European Cyber Security Month 2015 - Deployment Report

The European Cyber Security Month 2015

Deployment report

STATUS PUBLISHED VERSION V2 PUBLIC DECEMBER 2015

[Page intentionally left blank]

About ENISA

The European Union Agency for Network and Information Security (ENISA) is a centre of network and information security expertise for the EU, its member states, the private sector and Europe’s citizens. ENISA works with these groups to develop advice and recommendations on good practice in information security. It assists EU member states in implementing relevant EU legislation and works to improve the resilience of Europe’s critical information infrastructure and networks. ENISA seeks to enhance existing expertise in EU member states by supporting the development of cross-border communities committed to improving network and information security throughout the EU. More information about ENISA and its work can be found at www.enisa.europa.eu.

Authors

Daria CATALUI, Project Manager European Cyber Security Month, ENISA

Contact

For contacting the authors please use stakeholderrelations@enisa.europa.eu For media enquiries about this paper, please use press@enisa.europa.eu.

Acknowledgements

NLO network at ENISA (https://www.enisa.europa.eu/about-enisa/structure-organization/national-liaisonoffice/List_NLO.pdf); project support Vasileios Daskalakis; ENISA CERT training team;

Legal notice

Notice must be taken that this publication represents the views and interpretations of the authors and editors, unless stated otherwise. This publication should not be construed to be a legal action of ENISA or the ENISA bodies unless adopted pursuant to the Regulation (EU) No 526/2013. This publication does not necessarily represent state-of the-art and ENISA may update it from time to time.

Third-party sources are quoted as appropriate. ENISA is not responsible for the content of the external sources including external websites referenced in this publication.

This publication is intended for information purposes only. It must be accessible free of charge. Neither ENISA nor any person acting on its behalf is responsible for the use that might be made of the information contained in this publication.

Copyright Notice

© European Union Agency for Network and Information Security (ENISA), 2015 Reproduction is authorised provided the source is acknowledged.

Table of Contents

Executive Summary 5

1. Introduction 6

2. Implementation 7

Planning 7

Participation 8

Advocacy elements 9

International cooperation 11

3. Evaluation 12

The survey 12

The web analytics 15

4. Conclusions 19

Annex A: References 20

Annex B: Details from MS’ and partners regarding deployment 21

Annex C: Partners in ECSM 2015 edition 33

Annex D: Overview ECSM from feasibility to 3 full deployment 34

Executive Summary

The European Cyber Security Month (ECSM) is an EU advocacy campaign that promotes cyber security among citizens and advocates seeking to change the perception of cyber-threats by promoting education, sharing of good practices and competitions in data and information security. The European Union Agency for Network and Information Security (ENISA), the European Commission DG Connect and Partners have been deploying the ECSM each October for the last 4 years.

Highlights for 2015 edition:

 32 countries were involved in the initiative in 2015, displaying an increase from 2014 with 30 countries involved.  In total there were 242 activities encoded in the official calendar from public and private stakeholders in 32 countries. The NIS Education Map registered an increase of courses registered, currently with 417 courses in 22 countries.  The outreach on social media on the 1st of October alone, was 718,967 accounts reached. Number of visitors for www.cybersecuritymonth.eu peaked in October with 52,574 page views, with 71% corresponding to new visitors from all around Europe.  Numerous trainings for multipliers and online calls for coordinators were supported by ENISA.  The kick-off event had a global partnership organized in the presence of ITU Secretary General, general deployment with partners from the United States (such as NCSAM and DHS), and coordinators from Member States, all supported by ENISA and European Commission DG Connect.

Conclusions for the 2016 edition:

1. Member States and EU partner countries are interested in working in partnership for cyber security education. The number of countries involved reached a stable dimension with a tendency for steady growth. With this edition the maturity level was successfully attained, furthermore there is work to be followed to increase the content distribution and content co-ownership between MSs Organisations with the support of ENISA. 2. The European Commission, other EU bodies such as EESC, Agencies continued to get involved and maintain their participation at high level. The campaign created a good environment for European but also international cooperation for cyber security PPPs. 3. The community building process around the campaign is an important win. The EC, MS’ and ENISA may choose to further develop this dimension and extend its use to content distribution on cyber security education and more.

