Geneva, Switzerland, September 2014 Regional Asia Information Security Exchange (RAISE) Forum Koji Nakao, Information Security Fellow, KDDI Corporation & Co-chair of RAISE ITU Workshop on “ICT Security Standardization for Developing Countries” (Geneva, Switzerland, September 2014)

Geneva, Switzerland, September Background Regional economies are mainly adopters of International Security Standards, except for Australia, Japan, and South Korea Main challenges Localizations requirements Lack of or limited security standards expertise Lack of or limited recognition and understanding of problems where standards could help resolve or mitigate Government focus, industry participation and contribution

Geneva, Switzerland, September Objectives of RAISE Forum-1 Provide a platform for sharing of knowledge, exchange of ideas, and dialogues on standards related issues, challenges, and directions, in particular, relating to the adoption, deployment, and implementation of information and communications technology (ICT) related standards in the region; Ensure that the security-related standardization activities in Asia adequately reflect the requirements of the market constituents at a strategic level; Provide a mechanism that could be used to follow- up on Asia policy requirements on Information Security standards issues;

Geneva, Switzerland, September Objectives of RAISE Forum-2 Provide effective co-ordination between organizations of relevant standardization work programs and their execution; Ensure Asia requirements for standards and standards work in this area are correctly interfaced with international standards activity, and standards activity in other regions, to avoid conflict or duplication of effort; Act as a strategic communications interface between relevant standards authorities and agencies on international standardization related topics.

RAISE Forum Geneva, Switzerland, September Co-chairs: Koji Nakao (Japan) and Meng-Chow Kang (Singapore) Inaugural meeting held Nov 19, 2004 in Tokyo 14th meeting held in Bangkok on Aug 1-2, 2014 (see the program) MoU with (ISC) 2 in 2012 to promote information security competency and awareness in Asia region Active members include China (including Hong Kong), Chinese Taipei, Japan, Malaysia, Thailand, Singapore, South Korea, Convener of WG 1 from SC 27 and vice-chairmen of ITU-T SG17.

Geneva, Switzerland, September Current Focus Improving information sharing and communications Extending help and outreach to emerging economies Closing the gaps in existing international standards arena New standards Guidance on use/implementation Preparing the region for emerging/new development (upcoming standards)

Geneva, Switzerland, September Projects Application Security (resulted in NP in SC27, ISO/IEC in progress) ICT Readiness for BC (resulted in NP in SC27, published ISO/IEC 27031) Korea ISMS Implementation Guide (published) Security Standards Toolkit (published) Security assessment guides for Network and Systems Security Administrators (published) Business Continuity and Disaster Recovery Services Standards Deployment (published) Latest output are basically focusing on SC27 works. ITU-T activities are required to consider.

Copyright (c) , RAISE Forum 8 Date/TimeDescription 0900 to 0930 hrsRegistration 0930 to 0940 hrsIntroduction and welcome notes 0940 to 1000 hrsOpening address 1000 to 1050 hrsInternational Updates on ISO/IEC JTC 1/SC 27 and ITU-T/SG 17 Activities (including Cloud Security and Audit related activities updates) 1105 to 1200 hrsInternational Updates on ITU-T/SG 17 Activities (including Cloud Security and Audit related activities updates) 1330 to 1630 hrsMembers’ Updates on Information Security Status in respective economy Korea’s updates Japan’s updates Chinese Taipei’s updates Malaysia’s updates 1515 to 1630 hrsP.R. China ’s updates Singapore’s updates (ISC)2 ’s updates 1630 to 1645 hrsRAISE Forum ToR and Roadmap 1645 to 1700 hrsWrap-up of Day One/Administrative for Day Two RAISE forum 2014 – the first day

Copyright (c) , RAISE Forum 9 Date/TimeDescription 0900 to 0910 hrsDay Two Introduction (Agenda Review) 0910 to 0945 hrsTracing Botnet – Mr Chang KC, ICST 0945 to 1020 hrsCyber-Security Collaboration -- Introduction of PRACTICE project in Japan 1035 to 1110 hrsResearch Collaboration -- Latest activities of NICT (NICTER/DAEDALUS/NIRVANA/NIRVANA 改 ) 1110 to 1145 hrsKR security capability maturity model – Prof Youm 1145 to 1230 hrsBitcoin and Digital/Virtual//Mobile Currencies: Both Sides of the Coin – Prof Pauline Reich 1400 to 1500 hrsDiscussion Session 1 – ISO/IEC family of standards - update on current developments, certification and applications - Supporting Guidance - Sector specific applications (telecoms security, IT service management and security, Cloud security and privacy, and utility sector security - certification of ISMS, certification of information security professionals 1515 to 1645 hrsDiscussion Session 2 – ISMS certification for SaaS – Antony Ma Discussion Session 3 – Developing Interdisciplinary Training and Curriculum for Cybercrime and Cybersecurity Professionals; What Is and Is Not Happening Discussion Session 4 – Update of (CoP for PII protection)) 1645 to 1715 hrsWrap-up and Roundtable on Day Two topics 1715 to 1730 hrsNext Meeting Administrative/Closing Remarks RAISE forum 2014 – the second day

Web site: Copyright (c) , RAISE Forum 10 Q&A/Discussion