Romania (RO)

The Cyber Security Strategy of Romania was implemented in 2013. It is the first and only national strategy. 

It covers the following strategic goals in the ENISA self-assessment classification: cybercrime, citizen awareness, critical information infrastructure protection, national cyber contingency plans, international cooperation, public-private partnership, incident response capability, baseline security requirements, incident reporting mechanisms, R&D, training and educational programmes.

EDUCATION AND TRAINING IN NATIONAL CYBER SECURITY STRATEGY

Awareness, Education and Training

The Romanian national cybersecurity strategy defines the following priorities: 

  • Developing a security culture by raising awareness about the vulnerabilities, risks and threats originating from cyberspace and the need to ensure protection of  information systems. Awareness-raising programmes will be developed for all levels of society as well as public administration, the private sector. 
  • Creating compulsory educational programmes at different stages of the educational cycle on the safe use of the internet and computing equipment. 
  • Ensuring professional training to people working in cybersecurity with widespread promotion of professional certifications. Professional training programmes across public and private sectors must include cybersecurity for managers. 
  • Promoting and developing cooperation between the public and private sectors at national and international level in the field of cyber security.
  • Taking part in the initiatives of international organisations with the aim of defining and establishing a set of international confidence-building measures concerning use of cyberspace. 

The Romanian National Computer Security Incident Response Team (CERT-RO) provides alerts and threat updates on its website. It also covers education on cybersecurity and organised awareness campaigns, e.g.

Initiatives of the national on Cybersecurity Centre

Romania established a Cyber Security Research Centre (CSSIR; English) in 2013 to promote, support, implement and coordinate security research in IT security in Romania, and also conduct international actions through short-, mid- and long-term partnerships on cyber security. 

Initiatives

  • DefCamp: Annual event on Hacking and Information Security in Central Eastern Europe, bringing together leading cybersecurity doers, from decision makers, security specialists, developers and academic experts to entrepreneurs and representatives from the public and private sectors to delve into major cybersecurity challenges. The Hack Village is a specially designed playground for hacking activities.
  • Ladies in Cybersecurity: A conference series that started in 2019 with the aim of guiding and supporting women seeking to advance their careers in information security. Highly skilled professionals and community leaders share their hands-on experience to help like-minded women in accelerating personal and professional growth. The conference exclusively features an all-female line-up. 
Higher education courses on cybersecurity
 
Public-private Partnerships

The 2013 strategy priorities cooperation on cybersecurity between public and private sectors as well as through international bodies and alliances in which Romania participates to ensure coverage of both privately and state-owned infrastructure. Cooperation must focus on  prevention, awareness and promotion of opportunities in the cyber domain.

Cooperation must be based on trust between the state and businesses at all levels. It must aim for increased cyber protection by balancing resources available with the measures targeted. Cybersecurity responsibility lies with all stakeholder groups, taking on board mutual interests in cyber resilience and legal compliance when combating cybercrime and protecting critical infrastructure in cyberspace. 

The main strategic goals for public-private cooperation are:

  • Engaging in information sharing about threats, vulnerabilities and risks. 
  • Developing educational programmes and research on cybersecurity.
  • Developing early-warning capabilities and response to cyber incidents and attacks.
  • Conducting exercises on cyberspace security.
  • Encouraging a culture of cybersecurity. 
  • Ensuring joint responses in the event of major cyber-attacks. 
IT/Cyber Clusters

The ClujIT Cluster is a collaboration and business hub based on the quadruple helix model of the IT value chain bringing together companies, universities, research institutes, authorities and other catalysts in the national community. Cybersecurity is an important area for the cluster. 

It provides diverse services to support business development, awarenss of trends and opportunities for internationalisation. It supports an increasing number of entrepreneurs and employees in the private sector, spanning engineeting, research and development and the creative industries reflecting the growth of the Cluj metropolitan area, which has over 4,500 firms with over 80% of them registered in  Cluj-Napoca. After the capital city of Bucharest, Cluj-Napoca has the highest value of income in the private sector in Romania. 

 

EU Cyber Professional Register for national stakeholders

The CYBERWISER.eu CyPR is all about boosting opportunities in the cybersecurity marketplace. 

This European Cybersecurity Professional Register is the place where professionals, juniors or seniors, age can promote their specific skill sets and experiences in cybersecurity, courses taken and qualifications.

Organisations of any size or sector from SMEs to large companies and public institutions can find and contact the right skills and experiences they need to improve their IT security posture.

Latest update & Disclaimer

January 2021. 

The information contained here is based on desk research carried out by CYBERWISER.eu, including the ENISA interactive maps on national strategies and educational courses. 

 

Cybersecurity Response Teams: GDPR and NIS Directive Compliance and Notification 

Computer Security Security Response Team

The 2013 strategy includes a programme to build capacities in different areas, such public-private co-operation on cyber security, including efficient early warning, alert and response mechanisms for cyber incidents, as well as encouraging research, development and innovation capabilities, increasing the resilience of cyber infrastructures and developing CERT-type entities in both the public and private sector.

CERT-RO (Romanian) is the Romanian Computer Emergency Response Team (CERT) established as a government institution. Its focus is on research, development and experise in cyber security. Its constituents are users, systems and networks from Romanian cyberspace. 

Its main tasks include preventing, analysing, identifying and responding to cyber incidents. It is also responsible for elaborating and distributing public politics for prevention and counteracting incidents occurring within national cyber infrastructures. 

In November 2016, CERT-RO was ranked 2nd in the European Cyber Security Challenge. The team was selected in May 2016 by CERT-RO in partnership with the Romanian Intelligence Service (SRI) and National Agency for Computer System Security (ANSSI), alongside the main sponsors (Bitdefender, Orange Romania and Q-East Software). Exercises in June focused on web application security, cyber attack and defence, cryptography, analysis of network traffic, and reverse engineering. Additional training sessions were provided by sponsors. 

CERT-MIL (English) is the Romanian entity of the Ministry of Defence charged with providing cyber defence for its members. It focuses on cyber risks, specialised assistance, forensics, and the management of cyber incidents. 

National Cyberint Center (English) is the cyber intelligence centre of the Romanian Intelligence Service (SRI). Its main focus is on counter-espionage, ecnomic security, transnational threats and the protection of classified information.

CORIS-STS (English) is the Romanian CERT designed to prevent and respond to incidents of security and communications systems of the Special Telecommunications Service and of its beneficiaries.

Report a cyber incident

to national CERT/CSIRT

CERT-RO

CORIS (Special Telecommunications Service)

CERT-MIL (MoD): Specialised cyber-defence assistance to subscribed members 

Romanian Intelligence Service (CYBER-INT): a list of local branches is available at www.sri.ro/cyberintelligence
Anti-Terrorist Hotline: 0800 800 100.

Languages Romanian and English.
Latest update & Disclaimer

January 2021. 

The information contained here is the result of desk research carried out by CYBERWISER.eu. 

 

Contact us for more info

 

Romania (RO) | CYBERWISER.eu

CYBERWISER.eu Cyber Range & Capacity Building in Cybersecurity

Error

The website encountered an unexpected error. Please try again later.