Thanks to the vital contributions of project partners from Armenia, Azerbaijan, Georgia, the Republic of Moldova and Ukraine, the CyberEast joint project of the European Union and of the Council of Europe has completed a series of Training sessions on cyber incident and cybercrime taxonomy and handling in May and June 2023. Their purpose is to support the practical implementation of agreed Standard Operating Procedures (SOP) for improved co-operation between Law Enforcement and Computer Security Incidents Response Teams (CSIRT) in the Eastern Partnership countries.
Participants from law enforcement and cybersecurity/CSIRT communities analysed cybercrime/cybersecurity taxonomies, incident classification and handling, structured threat information expression (STIX) and electronic evidence, in accordance with the requirements of the Convention on Cybercrime (Budapest Convention) and of the European Union Digital Operational Resilience Act (DORA). The project counterparts further discussed best practices, as well as challenges in the adoption and implementation of Standard Operating Procedures, with the aim of refining their national procedures and legislation, based on practical considerations.
The training sessions stemmed from previous co-operation activities of Law Enforcement and Computer Incidents Response Teams (CSIRT), organised by the CyberEast project in 2020-2021. These initiatives paved the way for the agreement of principles of co-operation and, eventually, national Standard Operating Procedures. The project will continue to support the countries of the region to effectively carry out these principles and procedures.
Convention on Cybercrime (Budapest Convention)
Digital Operational Resilience Act (DORA), EU Regulation 2022/2554