October is Cyber Security Month! Follow #CyberSecMonth #ENISA

Visit: www.cybersecuritymonth.eu

1. Introduction

The European Cyber Security Month (ECSM) is an EU advocacy campaign that promotes cyber security among citizens and advocates for change in the perception of cyber-threats by promoting, education, sharing of good practices and competitions in data and information security. The European Union Agency for Network and Information Security (ENISA), the European Commission DG Connect and Partners have been deploying the ECSM each October for the last 4 years.

The objective of this report

ECSM 2015 focused on Member States of the EU and EU partners. The project life cycle included coordinators calls, face-to-face meetings, periodic news updates, European Kick-off event, trainings and education seminars, website resources and weekly publication of materials. This report will:

1. Present the preparatory work, materials published and results achieved; 2. Carry out an objective evaluation; 3. Draw conclusions that can be used in future editions of the ECSM.

Target audience

ECSM is an annual advocacy campaign that includes both the general public , acting as ‘EU digital citizens’ and specific groups focused on Member States stakeholders from public and private organisations e.g. IT experts, NIS authorities, Education organisations, etc. The engagement model that ENISA uses is depicted in the graphic below. It represents the stakeholders that are involved in the ECSM and the way the Agency implements the brokerage role. The main contact in member states is through the National Liaison Officers- NLO network , partners from public and private organisations, and networks of multipliers.

Structure of the report

This document will present to the reader the organisational aspects of the ECSM 2015 putting things into perspective. It will refer to the motivation and concept behind the advocacy campaign, participation, and evaluation including analytics. The evaluation report of 2014 and associated recommendations were taken into account.

2. Implementation

Planning

The European Cyber Security Month 2015 benefited from planning that took into consideration recommendations from the roadmap released in the previous year. In 2015 the work programme mentions the ECSM will be further developed following its basic principles, namely: • Support the multi-stakeholder governance approach. • Encourage common public-private activities. • Assess the impact of activities, optimising and adapting to new challenges. Furthermore, in practice the planning phase consisted of an extensive consultation with stakeholders like the Commission, NLO network, and international partners in order to come up with a consolidated version that anyone could easily follow. The campaign partners followed the planning depicted in the graph below which it was updated periodically and communicated to the community. Regarding the management of the communication process, all feedback, issues and ideas were tackled in a tailored manner to fit the needs and purposes of organisations involved.

Participation

The European Cyber Security Month fully fledged version was implemented for the 3rd consecutive year after a pilot and feasibility study . With the occasion of the launch, the following statements were made.

Vice-President Ansip, in charge of the Digital Single Market, has been quoted to say: "Security against cyber-attacks has become central to consumer confidence and the online economy. But we cannot get the best out of the opportunities offered by digital tools and online networks if we do not trust them. Raising awareness of the risks and threats, and the fact that cybersecurity is a shared responsibility, is vital so that when they are online, people can make better informed choices and guard against risks".

Commissioner Oettinger, in charge of the Digital Economy and Society, suggested: "To make the digital world a secure place for everyone, we all have to contribute: policy makers, research, industry, citizens. But for Europeans to fully enjoy the benefits of a safe Internet, they also need to be aware of the risks they face online and to know how they can to play an active role for their own security in their daily lives. The European Cybersecurity Month is a great opportunity to spread good practices and increase the overall level of awareness and thus of cybersecurity in the EU".

ENISA’s Executive Director, Prof. Udo Helmbrecht, has noted: “As our societies are continuously being digitised and we are moving in the era of IoT and smart cities, e-skills and online security are essential resources that need to be developed and continuously enhanced. The Agency is developing an entire Network and Information Security (NIS) community around the Cyber Security Month initiative."

Action! Happening during October

ECSM run for the entire month of October, with each week focusing on a different topic. Each week, ENISA published new material. Partners organized activities with focus on training, strategy summits, general presentations to users, online quizzes, etc.

