1
Information Sheet
Ref. No: J0-TR-51611
Title: Regional Training Course on Information and Computer Security Advanced Practices for Nuclear Security
Place: Karlsruhe, Germany Dates: 19–23 October 2015 Deadline for
Nominations:
17 August 2015
Organizers: The International Atomic Energy Agency (IAEA) in cooperation with the Government of Germany through the Center for Advanced Technological and Environmental Training (FTU) of the Karlsruhe Institute of Technology (KIT). Languages: The course will be held in English.
Participation: The course is open to a maximum of 45 participants.
Participants should possess a working knowledge of and/or have responsibilities in the area of computer security relevant to nuclear security in facilities that handle nuclear and other radioactive material or associated facilities and transport operations. The course is designed to provide advanced awareness training on emerging cyber threats and the corresponding information and computer security measures for facilities that handle nuclear and other radioactive material. The course will address both policy development guidelines and best practices for the implementation of specific measures. Thus, the course should be beneficial to both managers and computer security practitioners.
It is desirable, but not essential, that the participants should have had previous training on computer security at nuclear facilities.
As the course will be conducted in English, participants should have sufficient proficiency to follow lectures and express themselves in that language without difficulty.
Invited Countries:
Austria, Belgium, Czech Republic, Finland, France, Germany, Greece, Hungary, Italy, Lithuania, Netherlands, Norway, Poland, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey, and the United Kingdom.
Objectives: The course will bring together delegates from a number of IAEA Member States in the region that have expressed an interest in developing and enhancing computer security programmes at facilities that handle nuclear and other radioactive material. The objectives of the course are as follows:
• Raise awareness of the importance of information and computer security interfaces with other elements of security;
2
• Help practitioners identify threats and risks associated with information and computer systems that are relevant to nuclear and associated facilities; • Help organizations refine their information and computer security goals,
policies and programme implementation;
• Help identify sensitive information and equipment/systems and apply controls to conform to regulations and best practices;
• Help implement assurance activities, including assessment and exercise activities; and
• Capture and share lessons learned from implementing information and computer security across nuclear and associated facilities.
Nature of the Course:
The course is designed as interactive training and will consist of lectures and class exercises based on IAEA Nuclear Security Series guidance documents, most notably Computer Security at Nuclear Facilities (IAEA Nuclear Security Series No 17, Vienna, 2011). The class will also conduct a tabletop exercise as part of the training to raise awareness of computer security incident response processes. By the end of the course, it is expected that the participants will:
• Possess a full understanding of the unique environment surrounding information and computer security within nuclear and associated facilities; • Have the basic knowledge to conduct a cyber threat assessment as part of an
organization or facility security plan;
• Have a detailed understanding of the processes and best practices for identifying computer assets and developing a graded approach for protection; • Be able to implement or audit regulations and best practices to ensure nuclear
security-relevant information and computer security;
• Have an understanding of, and the basis for implementing, a computer security incident response plan; and
• Be able to construct and conduct computer security exercises as part of a nuclear security assurance activity.
Application Procedure:
Nominations should be submitted on the attached standard IAEA Nomination Form. Completed forms should be endorsed by the competent national authority (e.g. Ministry of Foreign Affairs, Permanent Mission to the IAEA, or National Atomic Energy Authority) and returned through the established official channels. The completed forms should be sent for the attention of Mr Michael Rowland and Ms Lilly Gundacker via the IAEA’s official fax (+43 1 26007) or email ([email protected]), not later than 17 August 2015. Nominations which have not been routed through the established official channels cannot be considered. Nominating Governments will be informed in due course of the candidates selected and will be given full details of the procedure to be followed with regard to administrative and financial arrangements.
Administrative and Financial Arrangements
3
Governments would be well advised to take out insurance against these risks.
