national information technology center (nitc) security ... · the national information technology...
TRANSCRIPT
![Page 1: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/1.jpg)
National Information Technology Center
(NITC)
Security Services
![Page 2: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/2.jpg)
Introduction
The National Information Technology Center wasestablished in 2003 in accordance with the temporarylaw No.(81) for 2003 entitled ”Deployment ofInformation Technology Resources in GovernmentOrganization Law”. NITC was restructured accordinglyand it became an independent governmentorganization managed by a board of directors chairedby the Minister of the Ministry of Information andCommunication Technology
2
![Page 3: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/3.jpg)
Vision
NITC is the primary arm for utilizing the nationalIT resources of the public sector and maximizeits contribution to economic growth and welfareof Jordan.
3
![Page 4: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/4.jpg)
Mission
To play the role of the CTO of the government inall matters including the procurement,deployment, utilization, standardization, andbudgeting of IT resources including thehardware, software, human, information, andprocess resources.
4
![Page 5: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/5.jpg)
Objectives and Tasks
• Providing a key base of information at the national level, compiled, and software development on the use of an integrated national system of information.• Conducting studies and surveys and research related to the needs of government institutions and uses of information technology resources.• Managing and exclusively registering national internet domain (.jo) and specifying the amount the fees for services charged by NITC according to the instructions
issued by the council for this purpose.
5
![Page 6: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/6.jpg)
Objectives and Tasks
• Preparation of plans and programs for training and qualifying government staff on the use of information technology resources.• Publication and distribution of publications related to the development and use of information technology resources.• Providing consultations in the areas of information technology resources, software and specifications.• Participation in conferences, seminars, scientific meetings, workshops, local and external meetings related to the objectives of NITC.
6
![Page 7: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/7.jpg)
Objectives and Tasks
• Any other duties related to the objectives of NITC assigned by HE the Minister.• Implementation of plans and programs that NITC may be assigned to, in accordance to strategic assessments.• Providing, managing and operating any of the information technology resources in accordance with strategies, plans and programs, or by a decision of the Minister under an agreement with any of the relevant government institutions, provided the mandate or agreement is specific and in writing.• Issuing technical specifications for the management and operation of technology in ministries and government institutions and other international organizations
7
![Page 8: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/8.jpg)
NITC Services
• INTERNET.
• WEB and MAIL HOSTING.
• DOMAIN NAME SYSTEM.
• E-GOVERNMENT OPERATION CENTER.
• KNOWLADGE STATIONS PROGRAM.
• Security Services
• Others
8
![Page 9: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/9.jpg)
NITC Security Services
• NITC has a de-facto role in securing the cyberspace of the Government of Jordan.
9
![Page 10: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/10.jpg)
What did we Achieved
• Security department deployed in the Organization Structure of the NITC in 2011
• The department has a clear mission:
“Securing NITC and its Services”
• The need, broaden the mission to securing the government services and procedures as possible.
10
![Page 11: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/11.jpg)
NITC Security Services
• Capacity Building: the human factor is a key.
• Many specialized courses were prepared for the team.
• CEH, ISO, Penetration Testing, CISSP, …etc.
11
![Page 12: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/12.jpg)
NITC Security Services• Genius…
12
![Page 13: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/13.jpg)
NITC Security Services
• Laws, Strategies and Policies
• Information Systems Crimes Act
– http://nitc.gov.jo/PDF/Law.pdf
• National Information Assurance and Cyber Security Strategy
– http://nitc.gov.jo/PDF/NIACSS.pdf
• National information Security Policies
– http://nitc.gov.jo/PDF/SiC.pdf
13
![Page 14: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/14.jpg)
Daily Work
• Penetration Testing for NITC Services.
• Malware detection.
• Risk Assessment for governmental entities.
• Awareness.
• Incident Response.
• Forensics.
14
![Page 15: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/15.jpg)
Challenges
Budget
Open Source Tools
In-House Development
15
![Page 16: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/16.jpg)
Challenges
Resources
Prioritization Overtimes
16
![Page 17: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/17.jpg)
CIRT
• CIRT unit was initiated (Org. Structure)in July 2014.
• NITC is building up the capacity for the team. • Implementation plan is ready.• Online site will be available very Soon.• Current Security Team handling the tasks of
the CIRT.
17
![Page 18: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/18.jpg)
CIRT
JoCIRT
2015 2016 2017
• CIRT Enabled• CIRT Online Site• Team Capacity Building• Introducing CIRT
Services to the Governmental Entities
• Enhance the Services• Enhance the
international cooperation.
• Introduce the Services to CNI Entities
• Enhance the Services• Introduce the Services
to the Citizens and the Private Sector.
18
![Page 19: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/19.jpg)
PKI
• National Trust Model, based on a Public Key Infrastructure (PKI) providing a secure method of generating legally binding electronic signatures for government employees, citizens, and other entities.
19
![Page 20: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/20.jpg)
From Our Experience
Better Security
Awareness
VisibilityExperience
20
![Page 21: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/21.jpg)
For the Region
• Awareness: Adoption of intensive awareness programs
• Expertise: Capacity Building
• Visibility: Go Deep and monitor more.
• Looking for Regional
Programs?
21
![Page 22: National Information Technology Center (NITC) Security ... · The National Information Technology Center was established in 2003 in accordance with the temporary law No.(81) for 2003](https://reader033.vdocument.in/reader033/viewer/2022050209/5f5bff791fd072734e20b921/html5/thumbnails/22.jpg)
مركز تكنولوجيا المعلومات الوطني
+(962( )6)5300222:هاتف
+(962( )6)5300277:فاكس [email protected]:بريد الكتروني
(11941)الجبيهة -( 259):ب.ص
Thank You
22