The Industrial Cybersecurity Center in Poland

Team

Piotr Jasinski

Piotr is MSc in Industrial Automation and has gained 15-year experience in industrial sector in areas like operations, OT systems maintenance, ICS implementation, project leading, pre-sales and sales as well as consulting OT systems/ICS implementations for national and multinational customers in- and outside Europe. For many years, he worked in Schneider Electric Automation Solution Centre […]

Marcin Dudek

IT and OT security expert, focused on industrial devices vulnerability research. A graduate of the University of Warwick in the field of Cyber Security and Management. He worked for multiple companies, including Polish Gas and Oil Company, National Center for Nuclear Research (NCBJ), and ComCERT.PL delivering IT and OT incident response related services. Founder of […]

Maite Carli García

Maite Carli is Communication Manager and General European Coordinator at the Industrial Cybersecurity Center. Specialized in administration of networks and communications, industrial critical infrastructures, industry 4.0, data analysis technologies in the Health sector and industrial cybersecurity, having done several advanced courses and a master. She has developed her professional career in the United Kingdom for […]

Mr. Marcin Dudek, the Industrial Cibersecurity Center Coordinator in Poland (CCI Coordinators Team), helps us to get in context of the state of the industrial cybersecurity in his country, and to do so, he shares with us his impressions.

He describes the level of sensitivity of industrial organizations in his country according to the following percentages:

He also affirms that the trend of recent years has been an exponentially grown.

Poland counts with local and national public bodies promoting an adequate legal framework, in order to ensure the progressive incorporation of industrial cybersecurity measures in national presence companies (mainly critical infrastructure). The main organizations are:

  • CERT ABW
  • CERT NASK
  • RCB

Among the main national laws and regulations affecting in this context in Poland, Marcin Dudek mentions:

  • Act on the National Cyber Security System (Dz.U. 2018 poz. 1560)
  • National Critical Infrastructure Protection Program

Analysing the most widely adopted industrial cybersecurity measures by Polish organizations to protect industrial automation systems, Marcin Dudek highlights the application of:

  • Industrial cybersecurity consulting / advisory
  • Conventional firewalls
  • SIEM (Security information and event management)

The CCI Coordinator in Poland characterizes the industrial cybersecurity situation in his country with the following SWOT analysis:

Weaknesses

  • Lack of operational technologies certifications, processes and professionals

  • Lack of specific industry cybersecurity legislation

  • Lack of events and forums on industrial cybersecurity

Strengths

  • Awareness, especially regarding industrial critical infrastructures

  • Increase of Industrial cyber security trained professionals

Threats

  • Slow legislation

  • Shortage of local industrial cybersecurity professionals working for manufacturers

  • High dependency on foreign high technologies

Opportunities

  • Increased of cibersecurity demand for Industry 4.0 and the Internet of things.

  • Advantage with the lessons learned from smart grid cibersecurity.

  • Strategic position in the industrial cyber security sector

Activities

XVI International Congress of experiences in Industrial Cybersecurity. Europe

As a fundamental part of its activity, the Industrial Cybersecurity Center (CCI) will hold its XVI Industrial Cybersecurity International Congress in Europe from September 28th to 30th (9:00 to 14:00 CEST), one of the benchmark events for the European market, and a meeting and exchange point of knowledge, experiences and relationships of all the actors […]

CERT's and CSIRT's from this Country

Argentina

CSIRT NQN

Sitio webWebsite View feed

Argentina

CSIRT Córdoba

Argentina

CERTUNLP

  • Academic
  • Ámbito de aplicaciónScope: IT

Academic Security Incident Response Centre (CSIRT) of the National University of La Plata

Argentina

BA-CSIRT

CSIRT for end users, Cybersecurity Centre of the Government of the Autonomous City of Buenos Aires

Argentina

Cert.ar

Austria

CERT.at

Bahamas

CIRT BS

Sitio webWebsite View feed

Belgium

CERT.BE

Sitio webWebsite View feed

Brazil

CTIR Gov

Centre for Prevention, Treatment and Response to Government Cyber Incidents

Brazil

CERTbr

Sitio webWebsite View feed

Canada

Cyber Centre

Chile

CSIRT Nacional

Article 24 of Law No. 21,663 creates within the National Cybersecurity Agency the National Computer Security Incident Response Team.