Host Country Organizer:
Mr Torsten Neck
Karlsruher Institut für Technologie – KIT
Fortbildungszentrum für Technik und Umwelt – FTU Campus Nord Hermann-von-Helmholtz-Platz 1 76344 EGGENSTEIN-LEOPOLDSHAFEN GERMANY Tel.: +49 721 608 2 4421 Fax: +49 721 608 2 4857 Email: [email protected] IAEA Scientific Secretary: Mr Michael T Rowland
Information Management Section Division of Nuclear Security
Department of Nuclear Safety and Security International Atomic Energy Agency Vienna International Centre
PO Box 100 1400 VIENNA AUSTRIA Tel.: +43 1 2600 26073 Fax: +43 1 26007 Email: [email protected] IAEA Administrative Coordinator: Ms Lilly Gundacker
Information Management Section Division of Nuclear Security
Department of Nuclear Safety and Security International Atomic Energy Agency Vienna International Centre
DEAD
INTERNATIONAL ATOMIC
ENERGY AGENCY
NOMINATION FORM FOR:
Regional Training Course on Information and Computer Security Advanced Practices for Nuclear Security
Ref. No: J0-TR-51611
The Government
of:………...
nominates the following candidate for the Regional Training Course on Information and Computer Security Advanced Practices for
Nuclear Security, Karlsruhe, Germany, 19–23 October 2015:
……… ……… ……… Family name: (as in passport) Date of birth:
First name: Place of birth:
Complete mailing address (office): Nationality: Passport No.:
Date/Place of issue: Recent photograph
Valid until: of candidate
Telephone (office): Fax:
Email:
EDUCATION (commencing with secondary school)
Years attended Name and place of institution Field of study Diploma or degree
from to
RECENT EMPLOYMENT RECORD
Years of service Name and place of Title of position Type of work from to employer/organization
DESCRIPTION OF WORK
Type of work done by the candidate during the past three years (Please attach list of any material the candidate may have published)
RELEVANCE OF THE MEETING
-2-
LANGUAGE CERTIFICATE
I, as a qualified language examiner, hereby certify that I have examined the above candidate and give the following information on his/her language qualification
(a) Mother tongue of the candidate: (b) Other languages:
(c) Language of the course: English (d) Proficiency in the language of the course:
Read
Write Speak Understand
[ ] Good [ ] Good [ ] Good [ ] Good
[ ] Average [ ] Average [ ] Average [ ] Average
[ ] Poor [ ] Poor [ ] Poor [ ] Poor
Date Name (printed) and signature of examiner
MEDICAL CERTIFICATE
I, as a qualified medical doctor, hereby certify that I have examined the above candidate and found him/her in good health, free from infectious diseases and able physically and mentally to carry out any relevant duties away from his/her home.
Date Name (printed) and signature of examining physician
GOVERNMENT STATEMENT
The nominating Government gives the following assurances: (a) All information supplied in this form is complete and correct;
(b) Should the candidate's language qualification prove to be insufficient or should the candidate's state of health not correspond to the examining physician's statement, the nominating Government will accept the responsibility for the consequences and any costs arising therefrom;
(c) It is noted that the sponsoring organization(s), host country and host institution(s) do not accept liability for the payment of any costs or compensation arising from damage to or loss of personal property, or from illness, injury, disability or death of a participant while he/she is travelling to and from or attending the course, and it, the nominating Government, undertakes the responsibility for such coverage; (d) The position of the candidate will be retained for him/her and he/she will continue to receive during the course a salary and related
emoluments to enable him/her to meet his/her financial commitments in his/her home country;
(e) If selected the nominee will conduct himself/herself in a manner compatible with his/her status as a participant and will refrain from engaging in any political and commercial activities;
(f) No facts are known to the Government as regards the reliability and character of the candidate that would militate against the granting of access to nuclear installations.
DEAD
ANNEX TO NOMINATION FORM
Regional Training Course on Information and Computer Security Advanced Practices for Nuclear Security
Karlsruhe, Germany, 19 – 23 October 2015
Personal Information Form
Candidate’s Name: ___________________________________________________________
AS IT APPEARS ON THE PASSPORT (please attach a copy of passport’s front page)
Gender: ___________________________________________________________________
Date of Birth: ______________________________________________________________
Day Month Year
Place of Birth: ______________________________________________________________
City Province Country
Nationality:_________________________________________________________________
Primary AND Secondary (if Dual Citizenship)
Passport Number: _____________________________Date of Expiry:_______________________
Telephone Number Office: _____________________________________________________
Fax Number: _______________________________________________________________
Email Address: _____________________________________________________________
Employer’s Name: ___________________________________________________________
Employer’s Address___________________________________________________________
Street___________________________________________________________________________
City Country Postal Code
Candidate’s Position/Title: _____________________________________________________
Type of Work: _____________________________________________________________
Home Address: _____________________________________________________________
___________________________________________________________________________
City Country Postal Code