1. PROTECTION OF CRITICAL INFORMATION INFRASTRUCTURE By Emmanuel E. Ekuwem, PhD, MIEEE, NPOM CEO, Teledom Group Immediate Past National President, Association of Telecom Companies of Nigeria (ATCON) info@teledominternational.net

2. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Where are we coming from and where are we heading to? How slowly have we been moving; what happened? President Obasanjo’s “Presidential Committee on 419 on the Internet under Basil Udotai, Esq’s excellent Coordinatorship Representative of the then relevant Law Enforcement Agencies: Police, EFCC, ICPC, NSA, SSS, etc and the Ministries of S &T, Justice; NCC, NITDA; NIG, ATCON, ALTON, NCS, CPN, etc. Ministers of S & T and Justice/Attorney General as Co-Chairmen

3. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Where are coming from and where are heading to?--2 Many very constructive meetings of the committee Extensive consultations with stakeholders Report submitted to the President with recommendations containing, among others, the subject of this international conference: CERT Implementation

4. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Where are we coming from and where are we heading to?--3 Mr. President commended the committee for a “brilliant work” A draft Executive bill sent to the National Assembly Commencement of Public Hearings by relevant committees of Senate and House of Representatives

5. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Needless Controversies on the Draft Bill--1 While the 419 Committee deliberations lasted, the majority always had their way……as it should be in a democracy Those who did not have their way during those deliberation sessions of the 419 Committee took their fight to the Public Hearings of the National Assembly High level lobby set in

6. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Issues that Triggered Controversies-1 No need for an independent Agency or Body of whatever form Almost every law enforcement agency claimed that it had sufficient provisions within the law setting it up to host the Cyber security outfit

7. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Issues that Triggered Controversies-2 Should the Cyber security agency or body be: A department (Directorate) in NITDA? A department in EFCC? A department of the Police? A department in the office of the NSA? An autonomous Agency that reports to the NSA? etc

8. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Issues that Triggered Controversies-3 If Cyber security matters can be handled under the ambit of existing laws, did we need a new legislation? What would constitute Critical Information Infrastructure? Do we need a law to designate Critical Information Infrastructure and criminalize its attack with stiff penalties

9. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Chaos of Draft Bills Every shade of opinion on the scope, form and hosting of the Cyber security outfit had a tendency to want to sponsor a draft bill. Which shade or version is in the House? Probably the product of compromises for the good of the country

10. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Critical Information Infrastructure Major ICT service media for Access (IP and GSM/CDMA cellular), Switching, Transport, Billing, Storage, Processing and Interconnectivity upon which national economic activities and productivity depends; impairment of which impedes, disrupts and eventually sabotages the nation’s economy. This impairment can be considered an ACT of WAR against Nigeria.

11. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Information Infrastructure for the Critical Sectors Security Telecommunication Financial Services….banking, insurance, NSE, NDIC, PENCOM, etc Aviation Petroleum Power Health Water Governments

12. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Critical Information Infrastructure Protection (CIIP) Enabling laws to define, designate and criminalize attacks Physical Virtual

13. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 CIIP Redundancies, backups, distributed architecture CERTs FIRSTs

14. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 CIIP: CERT to the Rescue Barring physical attacks, CERT action Inter-CERT collaborations Some form of CERT coordination

15. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Seek Yee First Self-Protection Sector designation of its CII Sector CERT establishment Partnership with the Police and other relevant law enforcement agencies Show CERT value in CII by reporting incidents

16. International Conference on Cybercrime, DBI, Abuja 1 - 2 Nov., 2010 Thank You