Tradução de«consultor de segurança informática » (Português → Inglês) :

Information Technology Security Advisor | IT Security Advisor

ICT security advisor | information communications technology security consultant | ICT security consultant | IT security expert

ICT security managers | ICT technical security expert | ICT security manager | security coordinator

chief ICT security officers | chief information security officer | chief ICT security officer | fead of IT security

information security [ breach of information security | cybersafety | cyber-safety | cybersecurity | cyber-security | digital safety | information assurance | information security incident | infosec | Internet safety | Internet security | network and Internet security | NIS | [http ...]

data processing system security

Local Informatics Security Officer | LISO [Abbr.]

In order to enhance an advanced level of network and information security in the Union, the Agency should promote cooperation and the exchange of information and best practices between relevant organisations, such as Computer Security Incident Response Teams (CSIRTs) and Computer Emergency Response Teams (CERTs).

Christian HORCHERT, IT-Security Consultant, Germany

The processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring network and information security, i.e. the ability of a network or an information system to resist, at a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted personal data, and the security of the related services offered by, or accessible via, those networks and systems, by public authorities, by computer emergency response ...[+++]teams (CERTs), computer security incident response teams (CSIRTs), by providers of electronic communications networks and services and by providers of security technologies and services, constitutes a legitimate interest of the data controller concerned.

— in the areas of data management, business continuity and IT security, the recommendations of the external consultant are being implemented; calls on the Authority to inform the discharge authority of the further results regarding corrective actions implementation;

22. Acknowledges from the Authority that a number of potential critical risks were identified in the operation of the Authority’s internal controls, particularly in the areas of data management, business continuity and IT security, by a high level risk assessment carried out by an external consultant in 2012 and by the assessment performed by the Commission’s Internal Audit Service (IAS) in February 2013; notes that the Authority started a comprehensive self-assessment of its internal control system in 2012 and that the process of the implementation of corrective actions is on-going; expects the Authority to inform the discharge authorit ...[+++]y of the results of implementation of corrective actions;

Mr Florian WALTHER, Independent IT-Security consultant

However, much more can also be done to: - fight corruption (following-up on the Anti-Corruption Report); - address human trafficking (a post-2016 Strategy should be established); - tackle illicit trafficking in firearms (by reviewing the existing EU legislation on the sale and intra-EU transfers, and stepping up operational cooperation); - respond to cyber security threats (by translating the EU cyber security strategy into action, encouraging all Member State to set up a cybercrime center, continuing the work of the Global Alliance against child sexual abuse online); - prevent terrorism and address radicalisation and recruitment (includ ...[+++]ing through the strengthening of the Radicalisation Awareness Network); - enhance Europe's resilience to major crises and disasters (by improving the interoperability of equipment and communication systems); - address internal security as part of EU external policies and link it to EU assistance and cooperation programmes.

15. Notes that there is no guarantee, either for EU public institutions or for citizens, that their IT security or privacy can be protected from attacks by well-equipped intruders (‘no 100 % IT security’); notes that in order to achieve maximum IT security, Europeans need to be willing to dedicate sufficient resources, both human and financial, to preserving Europe’s independence and self-reliance in the field of IT;

In order to enhance an advanced level of network and information security in the Union, the Agency should promote cooperation and the exchange of information and best practices between relevant organisations, such as Computer Security Incident Response Teams (CSIRTs) and Computer Emergency Response Teams (CERTs).

The European Institutions have also just established their own Computer Emergency Response Team (CERT-EU) to protect the institutions against cyber threats and incidents (see IP/12/949).

On the other hand, for non-IT security experts, leaving security issues to the hands of IT professionals working for the cloud service provider could in fact increase security.

CERT-EU works very closely with the internal IT security teams of the EU institutions and liaises with the community of CERTs and IT security companies in the Member States and elsewhere, exchanging information on threats and how to handle them.

(39) The processing of data to the extent strictly necessary for the purposes of ensuring network and information security, i.e. the ability of a network or an information system to resist, at a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data, and the security of the related services offered by, or accessible via, these networks and systems, by public authorities, Computer Emergency Response Teams – CERTs, Computer Security Incident Response Teams ­­– CSIRTs, providers of electronic communications netw ...[+++]orks and services and by providers of security technologies and services, constitutes a legitimate interest of the concerned data controller.

e) security issues/aspects of information and communication technologies including promotion of online safety, combating cyber crime and misuse of information technology and all forms of electronic media.

(b) On the level of the Commission departments, security is the responsibility of one or more Local Security Officers (LSO), one or more Central Informatics Security Officers (CISO), Local Informatics Security Officers (LISO) and Local EU Classified Information Registries with one or more Registry Control Officers.

(2) The evaluation determines the extent to which the security requirements of a system, or the security claims of a computer security product, are satisfied and establishes the assurance level of the system or of the cryptographic, or the computer security product's trusted function.

(2) The evaluation determines the extent to which the security requirements of a system, or the security claims of a computer security product, are satisfied and establishes the assurance level of the system or of the cryptographic, or the computer security product's trusted function.

(b) On the level of the Commission departments, security is the responsibility of one or more Local Security Officers (LSO), one or more Central Informatics Security Officers (CISO), Local Informatics Security Officers (LISO) and Local EU Classified Information Registries with one or more Registry Control Officers.

(e) security issues and aspects of information and communication technologies including promotion of online safety, combating cyber crime and the misuse of information technology and all forms of electronic media.

The Polish presidency proposed new tasks for the agency, in particular to support and promote voluntary cooperation between Computer Security Incident Response Teams/Computer Emergency Response Teams and to play a supportive role in the organisation of network and information security awareness-raising activities.