State Information Security Policy (Comparative Legal Aspect)
Palabras clave:
pandemia Covid-19, ciberdelincuencia, índice de ciberseguridad global, espacio de información global, seguridad de la información
Resumen
El rápido desarrollo de la tecnología de la información y el problema de su implementación en todas las esferas de la vida pública, la creciente importancia de la información y un nuevo formato de medios: estos y otros factores impulsan el problema del desarrollo de la investigación, implementar una política de seguridad de la información del estado de calidad. El objetivo del artículo fue realizar un análisis comparativo de las últimas prácticas de mejora de las políticas de seguridad de la información pública en la Unión Europea, así como en países como: Polonia, Alemania, Gran Bretaña y Ucrania. Las técnicas de lógica formal, estructura de sistemas y teoría de problemas fueron las principales herramientas metodológicas. El análisis de los actos legales regulatorios mostró que existe un concepto único de seguridad de la información internacional a nivel global y regional, que requiere de instrumentos legales adicionales para su implementación. Se concluye que la reforma de las políticas nacionales de seguridad de la información tiene un impacto directo en la formación de un único espacio global de información. Según los resultados del estudio, se corrobora que Reino Unido se caracteriza por tener la política de seguridad de la información más prometedora.
Descargas
La descarga de datos todavía no está disponible.
Citas
ADMINISTRATION OF THE PRESIDENT OF UKRAINE. 2017. Decision of the National Security and Defense Council of Ukraine of December 29, 2016 On the Doctrine of Information Security of Ukraine. Entered into force by the Decree of the President of Ukraine of February 25, 2017 № 47/20172016. Available online. In: https://www.president.gov.ua/
documents/472017-21374. Consultation date: 21/01/2021.
ADONIS, Abid A. 2019. International law on cyber security in the age of digital sovereignty. Available online. In: https://www.e-ir.info/2020/03/14/ international-law-on-cyber-security-in-the-age-of-digital-sovereignty/. Consultation date: 18/01/2021.
BONDARENKO, Roman; MIKHALCHUK, Vasyl. 2021. “Informational security of the state” In: Investytsiyi: Praktyka ta Dosvid. Vol. 5, pp. 95–101.
CATTANEO, Gabriella; MICHELETTI, Giorgio; GLENNON, Mike; LA CROCE, Carla; MITTA, Chrysoula. 2020. The European Data Market Monitoring Tool Key Facts & Figures, First Policy Conclusions, Data Landscape and Quantified Stories. D2.9 Final Study Report. European Commission. Brussels.
COCO, Antonio; DE SOUZA DIAS, Talita. 2020. “States’ due diligence duties vis-à-vis the COVID-19 pandemic. Prevent, respond, cooperate” In: Journal of International Humanitarian Legal Studies. Vol. 11, No. 2, pp. 218-236.
DEPARTMENT FOR DIGITAL, CULTURE, MEDIA & SPORT OF THE UNITED KINGDOM. 2020. National data strategy. Policy paper. Available online. In: https://www.gov.uk/government/publications/uk- national-data-strategy/national-data-strategy#fn:1. Consultation date: 21/01/2021.
EUROPEAN COMMISSION. 2018. Commission Implementing Regulation (EU) 2018/151 of 30 January 2018 laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact. Available online. In: https:// eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32018R0151. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002a. Directive 2002/21/EC of the European Parliament and of the Council of 7 March 2002 on a common regulatory framework for electronic communications networks and services (Framework directive). Available online. In: https://eur-lex.europa.eu/legal-content/ en/ALL/?uri=CELEX%3A32002L0021. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002b. Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=CELEX%3A32002L0058. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2013. Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Decision 2005/222/JHA. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=celex%3A32013L0040. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016a. Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union. Available online. In: https://eur-lex.europa.eu/legal-content/ EN/TXT/?uri=celex:32016L1148. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). Available online. In: https://eur-lex.europa.eu/eli/ reg/2016/679/oj. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2018. Directive (EU) 2018/1972 - adopted by the European Union in December 2018 - setting up a European Electronic Communications Code. It established common EU rules and objectives on regulating the telecom industry and defines how providers of networks and/or services can be regulated by national authorities. Available online. In: https://www.europeansources.info/record/directive-eu-2018- 1972-establishing-the-european-electronic-communications-code/. Consultation date: 21/01/2021.
FEDERAL GOVERNMENT OF GERMANY. 2021. The cyber security strategy for Germany 2021. Available online. In: https://www.bundesregierung. de/breg-en/news/new-cyber-security-strategy-1958688. Consultation date: 10/10/2021.
FUTTER, Andrew. 2020. What Does Cyber Arms Control Look Like? Four Principles for Managing Cyber Risk. Global Security Policy Brief. European Leadership Network. London, UK.
