哈佛网络安全战役剧本欧洲版英文版2108538页

TheCybersecurityCampaignPlaybookEuropeanEditionInternationalRepublicanInstituteAdaptedinpartnershipwithDEFENDINGDIGITALDEMOCRACYMAY2018DefendingDigitalDemocracyProjectBelferCenterforScienceandInternationalAffairsHarvardKennedySchool79JFKStreetCambridge,MA02138:TheNationalDemocraticInstitute:ASloveniancastshisballotinaboxbearingaEuropeanUnioncrestatapollingstationinGrosupljenearLjubljana,Sunday,Oct.3,2004.NationwidegeneralelectionsaretakingplaceinSloveniaonSunday.SloveniajoinedtheEUandNATOearlierthisyea.(APPhoto/DarkoBandic)Copyright2018,PresidentandFellowsofHarvardCollegeHarvardKennedySchool/DefendingDigitalDemocracy/EuropeanVersion:May22,20181TheCybersecurityCampaignPlaybookTheCybersecurityCampaignPlaybookEuropeanEditionDEFENDINGDIGITALDEMOCRACYMAY2018ContentsWelcome........................................................................................................3AuthorsandContributors...................................................................................................................5ThePlaybookApproach......................................................................................................................6Introduction.................................................................................................6TheVulnerableCampaignEnvironment.............................................................................................8TheThreatsCampaignsFace..............................................................................................................9ManagingCyberRisk................................................................................10SecuringYourCampaign..........................................................................11TopFiveChecklist.....................................................................................13StepstoSecuringYourCampaign..........................................................14Step1:TheHumanElement............................................................................................................14Step2:Communication....................................................................................................................17Step3:AccountAccessandManagement.....................................................................................21Step4:IncidentResponsePlanning................................................................................................24Step5:Devices..................................................................................................................................28Step6:Networks...............................................................................................................................31Step7:InformationOperationsandPublicFacingCommunication............................................333HarvardKennedySchool/DefendingDigitalDemocracy/EuropeanVersion:May22,2018WelcomePeoplejoincampaignsfordifferentreasons:electingaleadertheybelievein,advancinganagenda,cleaningupgovernment,orexperiencingtherushandadrenalineofcampaignlife.Thesearesomeofthereasonswegotinvolvedinpolitics.Wecertainlydidn’tsignupbecausewewantedtobecomecyberexpertsandwe’reguessingyoudidn’teither.Unfortunately,securitythreatsareincreasingandhavethepowertototallyupsetyourcampaign.Wecomefromtheworldofcampaignsandsupportinginternationaldemocraticprocesses,andhaveseenfirst-handthewaysinwhichhacking,disinformationandwebsitetakedownscanaffectthecourseofanelection—andthedirectionofacountry.D3Pisabipartisanteamofcybersecurityandpolicyexpertsfromthepublicandprivatesectors,aswellasexpertswithdeepexperienceinpoliticalcampaigns.Forthisedition,wepartneredwiththeInternationalRepublicanInstitute(IRI)andtheNationalDemocraticInstitute(NDI)tobetterunder-standtheEuropeanelectionlandscapeandhowtothinkaboutandprotectagainstdigitalrisks.Wecomefromdifferentpoliticalpartiesanddon’tagreeonmuchwhenitcomestopublicpolicy,butonethingunitingusisthebeliefthatvotersshoulddecideourelectionsandnooneelse.Ourincreasinglydigitalwayoflivingandworkingoffersnewwaysforadversariestoinfluenceourcampaignsandelections.Whileyoudon’tneedtobeacyberexperttorunasuccessfulcampaign,youdohavearesponsibilitytoprotectyourcandidateandorganizationfromadversariesinthedigitalspace.That’swhyDefendingDigitalDemocracy,aprojectofHarvardKennedySchool’sBelferCenterforScienceandInternationalAffairs,createdtheoriginalCybersecurityCampaignPlaybook[PDF].TheNationalDemocraticInstitute,InternationalRepublicanInstituteanddozensofelectedofficials,securityexpertsandcampaignprofessionalsworkedwiththeDefendingDigitalDemocracyProjecttoadaptthisplaybookforabroaderinternationalcontext.Theinformationassembledhereisforanycampai