Cybersecurity Gateway

Mr. Malcolm Johnson

Director of the ITU T Standardization Sector.

"It has never been more important for those that seek to defend the safety, security and integrity of the world’s ICT networks to step up their efforts.

A fundamental role of ITU, following the World Summit on the Information Society (WSIS) is to build confidence and security in the use of information and communication technologies (ICTs). Heads of states and government and other global leaders participating in WSIS entrusted ITU to take concrete steps towards curbing the threats and insecurities related to the information society.

As a consequence ITU launched the Global Cybersecurity Agenda (GCA) in March 2007, and more recently its Child Online Protection initiative.

A High-Level Experts Group (HLEG) provided expert advice and guidance to the ITU Secretary-General on strategies to promote cybersecurity.

This expert panel attracted top specialists from the likes of AT&T, Intel, Microsoft, Interpol, Verisign, as well as high-level government, academic and industry representatives from across the world

These people have contributed their insights and thought leadership on how best to tackle the growing challenges to the security of the online world.

An important part of this process is standardization work, to ensure that common standards for network security are adopted as widely as possible.

Not only will harmonization of standards increase the level of security, it will also reduce the costs of building secure systems.

ITU-T Study Group17 has the lead responsibility for security."

ITU Open Forum on Cybersecurity
Opening Remarks (Extract
Hyderabad, India. 06 December 2008

(full text pdf)

ICT Security Standards Roadmap

The ICT Security Standards Roadmap has been developed to assist in the development of security standards by bringing together information about existing standards and current standards work in key standards development organizations.

In addition to aiding the process of standards development, the Roadmap will provide information that will help potential users of security standards, and other standards stakeholders, gain an understanding of what standards are available or under development as well as the key organizations that are working on these standards.

The Roadmap was initiated by ITU-T Study Group 17. In January 2007 the initiative became a collaborative effort when the European Network and Information Security Agency (ENISA) and the Network and Information Security Steering Group (NISSG) joined Study Group 17 in the project.

The Roadmap is in five parts:

1. ICT Standards development organizations and their work

Part 1 contains information about the Roadmap structure and about each of the listed standards organizations, their structure and the security standards work being undertaken.

2. Approved ICT Security Standards

Part 2 contains a summary catalogue of approved standards.

3. Security standards under development

Part 3 is structured with the same taxonomy as Part 2 but contains work in progress, rather than standards that have already been approved and published..

4. Future needs and proposed new security standards

Part 4 is intended to capture possible future areas of security standards work where gaps or needs have been identified as well as areas where proposals have been made for specific new standards work.

5. Best practices

Part 5 is intended to be a repository of security-related best practices contributed by our community of members.
This section will be based on contributions from the security community.

Overview

Cybersecurity Gateway

Site map