IKEDA, Kazuaki; MARSHALL, Anthony; ZAHARCHUK, Dave. 2019. “Agility, skills and cybersecurity: Critical drivers of competitiveness in times of economic uncertainty” In: Strategy & Leadership. Vol. 47, No. 3, pp. 40- 48.
INTERNATIONAL TELECOMMUNICATION UNION. 2020. Global cybersecurity index. Available online. In: https://www.itu.int/ epublications/publication/global-cybersecurity-index-2020/en/. Consultation date: 21/01/2021.
LALLIE, Harjinder Singh; SHEPHERD, Lynsay A; NURSE, Jason C; EROLA, Arnau; EPIPHANIOU, Gregory; MAPLE, Carsten; BELLEKENS, Xavier. 2021. “Cyber security in the age of covid-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic” In: Computers & Security. Vol. 105, Art. 102248.
LEE, Jae Kyu; CHANG, Younghoon; KWON, Hun Yeong; KIM, Beopyeon. 2020. “Reconciliation of privacy with preventive cybersecurity: the bright internet approach” In: Information Systems Frontiers. Vol. 22, pp. 45–57.
LOMAS, Natasha. 2020. UK wants pandemic levels of data sharing to be the new normal. Available online. In: https://techcrunch.com/2020/09/09/ uk-wants-pandemic-levels-of-data-sharing-to-be-the-new-normal/. Consultation date: 21/01/2021.
MANTELERO, Alessandro. 2018. “AI and big data: A blueprint for a human right, social and ethical impact assessment” In: Computer Law & Security Review. Vol. 34, No. 4, pp. 754–772.
MINISTRY OF CULTURE AND INFORMATIONAL POLICY OF UKRAINE. 2021, The government approved the informational security strategy till 2025. Available online. In: https://www.kmu.gov.ua/news/uryad- shvaliv-strategiyu-informacijnoyi-bezpeki-do-2025-roku. Consultation date: 10/10/2021.
OLEJNIK,Lukasz.2021.Thedirepossibilityofcyberattacksonweaponssystems. Available online. In: https://www.wired.com/story/dire-possibility- cyberattacks-weapons-systems/. Consultation date: 05/10/2021.
PATRICK, Anthony. 2021. “Streaming the battlefield: a theory of the internet’s effect on negotiation onset” In: Journal of Advanced Military Studies. Vol. 12, No. 1, pp. 181-195.
SCROXTON, Alex. 2020. EU security strategy a ‘step up’ on cyber leadership. Available online. In: https://www.computerweekly.com/ news/252493802/EU-security-strategy-a-step-up-on-cyber-leadership- says-Brussels. Consultation date: 21/01/2021.
SHAFQAT, Narmeen; MASOOD, Ashraf. 2016. “Comparative analysis of various national cyber security strategies” In: International Journal of Computer Science and Information Security. Vol. 14, No. 1, Art. 129.
SUN, Liyuan; ZHANG, Hongyun; FANG, Chao. 2021. “Data security governance in the era of big data: status, challenges, and prospects” In: Data Science and Management. Vol. 2, pp. 41-44.
TECH NATION. 2020. UK tech sector beats both US and China to lead global growth in 2019. Available online. In: https://technation.io/news/2019- a-record-year-for-uk-tech/. Consultation date: 21/01/2021.
TVERDOKHLIB, Oleksandr. 2021. “Fundamental principles of public policy strategy in the conditions of the latest threats and challenges for the information space of Ukraine” In: Journal of Research Papers of the National Academy for Public Administration under the President of Ukraine. Vol. 1, pp. 113-120.
UNITED NATIONS. 2003. Resolution adopted by the General Assembly on 23 December 2003. 58/199. Creation of a global culture of cybersecurity and the protection of critical information infrastructures. Available online. In: https://undocs.org/en/A/RES/58/199. Consultation date: 21/01/2021.
UNITED NATIONS. 2020. United Nations’ secretary-general’s high-level panel on digital cooperation. Available online. In: https://www.un.org/en/sg- digital-cooperation-panel. Consultation date: 18/01/2021.
UNITED NATIONS. 2021. United Nations secretary-general. Road map for digital cooperation: Implementation of the recommendations of the High-Level Panel on Digital Cooperation Report of the Secretary-General (A/74/821). Available online. In: https://www.un.org/en/content/ digital-cooperation-roadmap/. Consultation date: 10/10/2021.
ZAGÓRSKI, Marek. 2019. Cybersecurity Strategy of the Republic of Poland for 2019 – 2024. Ministry of Digital Affairs of the Republic of Poland. Warsaw, Poland.
ZAKHARENKO, Kostyantyn. 2019. “Factors of implementation of the state information policy of Ukraine” In: Regional Studies. Vol. 17, pp. 15-19.