1st week – October 1-4: Cyber security training for employees

2nd week – October 5-11: Creating a Culture of Cybersecurity at Work

3rd week – October 12-18: Code Week for all

4th week – October 19-25: Understanding Cloud solutions for all

5th week – October 26-31: Digital Single Market for all

ECSM 2015 ran in Austria, Belgium, Bulgaria, Cyprus, Croatia ,Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Poland, Portugal, Slovenia, Slovakia, Sweden, Spain, Romania, the United Kingdom; and Iceland, Moldova, Norway, Serbia, also for the first time in Turkey.

Advocacy elements

 The website: www.cybersecuritymonth.eu was used as a one-stop-shop for citizens to look for information and the place for ECSM coordinators to update details about activities taking place at the local and national level. The web management was done by ENISA, but MS’ Coordinators retained full control and responsibility for their content.  The message was shared among partners: “Cyber Security is a shared responsibility!”  The weekly topics were communicated in all media / broadcasters.  Visual material and content were disseminated in 23 EU languages.  Cyber security Ambassadors shared their motivation to work in this field.  The common planning as presented in section 2.1.

In regards to the enhanced content of the 2015 edition, the Agency coordinated the release of the deliverables focused on the EU citizens’ eSkills update according to the weekly topics. The full details in the table below.

International cooperation

The coordination team had a constructive dialogue with US partners, NCSAM and DHS, and managed to continue the development of common activities such as:

 The message ‘Creating a Culture of Cyber Security at Work’, second week of the European Cyber Security Month running through October, was shared at international level, with the US National Cyber Security Month-NCSM.  US National Cyber Security Month-NCSM representative in the Kick-off event of ECSM in Brussels.  International Twitter chat on tips to follow for NIS security, follow the chat text by hashtags #CyberSecMonth and #ChatSTC.  The publication of “Mobile Tips” for users, important to mention that this common actions is already at the third consecutive edition.  An ‘Awareness Calendar’ was launched for use in organizations and users all over the world. A common effort, from all participating partners: US National Cyber Security Month, ITU and the European Cyber Security Month by ENISA with many partners from the Member States. Calendar below.

3. Evaluation

The direct beneficiaries of the results of this work are the EU citizens, targeted by different categories, as well as end user organisations from public and private sectors (in particular in the area of EU NIS education). These stakeholders were expected to reap the following benefits: • Develop knowledge and corresponding ICT skills by being part of a best practice sharing community. • Improve and enhance contacts with stakeholders of similar interests and profiles. • Increase citizens’ awareness and governance on privacy when using online tools. The metrics analysed in comparison between 2014 vs 2015 shown a consolidation of the campaign in terms of outreach and content. Comparison in numbers 2014 vs 2015 as following:  Countries involved 2014: 30; 2015: 32  Twitter followers 2014: 2223; 2015: 3605  Materials published 2014: 5 general and 2 tools; 2015: updated 2 tools& published 5 general;  Activities taken place: 2014: more than 184; 2015: 242

The survey

The survey was an important tool to measure the impact in the 2014 edition and it was used again in the 2015 edition. The survey was sent only to the ECSM community consisting of contact points- coordinators and focused on the similar questions as in 2014. The charts below present their replies. We would like to add that the 2015 survey had 24 replies.

In regards to the messages left by the respondents most of them mention:  Improvements: 1.The website improvement regarding the display map and events edit (Here the specific issues encountered in 2015 to be solved for 2016 are web form automation and easy edit by the data owner, standardized display of location not based on clustering and with possibility to give minimum details); 2. Advance planning starting maybe the previous year ( By the time of the publication of this report, the advance planning for 2016 already took place by means of face-toface meeting – 5.11 seminar in Vienna and call on 1.12 concluding with an agreement on a common calendar); 3. Provide printed materials if possible; 4. Introduce new activities e.g. exhibitions;  Messages were also pointing to the need of such a campaign:

“Overall the campaign is very well organized and the demand for it is deeply needed.”

“Please continue this great initiative!”

“Keep up the good work!”

