6WUHV]F]HQLH
Liczba incydentów związanych z bezpieczeĔstwem informacji w administracji publicznej z roku na rok wzrasta. Wedáug „Raportu o stanie bezpieczeĔstwa cyber-przestrzeni RP” w roku 2014 Rządowy Zespóá Reagowania na Incydenty Komputerowe (CERT.GOV.PL) zarejestrowaá ponad trzydziestoprocentowy wzrost liczby zgáoszonych incydentów bezpieczeĔstwa.
W artykule przedstawiono analizĊ porównawczą danych o incydentach związa-nych z bezpieczeĔstwem informacji w Polsce (w oparciu o raporty zespoáów CERT, raport NIK o cyberbezpieczeĔstwie Polski oraz badania wáasne autorów) oraz wybra-nych krajach Unii Europejskiej.
6áRZDNOXF]RZH EH]SLHF]HĔVWZRLQIRUPDFMLV\VWHP\]DU]ąG]DQLDEH]SLHF]HĔVWZHPLQIRUPDFML LQF\GHQW\]ZLą]DQH]EH]SLHF]HĔVWZHPLQIRUPDFML
:SURZDG]HQLH
,QF\GHQW ]ZLą]DQ\ ] EH]SLHF]HĔVWZHP LQIRUPDFML ]RVWDá ]GHILQLRZDQ\ Z QRUPLH ,62,(& MDNRSRMHG\QF]H]GDU]HQLHOXEVHULDQLHSRĪąGDQ\FKOXEQLHVSRG]LHZDQ\FK]GD U]HĔ ]ZLą]DQ\FK ] EH]SLHF]HĔVWZHP LQIRUPDFML NWyUH VWZDU]DMą ]QDF]QH SUDZGRSRGRELHĔVWZR ]DNáyFHQLDG]LDáDĔEL]QHVRZ\FKL]DJUDĪDMąEH]SLHF]HĔVWZXLQIRUPDFML>@7DNLHLQF\GHQW\]GD U]DMą VLĊ ZH ZV]\VWNLFK RUJDQL]DFMDFK UyZQLHĪ Z MHGQRVWNDFK DGPLQLVWUDFML SXEOLF]QHM ,VWQLHMH NLOND DNWyZSUDZQ\FK NWyUH]ZUDFDMą V]F]HJyOQąXZDJĊQD Z\PyJRGSRZLHGQLHJR ]DU]ąG]DQLD EH]SLHF]HĔVWZHPLQIRUPDFMLZW\P]DU]ąG]DQLDLQF\GHQWDPL]ZLą]DQ\PL]EH]SLHF]HĔVWZHPLQ IRUPDFML-HGQ\P]QLFKMHVW5R]SRU]ąG]HQLH5DG\0LQLVWUyZ]GQLDNZLHWQLDUZVSUDZLH .UDMRZ\FK5DP,QWHURSHUDF\MQRĞFLPLQLPDOQ\FKZ\PDJDĔGODUHMHVWUyZSXEOLF]Q\FKLZ\PLDQ\ LQIRUPDFMLZSRVWDFLHOHNWURQLF]QHMRUD]PLQLPDOQ\FKZ\PDJDĔGODV\VWHPyZWHOHLQIRUPDW\F]Q\FK UR]SRU]ąG]HQLH.5, >@=JRGQLH]WHJRUR]SRU]ąG]HQLD]DU]ąG]DQLHEH]SLHF]HĔVWZHPLQ IRUPDFML UHDOL]RZDQH MHVW Z V]F]HJyOQRĞFL SU]H] ]DSHZQLHQLH SU]H] NLHURZQLFWZR SRGPLRWX SXEOLF]QHJRZDUXQNyZXPRĪOLZLDMąF\FKUHDOL]DFMĊLHJ]HNZRZDQLHRNUHĞORQ\FKG]LDáDĔZ\PLHQLR Q\FK Z UR]SRU]ąG]HQLX : ]DNUHVLH LQF\GHQWyZ ]ZLą]DQ\FK ] EH]SLHF]HĔVWZHP LQIRUPDFML SRZLQQ\E\üSRGMĊWHG]LDáDQLDPLQSRSU]H]EH]]ZáRF]QH]JáDV]DQLHLQF\GHQWyZQDUXV]HQLDEH] SLHF]HĔVWZD LQIRUPDFML Z RNUHĞORQ\ L ] JyU\ XVWDORQ\ VSRVyE XPRĪOLZLDMąF\ V]\ENLH SRGMĊFLH G]LDáDĔNRU\JXMąF\FK
3RMĊFLHLQF\GHQWyZ]ZLą]DQ\FK]EH]SLHF]HĔVWZHPLQIRUPDFMLSRMDZLDVLĊUyZQLHĪZRERZLą ]XMąFHMRGUÄ3ROLW\FHRFKURQ\F\EHUSU]HVWU]HQL53´>@RSUDFRZDQHMSU]H]0LQLVWHUVWZR $GPLQLVWUDFML L &\IU\]DFML RUD] $JHQFMĊ EH]SLHF]HĔVWZD :HZQĊWU]QHJR 2FHQD VNXWHF]QRĞFL Ä3ROLW\NL´EĊG]LHGRNRQ\ZDQDQDSRGVWDZLHPLHUQLNyZEH]SRĞUHGQLR]ZLą]DQ\FK]H]JáDV]DQLHP