ZAKHARENKO, Kostyantyn. 2020. “Openness of information space and control over the availability of information” In: The Bulletin of the Vasyl Stefanyk Precarpathian National University. Series: Polithology. Vol. 14, pp. 46-55.
documents/472017-21374. Consultation date: 21/01/2021.
ADONIS, Abid A. 2019. International law on cyber security in the age of digital sovereignty. Available online. In: https://www.e-ir.info/2020/03/14/ international-law-on-cyber-security-in-the-age-of-digital-sovereignty/. Consultation date: 18/01/2021.
BONDARENKO, Roman; MIKHALCHUK, Vasyl. 2021. “Informational security of the state” In: Investytsiyi: Praktyka ta Dosvid. Vol. 5, pp. 95–101.
CATTANEO, Gabriella; MICHELETTI, Giorgio; GLENNON, Mike; LA CROCE, Carla; MITTA, Chrysoula. 2020. The European Data Market Monitoring Tool Key Facts & Figures, First Policy Conclusions, Data Landscape and Quantified Stories. D2.9 Final Study Report. European Commission. Brussels.
COCO, Antonio; DE SOUZA DIAS, Talita. 2020. “States’ due diligence duties vis-à-vis the COVID-19 pandemic. Prevent, respond, cooperate” In: Journal of International Humanitarian Legal Studies. Vol. 11, No. 2, pp. 218-236.
DEPARTMENT FOR DIGITAL, CULTURE, MEDIA & SPORT OF THE UNITED KINGDOM. 2020. National data strategy. Policy paper. Available online. In: https://www.gov.uk/government/publications/uk- national-data-strategy/national-data-strategy#fn:1. Consultation date: 21/01/2021.
EUROPEAN COMMISSION. 2018. Commission Implementing Regulation (EU) 2018/151 of 30 January 2018 laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact. Available online. In: https:// eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32018R0151. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002a. Directive 2002/21/EC of the European Parliament and of the Council of 7 March 2002 on a common regulatory framework for electronic communications networks and services (Framework directive). Available online. In: https://eur-lex.europa.eu/legal-content/ en/ALL/?uri=CELEX%3A32002L0021. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002b. Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=CELEX%3A32002L0058. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2013. Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Decision 2005/222/JHA. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=celex%3A32013L0040. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016a. Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union. Available online. In: https://eur-lex.europa.eu/legal-content/ EN/TXT/?uri=celex:32016L1148. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). Available online. In: https://eur-lex.europa.eu/eli/ reg/2016/679/oj. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2018. Directive (EU) 2018/1972 - adopted by the European Union in December 2018 - setting up a European Electronic Communications Code. It established common EU rules and objectives on regulating the telecom industry and defines how providers of networks and/or services can be regulated by national authorities. Available online. In: https://www.europeansources.info/record/directive-eu-2018- 1972-establishing-the-european-electronic-communications-code/. Consultation date: 21/01/2021.
FEDERAL GOVERNMENT OF GERMANY. 2021. The cyber security strategy for Germany 2021. Available online. In: https://www.bundesregierung. de/breg-en/news/new-cyber-security-strategy-1958688. Consultation date: 10/10/2021.
FUTTER, Andrew. 2020. What Does Cyber Arms Control Look Like? Four Principles for Managing Cyber Risk. Global Security Policy Brief. European Leadership Network. London, UK.
IKEDA, Kazuaki; MARSHALL, Anthony; ZAHARCHUK, Dave. 2019. “Agility, skills and cybersecurity: Critical drivers of competitiveness in times of economic uncertainty” In: Strategy & Leadership. Vol. 47, No. 3, pp. 40- 48.
INTERNATIONAL TELECOMMUNICATION UNION. 2020. Global cybersecurity index. Available online. In: https://www.itu.int/ epublications/publication/global-cybersecurity-index-2020/en/. Consultation date: 21/01/2021.
LALLIE, Harjinder Singh; SHEPHERD, Lynsay A; NURSE, Jason C; EROLA, Arnau; EPIPHANIOU, Gregory; MAPLE, Carsten; BELLEKENS, Xavier. 2021. “Cyber security in the age of covid-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic” In: Computers & Security. Vol. 105, Art. 102248.
LEE, Jae Kyu; CHANG, Younghoon; KWON, Hun Yeong; KIM, Beopyeon. 2020. “Reconciliation of privacy with preventive cybersecurity: the bright internet approach” In: Information Systems Frontiers. Vol. 22, pp. 45–57.
LOMAS, Natasha. 2020. UK wants pandemic levels of data sharing to be the new normal. Available online. In: https://techcrunch.com/2020/09/09/ uk-wants-pandemic-levels-of-data-sharing-to-be-the-new-normal/. Consultation date: 21/01/2021.
