Smart Connections for All

Transport and ICT Global Practice

WOR L D B A NK DONOR P E R S P E C T IV E ON C Y B E R S E C UR IT Y

Sandra Sargent, Senior Operations Officer, Transport & ICT GP, The World Bank

MYTH NUMBER ONE: CYBER SECURITY IS ABOUT SECURITY

The truth is:

• Cyber Security is about ECONOMY

• Cyber Security is about GOOD GOVERNANCE

• Cyber Security is about CITIZENS

• Cyber Security is about COMPANIES

• Cyber Security is about BANKS

• Cyber Security is about HOSPITALS

• Cyber Security is about LIVES

• Cyber Security is about GROWTH

• Cyber Security is about DEVELOPMENT

World Bank Mission and Role of ICTs in Accelerating Development

• The World Bank’s Twin Goals to end extreme poverty and boost shared prosperity cannot be achieved without ensuring affordable broadband access for all, and fully embracing the transformative powers of Information and Communication Technologies (ICT).

• The recently approved Sustainable Development Goals (SDGs) underscore the need to ensure universal and affordable access to internet in low income countries by 2020.

• The potential for digital technologies to yield enormous digital dividends to the extreme poor is further highlighted in the recently published World Development Report 2016 which articulates the potential transformational impact of digital technologies, in particular mobile phones and the internet, on inclusion, efficiency and innovation.

• More access to universal and affordable technologies and internet, also mean, more vulnerabilities to cyber threats or cyber attacks.

• In this context we work to also provide SAFE ICTs.

Importance of Promoting Cybersecurity

Countries Rely on ICT Infrastructure

Broadband

Systems & Networks

Services Cloud and Data

e-ID

Governments must Ensure a

Privacy

Security

Secure & Trusted ICT Environment

The Transport & ICT Global Practice, stands committed to help countries to build this Trusted and Secure Environment by strengthening their capacity in cybersecurity to address cyber-threats.

Therefore

Vert

ical

Pra

ctic

e:

Broa

dban

d-in

tern

et a

nd c

ross

-cu

ttin

g IC

T ap

plic

atio

ns f

or

serv

ice

prov

isio

n

ICT Components across the Sectors

80% of the World Bank’s projects have an ICT component

Horizontal Practice: ICT innovations and solutions

in all the other Global Practices

Agriculture ____________

Water Education Energy &

Extractives

Environment & Natural Resources

Finance & Markets

Transport & ICT Health,

Nutrition & Population

Macroeconomics & Fiscal Management

Governance

Social Protection &

Labor

Trade & Competitivenes

s Poverty Urban, Rural &

Resilience

…Specially those categorized as Critical Infrastructure

Cybersecurity is crucial for key sectors within the World Bank…

Cybersecurity in the ICT Unit Project Portfolio

• The World Bank’s ICT Unit is offering integrated solutions in the ICT project portfolio to address cybersecurity gaps in our country clients.

• We have different projects and activities in which we develop integrated solutions in order to increase countries’ response capacity to cyber-threats menacing their public systems and infrastructure, especially those projects that have eGovernement, eServices, eIDs, Cloud, among other components.

Country Specific Technical Assistance

Global Studies

Reimbursable Advisory Services

Lending

Cybersecurity Integrated Solutions in the ICT Unit Project Portfolio

Policy, Legal, and Regulatory Enabling Framework: • Technical Assistance and strategic advice on policy/law

formulation based on national cybersecurity gaps/priorities.

Awareness and capacity building: • Implementing tools, trainings and processes to help clients

to strengthen their abilities to combat cyber-attacks. • Developing knowledge-sharing activities to share best

practices and good international case studies.

Governance and Institutions: • Looking at best institutional arrangements and internal

procedures for implementing cyber security • Establishing institutional agreements and coordination

mechanisms

Establishment of Response and Recovery Mechanisms: • Responsible for detecting, investigating, and monitoring

cyber-incidents and loss of data such as Computer Emergency Response Teams (CERTs)

MYTH NUMBER TWO: DONOR COMMUNITY IS NOT WELL EQUIPED TO DEAL WITH THE ISSUE OF CYBER SECURITY

The Truth is:

• Donor community has cross-disciplinary expertise needed to address the challenged posed by cyber security.

• Donor community has world wide coverage, country presence and in-depth knowledge of the local conditions needed to reach the most disadvantaged and the least ready to address cyber security threats.

• Donor community has financial resources that can close the gaps in cyber readiness if applied in a coordinated manner.

• Donor community has the use of international frameworks and agreements to bring greater collaboration and consensus.

How to approach Cybersecurity: World Development Report

“Threats to cybersecurity are undermining confidence in the internet and increasing the costs to businesses and governments, resulting in economic losses as well as higher security spending”, - WDR2016

Conceptual approach to Cybersecurity

Digital Development Partnership (DDP)

Objectives • Standardize, replicate, scale up: advance digital

development from experimentation to a standardized, replicable and scalable work program with clear results expectations.

• Partner with clients, private sector and donors: jointly shape the agenda and integrate private sector innovations and real-life expertise in projects.

• Leverage World Bank and IFC representation in more than 130 country offices.

Modalities • Multi-donor Trust Fund co-mingling bilateral and

private sector contributions.

• Bank-executed work programs aimed at improving the enabling environment for digital development and private sector activity.

• Governance mechanism with yearly partnership meetings and informal technical working groups.

• Current partners: Microsoft, GSMA, Finland, Korea, Japan.

Scope • Data and indicators: benchmark the readiness of

client countries to reap digital dividends.

• Digital economy enabling environment: remove barriers and bottlenecks for the digital ecosystem and support global, common rules for the digital economy.

• Cyber security: support developing countries with ensuring trusted and secure cyber space.

• Internet access for all: support policy, regulatory, and technical reforms to enhance connectivity.

• Digital government: mainstream interoperable digital platforms, services, and solutions.

A platform for digital innovation and development financing

Digital Development Partnership

• Call for Action and our Opportunity

• Analytical Foundation: World Development Report 2016 “Digital Dividends”

• Digital Development Partnership (DDP)

• Work Areas:

Work Area 1: Data and Indicators

Work Area 2: Digital Economy Enabling Environment

Work Area 3: Cyber Security

Work Area 4: Internet Access for All

Work Area 5: Digital Government Work Area

Work Area 6: Mainstreaming Digital Innovation • Partnering Opportunities

Fostering Cybersecurity Program

Frameworks

Assesments

Capacity Technical Assistance

DDP will help advance the capacity of World Bank clients in the development of cybersecurity policies and standards, and support good practices in the use of

cybersecurity tools, safeguards, and risk management instruments.

CIIP Guide in WB

Investments

Cyber Guide for Public

Sector Cyber OPS

Toolkit FRAMEWORKS

SAR EAP ECA AFRICA ASSESMENTS

Technical TTL/CMU

Internal Processes

CAPACITY WB Capacity Client Capacity

Study Tours Clinics

Collaboration

OPS / Projects

OPS / Projects

OPS / Projects

OPS / Projects

TECHNICAL ASSISTANCE

M&E

Partners

DONOR CHALLANGE

Dispel Myth N1 • Need for standardized and comparable datasets • Need for a robust analytical work showing cost benefit

of investments into cyber security and costs of not investing.

Dispel Myth N2 • Need for greater coordination of activities at a country

level • Need for standard set of tools and mechanisms

THE NEW BEGINNINGS

• Global Forum for Cyber Expertise

• Digital Development Partnership

• National Cyber Security Guide (ITU)

• Cyber Crime Toolkit Project (WB)

• Cyber Security Capacity Project (WB)

Thank you