LREVáXJąLQF\GHQWyZ PLQOLF]ED]DPNQLĊW\FKLQF\GHQWyZZVWRVXQNXGRRJyOQHMOLF]E\VNODV\IL NRZDQ\FK OLF]ED RGSRZLHG]L QD ]JáRV]HQLD VNUyFHQLH F]DVX REVáXJL LQF\GHQWX ĞUHGQL F]DV RGSRZLHG]LQDQLHJR &HOLPHWRGDEDGDZF]D %DGDQLHDQNLHWRZHPLDáRSU]HGHZV]\VWNLPFHOSR]QDZF]\5HVSRQGHQFLE\OLS\WDQLRWRF]\ ZSU]HV]áRĞFL]GDU]Dá\VLĊLQF\GHQW\]ZLą]DQH]EH]SLHF]HĔVWZHPLQIRUPDFMLF]\E\á\RQHUHMHVWUR ZDQHLOHLQF\GHQWyZ]RVWDáR]DUHMHVWURZDQ\FKZURNXLF]\E\á\RQH]JáDV]DQH QSGR&(57*29SURNXUDWXU\LWSMDNZ\JOąGD]DU]ąG]DQLHLQF\GHQWDPLZEDGDQ\FKMHGQRVWNDFK RUD]F]\XU]ĊG\PRJá\OLF]\üQDZVSDUFLHZ]DNUHVLH]DU]ąG]DQLDLQF\GHQWDPL]ZLą]DQ\PL]EH] SLHF]HĔVWZHP LQIRUPDFML ]H VWURQ\ LQQ\FK RUJDQyZ DGPLQLVWUDFML SXEOLF]QHM =DNUHV S\WDĔ ZNZHVWLRQDULXV]XDQNLHW\E\áV]HUV]\ZQLQLHMV]\PDUW\NXOHSUH]HQWXMHP\W\ONRF]ĊĞüZ\QLNyZ EDGDĔGRW\F]ąFąLQF\GHQWyZ]ZLą]DQ\FK]EH]SLHF]HĔVWZHPLQIRUPDFML
:UDPDFKSUDFEDGDZF]\FKSU]HSURZDG]RQRDQDOL]ĊUDSRUWyZ&(57*293/RUD]1,.ED GDQLH DQNLHWRZH ] Z\NRU]\VWDQLHP NZHVWLRQDULXV]D DQNLHW\ XPLHV]F]RQHJR Z ,QWHUQHFLH RUD] DQDOL]ĊUDSRUWyZ&(57]Z\EUDQ\FKNUDMyZ8QLL(XURSHMVNLHM
%DGDQLHDQNLHWRZHSU]HSURZDG]RQRQDSUyELHORVRZHMXU]ĊGyZJPLQ ZW\PJPLQPLHM VNLFKJPLQPLHMVNRZLHMVNLFKLJPLQZLHMVNLFK
:\QLNLEDGDQLD
,QIRUPDFMLROLF]EDFKLQF\GHQWyZ]ZLą]DQ\FK]EH]SLHF]HĔVWZHPLQIRUPDFMLZDGPLQLVWUDFML SXEOLF]QHM GRVWDUF]DMą 5DSRUW\ 5]ąGRZHJR =HVSRáX 5HDJRZDQLD QD ,QF\GHQW\ .RPSXWHURZH &(57*293/ 5DSRUW\5]ąGRZHJR=HVSRáX5HDJRZDQLDQD,QF\GHQW\.RPSXWHURZH &(57*293/ &(57*293/]RVWDáSRZRáDQ\ZFHOX]DSHZQLDQLDLUR]ZLMDQLD]GROQRĞFLMHGQRVWHNRUJDQL ]DF\MQ\FKDGPLQLVWUDFMLSXEOLF]QHM5]HF]\SRVSROLWHM3ROVNLHMGRRFKURQ\SU]HGF\EHU]DJURĪHQLDPL *áyZQ\P]DGDQLHPFHUWJRYSOMHVWNRRUG\QDWRUHPSURFHVXREVáXJLLQF\GHQWyZNRPSXWHURZ\FK Z&\EHUSU]HVWU]HQL53 &53
/LF]ED LQF\GHQWyZ ]ZLą]DQ\FK ] EH]SLHF]HĔVWZHP LQIRUPDFML Z DGPLQLVWUDFML SXEOLF]QHM ]URNXQDURNZ]UDVWD:HGáXJÄ5DSRUWXRVWDQLHEH]SLHF]HĔVWZDF\EHUSU]HVWU]HQL53´ZURNX 5]ąGRZ\=HVSyá5HDJRZDQLDQD,QF\GHQW\.RPSXWHURZH &(57*293/ ]DUHMHVWURZDá ]JáRV]HĔ]NWyU\FK ]RVWDáR]DNZDOLILNRZDQ\FKMDNRIDNW\F]QHLQF\GHQW\'ODSRUyZQDQLD ZURNX]DUHMHVWURZDQ\FKE\áR]JáRV]HĔ]NWyU\FKX]QDQR]DU]HF]\ZLVWHLQF\ GHQW\1DU\VXQNXSU]HGVWDZLRQROLF]E\]JáRV]HĔRUD]IDNW\F]Q\FKLQF\GHQWyZ]DUHMHVWURZDQ\FK SU]H]FHUWJRYSOZODWDFK±>@>@>@> @
Rysunek 1. Liczba zgáoszeĔ oraz faktycznych incydentów zarejestrowanych
przez CERT.GOV.PL ħUyGáR RSUDFRZDQLHZáDVQHQDSRGVWDZLH&(57*293/
: URNX QDMF]ĊĞFLHM ]JáDV]DQ\PL LQF\GHQWDPL E\á\ ERWQHW\ ± VSRĞUyG ZV]\VWNLFK ]JáRV]RQ\FKLQF\GHQWyZ1DVWĊSQąJUXSĊVWDQRZLá\]GDU]HQLD]ZLą]DQH]EáĊGQąNRQILJXUDFMąXU]ą G]HQLDDQDWU]HFLPPLHMVFX±LQF\GHQW\SROHJDMąFHQDVNDQRZDQLXVLHFL1DU\VXQNXZ\PLHQLRQR NDWHJRULLLQF\GHQWyZNWyUHE\á\QDMF]ĊĞFLHM]JáDV]DQHGR&(57*293/=JáRV]HQLDGODSR]R VWDá\FKNDWHJRULLVWDQRZLá\OLF]E\ZV]\VWNLFK]JáRV]HĔ Rysunek 2. Udziaá procentowy poszczególnych kategorii incydentów w zgáoszeniach