Sitio webWebsite View feed

Chile

CSIRT REUNA

  • Academic
  • Ámbito de aplicaciónScope: IT

Chile

CLCERT

  • Academic
  • Ámbito de aplicaciónScope: IT

Colombia

Min Defensa – Policia

  • Government
  • Ámbito de aplicaciónScope: Militar Military

Colombia

CSIRT‑CCIT

Colombia

colCERT

Croatia

CERT.hr

Sitio webWebsite View feed

Cuba

CSIRT-BCF

  • Private
  • Ámbito de aplicaciónScope: IT

Cuba

OSRI

Denmark

Airbus Protect CSIRT

  • OT, Private
  • Ámbito de aplicaciónScope: OT

Denmark

DKCERT

Sitio webWebsite View feed

Ecuador

CSIRT UTPL

  • Academic
  • Ámbito de aplicaciónScope: IT

Ecuador

CSIRT CEDIA

  • Academic
  • Ámbito de aplicaciónScope: IT

Ecuador

EcuCERT

Estonia

EDF CIRC

Sitio webWebsite View feed

Estonia

CERT‑EE

Sitio webWebsite View feed

European Union

ENISA CSIRT Network

The European Union CSIRTs network is a network composed of EU Member States’ appointed CSIRTs and CERT-EU (“CSIRTs network members”). The European Commission participates in the network as an observer.

European Union

EGI CSIRT

European Union

ESA CERT

European Union

EATM‑CERT

European Union

CERT‑EU

Finland

NCSC‑FI

France

PSIRT Scheneider Electric

  • OT, Private
  • Ámbito de aplicaciónScope: OT

France

ENGIE CERT

  • Private
  • Ámbito de aplicaciónScope: IT

France

CERT‑FR

Sitio webWebsite View feed

Germany

PSIRT Siemens

  • OT, Private
  • Ámbito de aplicaciónScope: OT

Guatemala

GT Cert

CERT coordinator of the Republic of Guatemala, covered by the regulatory framework of the Law Against Cybercrime and recognised by FIRST

Honduras

CSIRT_HONDURAS

Italy

Enel CERT

  • Private
  • Ámbito de aplicaciónScope: IT

Jamaica

JaCIRT

Sitio webWebsite View feed

Latvia

CERT.LV

Mexico

UNAM‑CERT

  • Academic
  • Ámbito de aplicaciónScope: IT

Mexico

CERT-MX

Sitio webWebsite View feed

Netherlands

NCSC‑NL

Sitio webWebsite View feed

Norway

NSM‑NCSC

Sitio webWebsite View feed

Panama

CertPA

Sitio webWebsite View feed

Paraguay

CERT-PY

Peru

PeCERT

Poland

CERT.PL

Sitio webWebsite View feed

Portugal

Euronext CSIRT

  • Private
  • Ámbito de aplicaciónScope: IT

Portugal

CNCS Portugal

Republica Dominicana

CSIRT-RD

CSIRT belonging to the National Cybersecurity Centre

Romania

CERT.RO

Sitio webWebsite View feed

Slovakia

ENERGOTEL.SK-CSIRT

  • Private
  • Ámbito de aplicaciónScope: IT

Slovakia

SK‑CERT

Sitio webWebsite View feed

Slovenia

SI‑CERT

Sitio webWebsite View feed

Spain

CSIRT-MIR-PJ

Spain

CSIRT-CV

Spain

INCIBE-CERT

Spain

CSIRT.gal

Spain

CCN‑CERT

Sitio webWebsite View feed

Surinam

SUR-CSIRT

Sitio webWebsite View feed

Sweden

CERT‑SE

Sitio webWebsite View feed

Swiss

PSIRT ABB

  • OT, Private
  • Ámbito de aplicaciónScope: OT
Sitio webWebsite View feed

Swiss

Swiss GovCERT

Sitio webWebsite View feed

Trinidad and Tobago

TT-CSIRT

Sitio webWebsite View feed

Ukraine

CERT‑UA

Sitio webWebsite View feed

United Kingdom

UK NCSC

United States

US-CERT OT Cybersecurity

United States

US-CERT Cybersecurity

Uruguay

CSIRT ANTEL

  • Private
  • Ámbito de aplicaciónScope: IT

Uruguay

Cert.uy

Venezuela

VenCERT

Patrocinadores del Centro en el País

Bronze