MANTELERO, Alessandro. 2018. “AI and big data: A blueprint for a human right, social and ethical impact assessment” In: Computer Law & Security Review. Vol. 34, No. 4, pp. 754–772.
MINISTRY OF CULTURE AND INFORMATIONAL POLICY OF UKRAINE. 2021, The government approved the informational security strategy till 2025. Available online. In: https://www.kmu.gov.ua/news/uryad- shvaliv-strategiyu-informacijnoyi-bezpeki-do-2025-roku. Consultation date: 10/10/2021.
OLEJNIK,Lukasz.2021.Thedirepossibilityofcyberattacksonweaponssystems. Available online. In: https://www.wired.com/story/dire-possibility- cyberattacks-weapons-systems/. Consultation date: 05/10/2021.
PATRICK, Anthony. 2021. “Streaming the battlefield: a theory of the internet’s effect on negotiation onset” In: Journal of Advanced Military Studies. Vol. 12, No. 1, pp. 181-195.
SCROXTON, Alex. 2020. EU security strategy a ‘step up’ on cyber leadership. Available online. In: https://www.computerweekly.com/ news/252493802/EU-security-strategy-a-step-up-on-cyber-leadership- says-Brussels. Consultation date: 21/01/2021.
SHAFQAT, Narmeen; MASOOD, Ashraf. 2016. “Comparative analysis of various national cyber security strategies” In: International Journal of Computer Science and Information Security. Vol. 14, No. 1, Art. 129.
SUN, Liyuan; ZHANG, Hongyun; FANG, Chao. 2021. “Data security governance in the era of big data: status, challenges, and prospects” In: Data Science and Management. Vol. 2, pp. 41-44.
TECH NATION. 2020. UK tech sector beats both US and China to lead global growth in 2019. Available online. In: https://technation.io/news/2019- a-record-year-for-uk-tech/. Consultation date: 21/01/2021.
TVERDOKHLIB, Oleksandr. 2021. “Fundamental principles of public policy strategy in the conditions of the latest threats and challenges for the information space of Ukraine” In: Journal of Research Papers of the National Academy for Public Administration under the President of Ukraine. Vol. 1, pp. 113-120.
UNITED NATIONS. 2003. Resolution adopted by the General Assembly on 23 December 2003. 58/199. Creation of a global culture of cybersecurity and the protection of critical information infrastructures. Available online. In: https://undocs.org/en/A/RES/58/199. Consultation date: 21/01/2021.
UNITED NATIONS. 2020. United Nations’ secretary-general’s high-level panel on digital cooperation. Available online. In: https://www.un.org/en/sg- digital-cooperation-panel. Consultation date: 18/01/2021.
UNITED NATIONS. 2021. United Nations secretary-general. Road map for digital cooperation: Implementation of the recommendations of the High-Level Panel on Digital Cooperation Report of the Secretary-General (A/74/821). Available online. In: https://www.un.org/en/content/ digital-cooperation-roadmap/. Consultation date: 10/10/2021.
ZAGÓRSKI, Marek. 2019. Cybersecurity Strategy of the Republic of Poland for 2019 – 2024. Ministry of Digital Affairs of the Republic of Poland. Warsaw, Poland.
ZAKHARENKO, Kostyantyn. 2019. “Factors of implementation of the state information policy of Ukraine” In: Regional Studies. Vol. 17, pp. 15-19.
ZAKHARENKO, Kostyantyn. 2020. “Openness of information space and control over the availability of information” In: The Bulletin of the Vasyl Stefanyk Precarpathian National University. Series: Polithology. Vol. 14, pp. 46-55.
Publicado
2021-12-16
Cómo citar
Dziundziuk , V. B., Kotukh, Y. V., Krutii, O. M., Solovykh, V. P., & Kotukov, O. A. (2021). State Information Security Policy (Comparative Legal Aspect). Cuestiones Políticas, 39(71), 166-186. https://doi.org/10.46398/cuestpol.3971.08
Sección
Derecho Público
Copyright
Los autores que publican en esta revista están de acuerdo con los siguientes términos:
Los autores conservan los derechos de autor y garantizan a la revista el derecho de ser la primera publicación donde se presenta el artículo, el cual se publica bajo una Creative Commons Attribution License, que permite a otros compartir el trabajo previo el reconocimiento de la autoría del trabajo y de la publicación inicial en esta revista.
Los autores pueden establecer por separado acuerdos adicionales para la distribución no exclusiva de la versión de la obra publicada en la revista (por ejemplo, situarlo en un repositorio institucional o publicarlo en un libro), con un reconocimiento de su publicación inicial en esta revista.
Esta obra está bajo la licencia:
Creative Commons Reconocimiento-NoComercial-CompartirIgual 4.0 Internacional (CC BY-NC-SA 4.0)