zarejestrowanych przez CERT.GOV.PL ħUyGáR RSUDFRZDQLHZáDVQHQDSRGVWDZLH&(57*293/
1DMZLĊFHM]JáRV]HĔGRW\F]\áRVLHFLERWQHW LQF\GHQWyZ 1DMF]ĊĞFLHMZ\VWĊSXMąFHW\S\ ERWQHWyZ NWyUH ]RVWDá\ Z\NU\WH Z LQIUDVWUXNWXU]H DGPLQLVWUDFML SXEOLF]QHM L ]JáRV]RQH GR &(57*293/WR'RZQDGXS&RQILFNHU%B'16=HXV:NROHMQHMNDWHJRULL EáĊGQDNRQILJX UDFMD XU]ąG]HQLD ± WXWDM XZ]JOĊGQLRQR UyZQLHĪ GDQH R SRGDWQRĞFLDFK RUD] EáĊGDFK NRQILJXUDFML DSOLNDFMLEąGĨXU]ąG]HĔVLHFLRZ\FK GXĪ\ZSá\ZQDVWDW\VW\NLPLDá\GDQHRSRGDWQRĞFLDFKVHUZH UyZ'16173DWDNĪHSURWRNRáX6103 áąF]QLH]JáRV]HĔ &(57*293/]DUHMHVWURZDá ]JáRV]HQLD GRW\F]ąFH VNDQRZDQLD VLHFL DWDNyZ LQĪ\QLHULL VSRáHF]QHM RUD] ]JáRV]HĔ Z\QLNDMąF\FK]EáĊGyZDSOLNDFMLLQWHUQHWRZ\FK ZHERZ\FK
5DSRUW\1DMZ\ĪV]HM,]E\.RQWUROL
'DQ\FKRVSRVREDFK]DU]ąG]DQLDEH]SLHF]HĔVWZHPLQIRUPDFMLZW\P]DU]ąG]DQLDLQF\GHQWDPL GRVWDUF]DMąUyZQLHĪUDSRUW\1DMZ\ĪV]HM,]E\.RQWUROL
:URNX1,.SU]HSURZDG]LáNRQWUROĊÄ:GUDĪDQLHZ\EUDQ\FKZ\PDJDĔGRW\F]ąF\FKV\V WHPyZ WHOHLQIRUPDW\F]Q\FK Z\PLDQ\ LQIRUPDFML Z SRVWDFL HOHNWURQLF]QHM RUD] .UDMRZ\FK 5DP ,QWHURSHUDF\MQRĞFLQDSU]\NáDG]LHQLHNWyU\FKXU]ĊGyZJPLQPLHMVNLFKLPLDVWQDSUDZDFKSRZLDWX´ >@ZMHGQRVWNDFK 0LQLVWHUVWZLH$GPLQLVWUDFMLL&\IU\]DFMLRUD]ZZ\EUDQ\FKXU]ĊGDFK JPLQPLHMVNLFKLPLDVWQDSUDZDFKSRZLDWXZZRMHZyG]WZDFK GROQRĞOąVNLPPDáRSROVNLPPD]R ZLHFNLPĞOąVNLPZLHONRSROVNLPL]DFKRGQLRSRPRUVNLP 3RGF]DVNRQWUROL1,.Z\ND]DáOLF]QHQLHSUDZLGáRZRĞFLLRJyOQLHQHJDW\ZQLHRFHQLáG]LDáDQLD ZáDG]PLDVWZ]DNUHVLH]DU]ąG]DQLDEH]SLHF]HĔVWZHPLQIRUPDFML:HGáXJGDQ\FK]UDSRUWXSRNRQ WUROQHJR VSRĞUyG EDGDQ\FK MHGQRVWHN Z VWZLHUG]RQR QLHSUDZLGáRZRĞFL Z W\P REV]DU]H 8U]ĊG\ QLH SRVLDGDá\ FDáRĞFLRZHM 3ROLW\NL %H]SLHF]HĔVWZD ,QIRUPDFML QLHZáDĞFLZLH ]DU]ąG]Dá\ XSUDZQLHQLDPL XĪ\WNRZQLNyZ QLH SU]HSURZDG]Dá\ FRURF]Q\FK DXG\WyZ ZHZQĊWU]Q\FK EH]SLH F]HĔVWZD LQIRUPDFML L QLH SRVLDGDá\ VWRVRZDQ\FK XPyZ QD ]DNXS OXE VHUZLV VSU]ĊWXRSURJUDPRZDQLD ]DZLHUDMąF\FK ]DSLV\ JZDUDQWXMąFH ]DSHZQLHQLH SRXIQRĞFL SU]HWZDU]D Q\FKZQLFKGDQ\FK=GDQLHP1,.QLHUHDOL]RZDá\]DGDĔZ\QLNDMąF\FK]UR]SRU]ąG]HQLD.5,
:]DNUHVLH]DU]ąG]DQLDLQF\GHQWDPLRNWyU\PPyZLXVWSNWUR]SRU]ąG]HQLD.5, VSRĞUyG XU]ĊGyZ Z RSUDFRZDQR L ZGURĪRQR SURFHGXU\ RSLVXMąFH ]DVDG\ SRVWĊSRZDQLD ZSU]\SDGNXZ\VWąSLHQLDLQF\GHQWX]ZLą]DQHJR]EH]SLHF]HĔVWZHPLQIRUPDFMLMHGQDNZXU]Ċ GDFK SURFHGXU\ WH RGQRVLá\ VLĊ W\ONR GR LQF\GHQWyZ ]ZLą]DQ\FK ] SU]HWZDU]DQLHP GDQ\FK RVRERZ\FK
