sgca b aepa ad a aa v;

eCSM bad g ad asscad vassad b cgsd.

t ccd, eniSA bvs a 2012epa Cb Sc M p pjcs sc gasa a fdgd eCSM as cm.

7/28/2019 Be Aware, Be Secure - Cyber Security

40/42

7/28/2019 Be Aware, Be Secure - Cyber Security

41/42

e ntw imt sct ac

be aware, be secure.synThesis o The resulTs o The irsT europeanCyber seCuriTy MonTh

lm: pct ofc t e u, 2012

isbn 978-92-9204-063-5: 10.2824/24665Ct nm: Tp-30-12-136-en-n

7/28/2019 Be Aware, Be Secure - Cyber Security

42/42

European Networkand InformationSecurity Agency

TP-30-12-136-EN-N

P.o. Bx 1309, 71001 hak, Gc

www.sa.pa.