Política Estatal de Seguridad de la Información (Aspecto Legal Comparativo)
Keywords:
Covid-19 pandemic, cybercrime, global cybersecurity index, global information space, information security
Abstract
The rapid development of information technology and the problem of its rapid implementation in all spheres of public life, the growing importance of information in management decisions to be made by public authorities, a new format of media — these and other factors urge the problem of developing and implementing quality state information security policy. The aim of the article was to conduct a comparative analysis of the latest practices of improving public information security policies in the European Union, as well as European countries such as Poland, Germany, Great Britain, and Ukraine. The formal-logic, system-structural and problem-theoretical methods were the leading methodological tools. The analysis of regulatory legal acts showed that there is a single concept of international information security at the global and regional levels, which requires additional legal instruments for its implementation. It is stated that the reform of national information security policies has a direct impact on the formation of a single global information space. According to the results of the study, it is substantiated that the United Kingdom is characterized by the most promising information security policy.
Downloads
Download data is not yet available.
References
ADMINISTRATION OF THE PRESIDENT OF UKRAINE. 2017. Decision of the National Security and Defense Council of Ukraine of December 29, 2016 On the Doctrine of Information Security of Ukraine. Entered into force by the Decree of the President of Ukraine of February 25, 2017 № 47/20172016. Available online. In: https://www.president.gov.ua/
documents/472017-21374. Consultation date: 21/01/2021.
ADONIS, Abid A. 2019. International law on cyber security in the age of digital sovereignty. Available online. In: https://www.e-ir.info/2020/03/14/ international-law-on-cyber-security-in-the-age-of-digital-sovereignty/. Consultation date: 18/01/2021.
BONDARENKO, Roman; MIKHALCHUK, Vasyl. 2021. “Informational security of the state” In: Investytsiyi: Praktyka ta Dosvid. Vol. 5, pp. 95–101.
CATTANEO, Gabriella; MICHELETTI, Giorgio; GLENNON, Mike; LA CROCE, Carla; MITTA, Chrysoula. 2020. The European Data Market Monitoring Tool Key Facts & Figures, First Policy Conclusions, Data Landscape and Quantified Stories. D2.9 Final Study Report. European Commission. Brussels.
COCO, Antonio; DE SOUZA DIAS, Talita. 2020. “States’ due diligence duties vis-à-vis the COVID-19 pandemic. Prevent, respond, cooperate” In: Journal of International Humanitarian Legal Studies. Vol. 11, No. 2, pp. 218-236.
DEPARTMENT FOR DIGITAL, CULTURE, MEDIA & SPORT OF THE UNITED KINGDOM. 2020. National data strategy. Policy paper. Available online. In: https://www.gov.uk/government/publications/uk- national-data-strategy/national-data-strategy#fn:1. Consultation date: 21/01/2021.
EUROPEAN COMMISSION. 2018. Commission Implementing Regulation (EU) 2018/151 of 30 January 2018 laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact. Available online. In: https:// eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32018R0151. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002a. Directive 2002/21/EC of the European Parliament and of the Council of 7 March 2002 on a common regulatory framework for electronic communications networks and services (Framework directive). Available online. In: https://eur-lex.europa.eu/legal-content/ en/ALL/?uri=CELEX%3A32002L0021. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002b. Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=CELEX%3A32002L0058. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2013. Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Decision 2005/222/JHA. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=celex%3A32013L0040. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016a. Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union. Available online. In: https://eur-lex.europa.eu/legal-content/ EN/TXT/?uri=celex:32016L1148. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). Available online. In: https://eur-lex.europa.eu/eli/ reg/2016/679/oj. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2018. Directive (EU) 2018/1972 - adopted by the European Union in December 2018 - setting up a European Electronic Communications Code. It established common EU rules and objectives on regulating the telecom industry and defines how providers of networks and/or services can be regulated by national authorities. Available online. In: https://www.europeansources.info/record/directive-eu-2018- 1972-establishing-the-european-electronic-communications-code/. Consultation date: 21/01/2021.
FEDERAL GOVERNMENT OF GERMANY. 2021. The cyber security strategy for Germany 2021. Available online. In: https://www.bundesregierung. de/breg-en/news/new-cyber-security-strategy-1958688. Consultation date: 10/10/2021.
FUTTER, Andrew. 2020. What Does Cyber Arms Control Look Like? Four Principles for Managing Cyber Risk. Global Security Policy Brief. European Leadership Network. London, UK.
IKEDA, Kazuaki; MARSHALL, Anthony; ZAHARCHUK, Dave. 2019. “Agility, skills and cybersecurity: Critical drivers of competitiveness in times of economic uncertainty” In: Strategy & Leadership. Vol. 47, No. 3, pp. 40- 48.