,QQąNRQWUROĊGRW\F]ąFąÄ5HDOL]DFMLSU]H]SRGPLRW\SDĔVWZRZH]DGDĔZ]DNUHVLHRFKURQ\F\ EHUSU]HVWU]HQL´ SU]HSURZDG]RQR Z ODWDFK ± .RQWURORZDQH E\á\ QDVWĊSXMąFH MHGQRVWNL 0LQLVWHUVWZR$GPLQLVWUDFMLL&\IU\]DFML0LQLVWHUVWZR6SUDZ:HZQĊWU]Q\FK$JHQFMĊ%H]SLHF]HĔ VWZD :HZQĊWU]QHJR ± =HVSyá &(57*293/ 0LQLVWHUVWZR 2EURQ\ 1DURGRZHM 8U]ąG .RPXQLNDFML(OHNWURQLF]QHM5]ąGRZH&HQWUXP%H]SLHF]HĔVWZD3ROLFMĊ1DXNRZąL$NDGHPLFNą 6LHü.RPSXWHURZą±=HVSyá&(573ROVND>@.RQWUROHU]\1,.Z\ND]DOLPLQEUDNSURZDG]HQLD VSyMQ\FKLV\VWHPRZ\FKG]LDáDĔ]ZLą]DQ\FK]RFKURQąF\EHUSU]HVWU]HQL53RUD]OLF]QHSUREOHP\ ZUHDOL]DFML]DGDĔZ\QLNDMąF\FK]SRWU]HE\]DSHZQLHQLDEH]SLHF]HĔVWZDF\EHUSU]HVWU]HQL]DSLVD Q\FK PLĊG]\ LQQ\PL Z Ä3ROLW\FH 2FKURQ\ &\EHUSU]HVWU]HQL 53´ :ĞUyG W\FK SUREOHPyZ Z\PLHQLRQR ÄEUDNĞZLDGRPRĞFLQRZ\FK]DJURĪHĔXGHF\GHQWyZSROLW\F]Q\FKLNLHURZQLFWZDDG PLQLVWUDFML U]ąGRZHM RUD] EUDN ]DLQWHUHVRZDQLD NZHVWLDPL EH]SLHF]HĔVWZD ,7 ]H VWURQ\ QDMZDĪQLHMV]\FKRVyEZSDĔVWZLHG]LDáDQLDEH]SU]\JRWRZDQLDLVSyMQHMZL]MLV\VWHPRZHMEUDN
RĞURGND GHF\]\MQHJR L NRRUG\QDF\MQHJR UR]SURV]HQLH NRPSHWHQFML L EUDN ZVSyáSUDF\ LQVW\WXFML SDĔVWZRZ\FKEUDNNRPSOHNVRZ\FKUHJXODFMLSUDZQ\FKQLHZ\NRU]\VW\ZDQLHLVWQLHMąF\FKSU]HSL VyZSU]\MĊFLHSRGHMĞFLDSROHJDMąFHJRQDELHUQ\PRF]HNLZDQLXQDG\UHNW\ZĊ1,6EUDN&(57¶X QDURGRZHJRRUD]EUDNLLZDG\3ROLW\NL2FKURQ\&\EHUSU]HVWU]HQL53´>@:RGQLHVLHQLXGRWHPD W\NLQLQLHMV]HJRDUW\NXáXNRQWURODZ\ND]DáDZQLHNWyU\FKMHGQRVWNDFKEUDN x ]GHILQLRZDQ\FK]DVDGLZ\PDJDĔEH]SLHF]HĔVWZDLQIRUPDFML x NRQWUROLV\VWHPyZWHOHLQIRUPDW\F]Q\FK x NRPSOHNVRZHJRV\VWHPXUHDJRZDQLDQDLQF\GHQW\NRPSXWHURZH x HZLGHQFMRQRZDQLDLQF\GHQWyZ x ]HVSRáX&(57 x ĞZLDGRPRĞFLRERZLą]NyZZ]DNUHVLHRFKURQ\F\EHUSU]HVWU]HQL :\PLHQLRQHLQIRUPDFMHRNRQWURODFK1,.SRWZLHUG]DMąĪHMHGQRVWNLDGPLQLVWUDFMLSXEOLF]QHM PDMąSUREOHP\Z]DNUHVLH]DSHZQLHQLDRGSRZLHGQLHJRSR]LRPXEH]SLHF]HĔVWZDLQIRUPDFMLL]D U]ąG]DQLDLQF\GHQWDPL]ZLą]DQ\PL]EH]SLHF]HĔVWZHPLQIRUPDFML :\QLNLEDGDĔZáDVQ\FK 6SRĞUyGXU]ĊGyZJPLQ]DOHGZLHZLQF\GHQW\PLDá\PLHMVFHQDWRPLDVWZMHGQRVW NDFK E\á\ UHMHVWURZDQH 'DQH R LQF\GHQWDFK NWyUH ]GDU]Dá\ VLĊ Z EDGDQ\FK XU]ĊGDFK JPLQ SU]HGVWDZLRQRZWDEHOL1DOHĪ\SRGNUHĞOLüĪHQLHZV]\VWNLHXU]ĊG\JPLQFKFLDá\XGRVWĊSQLüGDQH ROLF]EDFK]DUHMHVWURZDQ\FKLQF\GHQWyZ
Tabela 1. Incydenty związane z bezpieczeĔstwem informacji w badanych urzĊdach gmin
*PLQ\ /LF]EDXU]ĊGyZ NWyUHUHMHVWURZDá\ LQF\GHQW\ /LF]EDLQF\GHQWyZ ZU /LF]EDLQF\GHQWyZ ZU /LF]EDLQF\GHQWyZ ZU 0LHMVNLH 0LHMVNRZLHMVNLH EUDNGDQ\FK :LHMVNLH 5D]HP ħUyGáR RSUDFRZDQLHZáDVQHQDSRGVWDZLHSU]HSURZDG]RQ\FKEDGDĔ ĩDGHQ]XU]ĊGyZJPLQQLH]JáDV]DáSRZ\ĪV]\FKLQF\GHQWyZGR&(57*293/F]\SURNX UDWXU\1LHZV]\VWNLHXU]ĊG\SRGDá\LQIRUPDFMHRVSRVRELH]DU]ąG]DQLDLQF\GHQWDPL]ZLą]DQ\PL ]EH]SLHF]HĔVWZHP LQIRUPDFML 3RQLĪHM ]DSUH]HQWRZDQR SU]\NáDGRZH RGSRZLHG]L XU]ĊGyZ QD WR S\WDQLH