In conclusion, 87.5% in 2015 rated the campaign as being positive; 87.5% estimated that ECSM supports their outreach and promotion work; 66.67% consulted ENISA material; 91.64% intend to participate in a future edition. Also the twitter interactions increased to 70.83% in 2015. In terms of solutions offered for

issues 62.5% answered positively, however here we note also a 37.5% negative rate caused by website automation flows which are the main point to improve in 2016.

The replies reflect the consolidation of the campaign and at the same time they report similarities with the results obtained in the 2014 survey published in the respective report. Some points to be taken into account:

- The European Cyber Security Month brings added value to stakeholders involved and there is a clear statement of continuation for their part;

- The coordination team responded to the needs of the coordinators;

- ENISA publications are used as content for the activities happening in countries;

- Communication registered an uptake in terms of social media channels.

The web analytics

We present below some other graphs regarding the use of the website www.cybersecuritymonth.eu , twitter reach and map with geographical spread of the activities. The outreach on social media was of 718,967 accounts. Number of visitors for www.cybersecuritymonth.eu picked in October with 52,574 page views, with 71% corresponding to new visitors from all around Europe.

• Country statistics: users from the countries below visited the most the website:

 Website sessions during the period 24.09- 3.11.2015; it is important to be mentioned that 71% were new visits showing a better outreach and increase compared with last year (web sessions in 2014 12.000 vs 15.000 in 2015);

 Twitter performance 709,193 accounts reached/ 821,982 impressions in 2014 vs 718,967 accounts reached/ 906,060 impressions in 2015

 Media reach as following, approximate 40,000,000 online reach by media in 2014 vs close to 60,000,000 online reach in 2015:

4. Conclusions

ENISA is committed to continue supporting the European Cyber Security Month and will encourage the active involvement of Member States organisations in the coordination and deployment.

From the deployment of the 2015 edition, the following should be emphasized regarding outcomes:

1. Member States and EU partner countries are interested in working in partnership on cyber security education. The number of countries involved reached a stable dimension with a tendency for steady growth. With this edition the maturity level was successfully attained, furthermore there is work to be followed to increase the content distribution and content co-ownership between MS’ organisations with the support of ENISA. 2. The European Commission, other EU bodies such as EESC, Agencies continued to get involved and maintain their participation at high level. The campaign created a good environment for European but also international cooperation for cyber security PPPs. 3. The community building process around the campaign is an important win. The EC, MSs and ENISA may choose to further develop this aspect and extend its use to content distribution on cyber security education and more.

The European Cyber Security Month had developed a model of engagement that makes possible a multistakeholder governance approach, main benefits being reaching to a large number of European citizens through numerous activities organised by stakeholders. ECSM will be further developed following its basic principles, namely:

• Support the multi-stakeholder governance approach.

• Encourage common public-private activities.

• Assess the impact of activities, optimising and adapting to new challenges.

Building together a joint EU advocacy campaign on Cyber Security topics!

Annex A: References

[1] www.cybersecuritymonth.eu [2] www.enisa.europa.eu [3] "An Open, Safe and Secure Cyberspace" EU Cyber Security Strategy http://ec.europa.eu/information_society/newsroom/cf/dae/document.cfm?doc_id=1667 [4] ENISA Work Programme 2016 https://www.enisa.europa.eu/publications/programmes-reports/enisa-workprogramme-2016

Annex B: Details from MS’ and partners regarding deployment

 From Belgium, Germany, Greece, Hungary, Ireland, Luxembourg, Norway, Poland, Portugal, Romania, Slovenia and Spain.

Annex C: Partners in ECSM 2015 edition

rd

Annex D: Overview ECSM from feasibility to 3 full deployment

ENISA

European Union Agency for Network and Information Security Science and Technology Park of Crete (ITE) Vassilika Vouton, 700 13, Heraklion, Greece

Athens Office

1 Vass. Sofias & Meg. Alexandrou Marousi 151 24, Athens, Greece

PO Box 1309, 710 01 Heraklion, Greece Tel: +30 28 14 40 9710 info@enisa.europa.eu www.enisa.europa.eu