INTERNATIONAL TELECOMMUNICATION UNION. 2020. Global cybersecurity index. Available online. In: https://www.itu.int/ epublications/publication/global-cybersecurity-index-2020/en/. Consultation date: 21/01/2021.
LALLIE, Harjinder Singh; SHEPHERD, Lynsay A; NURSE, Jason C; EROLA, Arnau; EPIPHANIOU, Gregory; MAPLE, Carsten; BELLEKENS, Xavier. 2021. “Cyber security in the age of covid-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic” In: Computers & Security. Vol. 105, Art. 102248.
LEE, Jae Kyu; CHANG, Younghoon; KWON, Hun Yeong; KIM, Beopyeon. 2020. “Reconciliation of privacy with preventive cybersecurity: the bright internet approach” In: Information Systems Frontiers. Vol. 22, pp. 45–57.
LOMAS, Natasha. 2020. UK wants pandemic levels of data sharing to be the new normal. Available online. In: https://techcrunch.com/2020/09/09/ uk-wants-pandemic-levels-of-data-sharing-to-be-the-new-normal/. Consultation date: 21/01/2021.
MANTELERO, Alessandro. 2018. “AI and big data: A blueprint for a human right, social and ethical impact assessment” In: Computer Law & Security Review. Vol. 34, No. 4, pp. 754–772.
MINISTRY OF CULTURE AND INFORMATIONAL POLICY OF UKRAINE. 2021, The government approved the informational security strategy till 2025. Available online. In: https://www.kmu.gov.ua/news/uryad- shvaliv-strategiyu-informacijnoyi-bezpeki-do-2025-roku. Consultation date: 10/10/2021.
OLEJNIK,Lukasz.2021.Thedirepossibilityofcyberattacksonweaponssystems. Available online. In: https://www.wired.com/story/dire-possibility- cyberattacks-weapons-systems/. Consultation date: 05/10/2021.
PATRICK, Anthony. 2021. “Streaming the battlefield: a theory of the internet’s effect on negotiation onset” In: Journal of Advanced Military Studies. Vol. 12, No. 1, pp. 181-195.
SCROXTON, Alex. 2020. EU security strategy a ‘step up’ on cyber leadership. Available online. In: https://www.computerweekly.com/ news/252493802/EU-security-strategy-a-step-up-on-cyber-leadership- says-Brussels. Consultation date: 21/01/2021.
SHAFQAT, Narmeen; MASOOD, Ashraf. 2016. “Comparative analysis of various national cyber security strategies” In: International Journal of Computer Science and Information Security. Vol. 14, No. 1, Art. 129.
SUN, Liyuan; ZHANG, Hongyun; FANG, Chao. 2021. “Data security governance in the era of big data: status, challenges, and prospects” In: Data Science and Management. Vol. 2, pp. 41-44.
TECH NATION. 2020. UK tech sector beats both US and China to lead global growth in 2019. Available online. In: https://technation.io/news/2019- a-record-year-for-uk-tech/. Consultation date: 21/01/2021.
TVERDOKHLIB, Oleksandr. 2021. “Fundamental principles of public policy strategy in the conditions of the latest threats and challenges for the information space of Ukraine” In: Journal of Research Papers of the National Academy for Public Administration under the President of Ukraine. Vol. 1, pp. 113-120.
UNITED NATIONS. 2003. Resolution adopted by the General Assembly on 23 December 2003. 58/199. Creation of a global culture of cybersecurity and the protection of critical information infrastructures. Available online. In: https://undocs.org/en/A/RES/58/199. Consultation date: 21/01/2021.
UNITED NATIONS. 2020. United Nations’ secretary-general’s high-level panel on digital cooperation. Available online. In: https://www.un.org/en/sg- digital-cooperation-panel. Consultation date: 18/01/2021.
UNITED NATIONS. 2021. United Nations secretary-general. Road map for digital cooperation: Implementation of the recommendations of the High-Level Panel on Digital Cooperation Report of the Secretary-General (A/74/821). Available online. In: https://www.un.org/en/content/ digital-cooperation-roadmap/. Consultation date: 10/10/2021.
ZAGÓRSKI, Marek. 2019. Cybersecurity Strategy of the Republic of Poland for 2019 – 2024. Ministry of Digital Affairs of the Republic of Poland. Warsaw, Poland.
ZAKHARENKO, Kostyantyn. 2019. “Factors of implementation of the state information policy of Ukraine” In: Regional Studies. Vol. 17, pp. 15-19.
ZAKHARENKO, Kostyantyn. 2020. “Openness of information space and control over the availability of information” In: The Bulletin of the Vasyl Stefanyk Precarpathian National University. Series: Polithology. Vol. 14, pp. 46-55.
documents/472017-21374. Consultation date: 21/01/2021.