x Ä3UDFRZQLN SU]H] ZHZQĊWU]Q\ V\VWHP ]JáDV]D ĪąGDQLH XVáXJL OXE LQF\GHQW ± ]HVSyá ,7 SRGHMPXMHG]LDáDQLHVWRVRZQHGR]JáRV]HQLD
x 3URZDG]RQ\MHVW UHMHVWU LQF\GHQWyZ3RZLDGRPLRQ\ MHVWRLQF\GHQFLH $'2$%, $6, =DOHĪQLHRGZDJLLQF\GHQWXVąSRGHMPRZDQHNURNLGRMHJRZ\MDĞQLHQLD
x =JáRV]RQ\LQF\GHQWMHVWUR]SDWU\ZDQ\LRFHQLDQ\F]\MHVWQLHEH]SLHF]Q\3UDFRZQLNNWyU\ ]DZLQLáMHVWSRXF]DQ\
x 2SUDFRZDQRSURFHGXU\E\Z\HOLPLQRZDüLQF\GHQW\ x :\NU\FLH%DGDQLH5HDNFMD=DOHFHQLD0RQLWRULQJ
x ,QVWUXNWDĪZHU\ILNDFMDSURFHVyZSUDNW\F]Q\FKSRXF]HQLH x 0RQLWRULQJV\VWHPX]DEH]SLHF]HĔ x ,QIRUPDFMDRLQF\GHQFLHMHVWSU]HND]\ZDQDSU]H]SUDFRZQLNDEH]SRĞUHGQLHPXSU]HáRĪR QHPXL$GPLQLVWUDWRURZL%H]SLHF]HĔVWZD,QIRUPDFML-HVWRQ]RERZLą]DQ\SU]HSURZDG]Lü SRVWĊSRZDQLHZ\MDĞQLDMąFHLRMHJRZ\QLNDFKSRLQIRUPRZDü$GPLQLVWUDWRUD'DQ\FK x 6SRU]ąG]HQLHQRWDWNLVáXĪERZHMLSU]HGVWDZLHQLHMHMNLHURZQLFWZXZUD]]]DOHFHQLDPL x =JRGQLH],QVWUXNFMą]DU]ąG]DQLDV\VWHPHPLQIRUPDW\F]Q\P x =JáDV]DQLHLQF\GHQWyZ=DEH]SLHF]HQLHGDQ\FK:\MDĞQLDQLHLQF\GHQWX']LDáD QLDQDSUDZF]H x $QDOL]DZ\VWąSLHQLDEáĊGXVNXWNLGODRUJDQL]DFML]DEH]SLHF]HQLHHZHQWXDOQ\FKGRZRGyZ SU]HV]NROHQLHSUDFRZQLNDSRGMĊFLHG]LDáDĔQDSUDZF]\FK´ 8U]ĊG\ZNWyU\FKPLDá\PLHMVFHLQF\GHQW\GHNODUXMąĪHQLHPRJąOLF]\üQDZVSDUFLH]HVWURQ\ LQQ\FKRUJDQyZDGPLQLVWUDFMLSDĔVWZRZHMZ]DNUHVLH]DU]ąG]DQLDLQF\GHQWDPL :SRSU]HGQLFKEDGDQLDFK> @>@>@>@]HEUDQRLQIRUPDFMHRLQF\GHQWDFK]ZLą]DQ\FK ]EH]SLHF]HĔVWZHPLQIRUPDFMLZXU]ĊGDFKPDUV]DáNRZVNLFKLXU]ĊGDFKZRMHZyG]NLFK6SRĞUyG X]\VNDQ\FKRGSRZLHG]L]XU]ĊGyZPDUV]DáNRZVNLFKZXU]ĊGDFKSRMDZLDá\VLĊLE\á\UHMHVWURZDQH LQF\GHQW\]ZLą]DQH]EH]SLHF]HĔVWZHPLQIRUPDFML:SU]\SDGNXXU]ĊGyZZRMHZyG]NLFK]RG SRZLHG]L LQF\GHQW\ PLDá\ PLHMVFH L E\á\ UHMHVWURZDQH Z MHGQRVWNDFK /LF]E\ LQF\GHQWyZ ZEDGDQ\FKXU]ĊGDFKNV]WDáWRZDá\VLĊRGGRZURNX ,QF\GHQW\]ZLą]DQH]EH]SLHF]HĔVWZHPLQIRUPDFMLZZ\EUDQ\FKNUDMDFK 8QLL(XURSHMVNLHM 'ODSRUyZQDQLDGRNRQDQRDQDOL]\LQF\GHQWyZEH]SLHF]HĔVWZDLQIRUPDFMLZZ\EUDQ\FKNUD MDFK 8QLL (XURSHMVNLHM 1LHPF\ 6]ZHFMD (VWRQLD +LV]SDQLD 5XPXQLD :\QLNL ]HVWDZLRQR ZWDEHOL :HZV]\VWNLFKNUDMDFKPRĪQD]DXZDĪ\üZ]URVW]JáRV]HĔZURNXZVWRVXQNXGRXELHJáHJR URNX1LHVWHW\]XZDJLQDUyĪQ\VSRVyERSUDFRZ\ZDQLDUDSRUWyZSU]H]QDURGRZH]HVSRá\&(57 QLHPRĪQDGRNRQDüSRUyZQDQLDZV]\VWNLFKZVNDĨQLNyZ
Tabela 2. Incydenty związane z bezpieczeĔstwem informacji w wybranych krajach UE
.UDM 1D]ZD&(57 &]\SRVLDGD VWUDWHJLĊF\ EHUEH]SLHF] HĔVWZD>@ 'DQHRLQF\GHQWDFK 1LHPF\ &(57
%XQG 7DNURNXRG 5DSRUW]URNX Z]URVWOLF]E\]JáRV]HĔLQF\GHQWyZ]ZLą]DQ\FK]H
VSDPHP Z]URVWZOLF]ELHZLDGRPRĞFLHPDLONWyU\FK]DáąF] QLNL]DZLHUDá\]áRĞOLZHRSURJUDPRZDQLH PLOLRQDWDNyZPDOHZDUHZFLąJXMHGQHJRPLHVLąFD RNRáRPLOLRQNRPSXWHUyZMHVWF]ĊĞFLąVLHFLERWQHW SRQDGW\VDWDNyZ]NDWHJRULL''R6>@ 6]ZHFMD &(576( 1LH 'DQH]UDSRUWX.30*]URNX Z6]ZHFMLQLHLVWQLHMąSU]HSLV\Z\PDJDMąFHRERZLą]NR ZHJR]JáDV]DQLDLQF\GHQWyZ QDMQLĪV]\VWRSLHĔ]DLQIHNRZDQLDSU]H]]áRĞOLZHRSURJUD PRZDQLH Z\QRVL RQ SRGF]DV JG\ ĞUHGQLD ĞZLDWRZDWR
ZĞUyG URG]DMyZ ]áRĞOLZHJR RSURJUDPRZDQLD NWyUH ]R VWDáR Z\NU\WH SRGF]DV EDGDQLD QDMOLF]QLHMV]ą JUXSĊ VWDQRZLá\ RELHNW\W\SX %RWQHW RUD]7URMDQ 1DMPQLHMOLF]QLHUHSUH]HQWRZDQąJUXSąVąZLUXV\ >@ (VWRQLD &(57(( 7DN RG URNX MDNRMHGQR] SLHUZV]\FK SDĔVWZ QR ZHOL]DFMD Z URNX 'DQH]UDSRUWX] LQF\GHQWyZ]DUHMHVWURZDQ\FKZURNXZW\P W\SX'R6 ]QDF]ąF\Z]URVWLQF\GHQWyZZLQVW\WXFMDFKU]ąGRZ\FK Z]DUHMHVWURZDQRLQF\GHQWyZZU QDMZLĊNV]ą JUXSĊ VWDQRZLá\ LQF\GHQW\ R SULRU\WHFLH QLVNLP L ĞUHGQLP RGSRZLHGQLR L ZV]\VWNLFK LQF\GHQWyZ]JáDV]DQ\FKSU]H]LQVW\WXFMHU]ąGRZH>@ +LV]SDQLD ,17(&2 &(57 L &&1 &(57 7DN RG URNX 'DQH]URNX]&11&(57
]DUHMHVWURZDQR LQF\GHQWyZ Z URNX ZU QDMZLĊNV]ąJUXSĊVWDQRZLá\]JáRV]HQLDR]áRĞOLZ\PRSUR JUDPRZDQLX±NROHMQDNDWHJRULD ZáDPDQLH± ]JáRV]HĔ QDMOLF]QLHMUHMHVWURZDQHE\á\DWDNLRSULRU\WHFLHZ\VRNLP >@ 5XPXQLD &(57 52 7DN RG URNX 'DQH]URNX]&(5752 OLF]EDDOHUWyZ ZU QDMF]ĊĞFLHMZ\VWĊSXMąFąNDWHJRULąLQF\GHQWyZE\á\WHZ\ NRU]\VWXMąFH VáDERĞFL V\VWHPXVLHFL QDVWĊSQLH VLHFL ERWQHW EH]SUDZQH X]\VNDQLH LQIRUPDFML ]áRĞOLZH RSURJUDPRZDQLH L F\EHUDWDNL >@
3RGVXPRZDQLH
3RUD]NROHMQ\ W\PUD]HPZSU]\SDGNXXU]ĊGyZJPLQ Z\ND]DQRĪHZZLĊNV]RĞFLXU]ĊG\ DGPLQLVWUDFMLSXEOLF]QHMQLHUHMHVWUXMąLQF\GHQWyZ]ZLą]DQ\FK]EH]SLHF]HĔVWZHPLQIRUPDFML$WH XU]ĊG\ NWyUH SURZDG]ą GRNXPHQWDFMĊ Z\ND]XMą Z UDSRUWDFK EDUG]R PDáH OLF]E\ LQF\GHQWyZ :RGQLHVLHQLXGRZ\QLNyZGODXU]ĊGyZJPLQ]DOHGZLHXU]ĊGyZ]HGRNRQ\ZDáRUHMHVWUDFML ]GDU]HĔZVXPLHSU]H]WU]\ODWDZXU]ĊGDFKZ\VWąSLá\LQF\GHQW\:\QLNDüWRPRĪH]NLONX SU]\F]\Q x XU]ĊG\UHMHVWUXMąW\ONRQDMSRZDĪQLHMV]H]GDU]HQLD x XU]ĊG\QLHFKFąXGRVWĊSQLüLQIRUPDFMLRU]HF]\ZLVWHMOLF]ELHLQF\GHQWyZ x XU]ĊG\DGPLQLVWUDFMLVDPRU]ąGRZHM ]ZáDV]F]DWHPQLHMV]H QLHVąQDUDĪRQHDĪQDWDN ZLHOHDWDNyZFRXU]ĊG\DGPLQLVWUDFMLU]ąGRZHM $QDOL]DGDQ\FK]SRV]F]HJyOQ\FKXU]ĊGyZJPLQQLHZVND]XMHUyZQLHĪWHQGHQFMLZ]URVWRZHM SU]\RJyOQ\PZ]URĞFLHOLF]E\LQF\GHQWyZ]ZLą]DQ\FK]EH]SLHF]HĔVWZHPLQIRUPDFMLZ\ND]\ZD Q\PZUDSRUWDFK5]ąGRZHJR=HVSRáX5HDJRZDQLDQD,QF\GHQW\.RPSXWHURZH 1DSRGVWDZLHXG]LHORQ\FKRGSRZLHG]LPRĪQD]DXZDĪ\üĪHZLĊNV]RĞüXU]ĊGyZQLH]DU]ąG]D LQF\GHQWDPLZHZáDĞFLZ\VSRVyE1LHNWyUHEDGDQHMHGQRVWNLREVáXJXMąW\ONRLQF\GHQW\]ZLą]DQH ]EH]SLHF]HĔVWZHPGDQ\FKRVRERZ\FK8U]ĊG\NWyUHQLHSRVLDGDMąZGURĪRQHJRV\VWHPX]DU]ąG]D