ADONIS, Abid A. 2019. International law on cyber security in the age of digital sovereignty. Available online. In: https://www.e-ir.info/2020/03/14/ international-law-on-cyber-security-in-the-age-of-digital-sovereignty/. Consultation date: 18/01/2021.
BONDARENKO, Roman; MIKHALCHUK, Vasyl. 2021. “Informational security of the state” In: Investytsiyi: Praktyka ta Dosvid. Vol. 5, pp. 95–101.
CATTANEO, Gabriella; MICHELETTI, Giorgio; GLENNON, Mike; LA CROCE, Carla; MITTA, Chrysoula. 2020. The European Data Market Monitoring Tool Key Facts & Figures, First Policy Conclusions, Data Landscape and Quantified Stories. D2.9 Final Study Report. European Commission. Brussels.
COCO, Antonio; DE SOUZA DIAS, Talita. 2020. “States’ due diligence duties vis-à-vis the COVID-19 pandemic. Prevent, respond, cooperate” In: Journal of International Humanitarian Legal Studies. Vol. 11, No. 2, pp. 218-236.
DEPARTMENT FOR DIGITAL, CULTURE, MEDIA & SPORT OF THE UNITED KINGDOM. 2020. National data strategy. Policy paper. Available online. In: https://www.gov.uk/government/publications/uk- national-data-strategy/national-data-strategy#fn:1. Consultation date: 21/01/2021.
EUROPEAN COMMISSION. 2018. Commission Implementing Regulation (EU) 2018/151 of 30 January 2018 laying down rules for application of Directive (EU) 2016/1148 of the European Parliament and of the Council as regards further specification of the elements to be taken into account by digital service providers for managing the risks posed to the security of network and information systems and of the parameters for determining whether an incident has a substantial impact. Available online. In: https:// eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32018R0151. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002a. Directive 2002/21/EC of the European Parliament and of the Council of 7 March 2002 on a common regulatory framework for electronic communications networks and services (Framework directive). Available online. In: https://eur-lex.europa.eu/legal-content/ en/ALL/?uri=CELEX%3A32002L0021. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2002b. Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=CELEX%3A32002L0058. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2013. Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Decision 2005/222/JHA. Available online. In: https://eur-lex.europa.eu/legal-content/EN/ ALL/?uri=celex%3A32013L0040. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016a. Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union. Available online. In: https://eur-lex.europa.eu/legal-content/ EN/TXT/?uri=celex:32016L1148. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2016b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). Available online. In: https://eur-lex.europa.eu/eli/ reg/2016/679/oj. Consultation date: 21/01/2021.
EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION. 2018. Directive (EU) 2018/1972 - adopted by the European Union in December 2018 - setting up a European Electronic Communications Code. It established common EU rules and objectives on regulating the telecom industry and defines how providers of networks and/or services can be regulated by national authorities. Available online. In: https://www.europeansources.info/record/directive-eu-2018- 1972-establishing-the-european-electronic-communications-code/. Consultation date: 21/01/2021.
FEDERAL GOVERNMENT OF GERMANY. 2021. The cyber security strategy for Germany 2021. Available online. In: https://www.bundesregierung. de/breg-en/news/new-cyber-security-strategy-1958688. Consultation date: 10/10/2021.
FUTTER, Andrew. 2020. What Does Cyber Arms Control Look Like? Four Principles for Managing Cyber Risk. Global Security Policy Brief. European Leadership Network. London, UK.
IKEDA, Kazuaki; MARSHALL, Anthony; ZAHARCHUK, Dave. 2019. “Agility, skills and cybersecurity: Critical drivers of competitiveness in times of economic uncertainty” In: Strategy & Leadership. Vol. 47, No. 3, pp. 40- 48.
INTERNATIONAL TELECOMMUNICATION UNION. 2020. Global cybersecurity index. Available online. In: https://www.itu.int/ epublications/publication/global-cybersecurity-index-2020/en/. Consultation date: 21/01/2021.
LALLIE, Harjinder Singh; SHEPHERD, Lynsay A; NURSE, Jason C; EROLA, Arnau; EPIPHANIOU, Gregory; MAPLE, Carsten; BELLEKENS, Xavier. 2021. “Cyber security in the age of covid-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic” In: Computers & Security. Vol. 105, Art. 102248.
LEE, Jae Kyu; CHANG, Younghoon; KWON, Hun Yeong; KIM, Beopyeon. 2020. “Reconciliation of privacy with preventive cybersecurity: the bright internet approach” In: Information Systems Frontiers. Vol. 22, pp. 45–57.
LOMAS, Natasha. 2020. UK wants pandemic levels of data sharing to be the new normal. Available online. In: https://techcrunch.com/2020/09/09/ uk-wants-pandemic-levels-of-data-sharing-to-be-the-new-normal/. Consultation date: 21/01/2021.