QLDLQF\GHQWDPLSRZLQQ\MDNQDMV]\EFLHMSRGMąüWDNLHG]LDáDQLDE\PyFSUDZLGáRZRREVáXJLZDü SRMDZLDMąFHVLĊZSU]\V]áRĞFL]GDU]HQLD 3RPLPRĪHOLF]EDLQF\GHQWyZE\áDVWRVXQNRZRQLHZLHONDZ\VWĊSRZDá\SUREOHP\]SUDZLGáR Z\PUHDJRZDQLHPLSURFHVHP]DU]ąG]DQLDQLPL 3RWZLHUG]DMąWRUDSRUW\1,.ZHGáXJNWyU\FKZZLHOXMHGQRVWNDFKQLHPDZGURĪRQHJRNRP SOHNVRZHJRV\VWHPXUHDJRZDQLDQDLQF\GHQW\NRPSXWHURZHQLHPD]HVSRáyZ&(57DLQF\GHQW\ QLHVąUHMHVWURZDQH-HGQ\P]SRVWXODWyZ1,.MHVWRSUDFRZDQLHSURFHGXUGRW\F]ąF\FK]JáDV]DQLD LQF\GHQWyZQLHW\ONR]ZLą]DQ\FK]]DJURĪHQLHPGDQ\FKRVRERZ\FKDOHUyZQLHĪLQQ\FKGDQ\FK SU]HWZDU]DQ\FKZXU]ĊGDFK7DNąV\WXDFMĊSRWZLHUG]DMąUyZQLHĪZ\QLNLEDGDĔ±ZZLHOXEDGDQ\FK MHGQRVWNDFKREVáXJLZDQHVąLQF\GHQW\]ZLą]DQHW\ONR]RFKURQąGDQ\FKRVRERZ\FK
7HQGHQFMĊ Z]URVWRZą OLF]E\ LQF\GHQWyZ PRĪQD ]DXZDĪ\ü QLH W\ONR Z 3ROVFH DOH UyZQLHĪ ZNUDMDFK8QLL(XURSHMVNLHMPLĊG]\LQQ\PLZDQDOL]RZDQ\FKZUDPDFKQLQLHMV]HJRDUW\NXáXSDĔ VWZDFK 1LHPF\ +LV]SDQLD (VWRQLD 5XPXQLD L 6]ZHFMD : NUDMDFK 8( Z\VWĊSXMą UyZQLHĪ SUREOHP\Z]DNUHVLH]DU]ąG]DQLDLQF\GHQWDPLZ\QLNDMąFH]EUDNXZGURĪHQLDQSVWUDWHJLLF\EHUEH] SLHF]HĔVWZD QS6]ZHFMD%XáJDULD&KRUZDFMD'DQLD,UODQGLD $QDOL]ĊSRUyZQDZF]ąGDQ\FKGOD 8QLL(XURSHMVNLHMXWUXGQLDIDNWĪHQLHZV]\VWNLHSDĔVWZDSRVLDGDMąRERZLą]HNUHMHVWURZDQLDLQF\ GHQWyZ QS 6]ZHFMD ,UODQGLD = GUXJLHM VWURQ\ QLH PD MHGQDNRZ\FK V]DEORQyZ UDSRUWyZ LNODV\ILNDFMLLQF\GHQWyZFRXWUXGQLDDQDOL]ĊSRUyZQDZF]ąGDQ\FK]SDĔVWZNWyUHWDNLHUDSRUW\ VSRU]ąG]DMą
:UDPDFKGDOV]\FKSUDFEDGDZF]\FKSU]HZLG]LDQHMHVWEDGDQLHGRW\F]ąFHVSRVREyZ]DU]ąG]D QLDEH]SLHF]HĔVWZHPLQIRUPDFMLZSR]RVWDá\FKMHGQRVWNDFKDGPLQLVWUDFMLSXEOLF]QHM
%LEOLRJUDILD
>@ %LHĔNRZVNL 0 G\UHNWRU 'HSDUWDPHQWX 3RU]ąGNX L %H]SLHF]HĔVWZD :HZQĊWU]QHJR 1,. 5HDOL]DFMDSU]H]SRGPLRW\SDĔVWZRZH]DGDĔZ]DNUHVLHRFKURQ\F\EHUSU]HVWU]HQL:VWĊSQH :\QLNL .RQWUROL :DUV]DZD U 0DWHULDá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±6HFXULW\WHFKQLTXHV±,QIRUPDWLRQVHFXULW\ PDQDJHPHQWV\VWHPV±2YHUYLHZDQGYRFDEXODU\
> @ /LVLDN)HOLFND'6]PLW0Information Security Management Systems In Marshal Offices In PolandÄ,QIRUPDWLRQ6\VWHPV,Q0DQDJHPHQW´YRO SS±
>@ /LVLDN)HOLFND ' 6]PLW 0 Selected Apects of Information Security Management in Voivodeship Office in PolandÄ6HFXULWRORJLD´ SS±
>@ /LVLDN)HOLFND ' 6]PLW 0 :ybrane aspekty zarządzania bezpieczeĔstwem informacji w urzĊdach marszaákowskich6HFXULWRORJLDSS ±
>@ /LVLDN)HOLFND'6]PLW0 Information security incidents management in marshal offices and voivodeship offices in Poland 6WXGLHV 3URFHHGLQJV RI 3ROLVK $VVRFLDFLRQ IRU .QRZOHGJH0DQDJHPHQW9ROXPH%\GJRV]F]SS±