MANTELERO, Alessandro. 2018. “AI and big data: A blueprint for a human right, social and ethical impact assessment” In: Computer Law & Security Review. Vol. 34, No. 4, pp. 754–772.
MINISTRY OF CULTURE AND INFORMATIONAL POLICY OF UKRAINE. 2021, The government approved the informational security strategy till 2025. Available online. In: https://www.kmu.gov.ua/news/uryad- shvaliv-strategiyu-informacijnoyi-bezpeki-do-2025-roku. Consultation date: 10/10/2021.
OLEJNIK,Lukasz.2021.Thedirepossibilityofcyberattacksonweaponssystems. Available online. In: https://www.wired.com/story/dire-possibility- cyberattacks-weapons-systems/. Consultation date: 05/10/2021.
PATRICK, Anthony. 2021. “Streaming the battlefield: a theory of the internet’s effect on negotiation onset” In: Journal of Advanced Military Studies. Vol. 12, No. 1, pp. 181-195.
SCROXTON, Alex. 2020. EU security strategy a ‘step up’ on cyber leadership. Available online. In: https://www.computerweekly.com/ news/252493802/EU-security-strategy-a-step-up-on-cyber-leadership- says-Brussels. Consultation date: 21/01/2021.
SHAFQAT, Narmeen; MASOOD, Ashraf. 2016. “Comparative analysis of various national cyber security strategies” In: International Journal of Computer Science and Information Security. Vol. 14, No. 1, Art. 129.
SUN, Liyuan; ZHANG, Hongyun; FANG, Chao. 2021. “Data security governance in the era of big data: status, challenges, and prospects” In: Data Science and Management. Vol. 2, pp. 41-44.
TECH NATION. 2020. UK tech sector beats both US and China to lead global growth in 2019. Available online. In: https://technation.io/news/2019- a-record-year-for-uk-tech/. Consultation date: 21/01/2021.
TVERDOKHLIB, Oleksandr. 2021. “Fundamental principles of public policy strategy in the conditions of the latest threats and challenges for the information space of Ukraine” In: Journal of Research Papers of the National Academy for Public Administration under the President of Ukraine. Vol. 1, pp. 113-120.
UNITED NATIONS. 2003. Resolution adopted by the General Assembly on 23 December 2003. 58/199. Creation of a global culture of cybersecurity and the protection of critical information infrastructures. Available online. In: https://undocs.org/en/A/RES/58/199. Consultation date: 21/01/2021.
UNITED NATIONS. 2020. United Nations’ secretary-general’s high-level panel on digital cooperation. Available online. In: https://www.un.org/en/sg- digital-cooperation-panel. Consultation date: 18/01/2021.
UNITED NATIONS. 2021. United Nations secretary-general. Road map for digital cooperation: Implementation of the recommendations of the High-Level Panel on Digital Cooperation Report of the Secretary-General (A/74/821). Available online. In: https://www.un.org/en/content/ digital-cooperation-roadmap/. Consultation date: 10/10/2021.
ZAGÓRSKI, Marek. 2019. Cybersecurity Strategy of the Republic of Poland for 2019 – 2024. Ministry of Digital Affairs of the Republic of Poland. Warsaw, Poland.
ZAKHARENKO, Kostyantyn. 2019. “Factors of implementation of the state information policy of Ukraine” In: Regional Studies. Vol. 17, pp. 15-19.
ZAKHARENKO, Kostyantyn. 2020. “Openness of information space and control over the availability of information” In: The Bulletin of the Vasyl Stefanyk Precarpathian National University. Series: Polithology. Vol. 14, pp. 46-55.
Published
2021-12-16
How to Cite
Dziundziuk , V. B., Kotukh, Y. V., Krutii, O. M., Solovykh, V. P., & Kotukov, O. A. (2021). Política Estatal de Seguridad de la Información (Aspecto Legal Comparativo). Political Questions, 39(71), 166-186. https://doi.org/10.46398/cuestpol.3971.08
Section
Derecho Público
Copyright
The authors who publish in this journal agree to the following terms:
The authors retain the copyright and guarantee the journal the right to be the first publication where the article is presented, which is published under a Creative Commons Attribution License, which allows others to share the work prior to the recognition of the authorship of the article work and initial publication in this journal.
Authors may separately establish additional agreements for the non-exclusive distribution of the version of the work published in the journal (for example, placing it in an institutional repository or publishing it in a book), with an acknowledgment of its initial publication in this journal.
This work is under license:
Creative Commons Reconocimiento-NoComercial-CompartirIgual 4.0 Internacional (CC BY-NC-SA 4.0)