>@ 0LQLVWHUVWZR $GPLQLVWUDFML L &\IU\]DFML Polityka Ochrony Cyberprzestrzeni Rzeczypospolitej Polskiej:DUV]DZD
>@ 1,. ,QIRUPDFMD R Z\QLNDFK NRQWUROL :GUDĪDQLH Z\EUDQ\FK Z\PDJDĔ GRW\F]ąF\FK V\VWHPyZ WHOHLQIRUPDW\F]Q\FK Z\PLDQ\ LQIRUPDFML Z SRVWDFL HOHNWURQLF]QHM RUD] .UDMRZ\FK 5DP ,QWHURSHUDF\MQRĞFL QD SU]\NáDG]LH QLHNWyU\FK XU]ĊGyZ JPLQ PLHMVNLFK LPLDVWQDSUDZDFKSRZLDWXOXW\KWWSV ZZZQLNJRYSONRQWUROH3> @
>@ 5R]SRU]ąG]HQLH 5DG\ 0LQLVWUyZ ] GQLD NZLHWQLD U Z VSUDZLH .UDMRZ\FK 5DP ,QWHURSHUDF\MQRĞFLPLQLPDOQ\FKZ\PDJDĔGODUHMHVWUyZSXEOLF]Q\FKLZ\PLDQ\LQIRUPDFML Z SRVWDFL HOHNWURQLF]QHM RUD] PLQLPDOQ\FK Z\PDJDĔ GOD V\VWHPyZ WHOHLQIRUPDW\F]Q\FK ']8SR]
>@ 5]ąGRZ\=HVSyá5HDJRZDQLD1D,QF\GHQW\.RPSXWHURZH FHUWJRYSO Raport o stanie bezpieczeĔstwa cyberprzestrzeni RP w 2014 r.:DUV]DZD
KWWS ZZZFHUWJRYSOFHUSXEOLNDFMHUDSRUW\RVWDQLHEH]SL5DSRUWRVWDQLH EH]SLHF]HQVWZDF\EHUSU]HVWU]HQL53ZURNXKWPO>@
>@ 5]ąGRZ\=HVSyá5HDJRZDQLD1D,QF\GHQW\.RPSXWHURZH FHUWJRYSO Raport o stanie bezpieczeĔstwa cyberprzestrzeni RP w 2013 r.:DUV]DZD
KWWS ZZZFHUWJRYSOFHUSXEOLNDFMHUDSRUW\RVWDQLHEH]SL5DSRUWRVWDQLH EH]SLHF]HQVWZDF\EHUSU]HVWU]HQL53ZURNXKWPO>@
>@ 5]ąGRZ\ =HVSyá 5HDJRZDQLD 1D ,QF\GHQW\ .RPSXWHURZH FHUWJRYSO Raport o stanie bezpieczeĔstwa cyberprzestrzeni RP w 2012 r. :DUV]DZD KWWS ZZZFHUWJRYSO SRUWDOFHU5DSRUWBRBVWDQLHBEH]SLHF]HQVWZDBF\EHUSU]HVWU]HQLB53BZBBURNXKW PO>@
> @ 5]ąGRZ\ =HVSyá 5HDJRZDQLD 1D ,QF\GHQW\ .RPSXWHURZH FHUWJRYSO Raport o stanie bezpieczeĔstwa cyberprzestrzeni RP w 2011 r. :DUV]DZD KWWS ZZZFHUWJRYSO FHUSXEOLNDFMHUDSRUW\RVWDQLHEH]SL 5DSRUWRVWDQLHEH]SLHF]HQVWZD
F\EHUSU]HVWU]HQL53ZURNXKWPO>@
,1)250$7,216(&85,7<,1&,'(176,138%/,&$'0,1,675$7,21,132/$1' 6XPPDU\
The number of information security incidents in public administration increases from year to year. According to the “Report of Polish cyberspace security status” in the year 2014, The Governmental Computer Security Incident Response Team (CERT.GOV.PL) registered over 30 percent increase in the number of notified infor-mation security incidents.
The article presents a comparative analysis of information security incidents in Poland (based on CERTs reports, Supreme Audit Office cyber security reports and research conducted by authors) and selected EU countries.
.H\ZRUGV LQIRUPDWLRQVHFXULW\LQIRUPDWLRQVHFXULW\PDQDJHPHQWV\VWHPVLQIRUPDWLRQVHFXULW\ LQFLGHQWV 'RPLQLND/LVLDN)HOLFND .DWHGUD,QIRUPDW\NL(NRQRPLF]QHM :\G]LDá(NRQRPLF]QR6RFMRORJLF]Q\ 8QLZHUV\WHWàyG]NL HPDLO GRPLQLNDOLVLDN#JPDLOFRP 0DFLHM6]PLW 2UDQJH/DEV3RODQG HPDLO PDFLHMV]PLW#JPDLOFRP
