The Role Of The Internal Security Agency In Protecting Critical Infrastructure Presented by: Dr. Ocieczek Date: 13 June 2024 Main Assumptions Of The Presentation - Tasks of the Internal Security Agency - IT Security - Espionage and terrorism - Survey Tasks Of Internal Security Agency - Countering terrorism - Counterespionage age - Counter- proliferation - Fighting corruption - Combating organized crime - Combating economic crime - Analysis and information - Protection of classified information IT Security - Act of 21 December 2001 amending the Act on the organization and work mode of the Council of Ministers and the scope of ministers' activities, the Act on divisions of government administration and amending some acts. - Act of 5 July 2018 on the National Cyber Security System Espionage And Terrorism - Article 5(1) (2a) of the Internal Security Agency Act (preventing and detecting crime such as espionage and terrorism). - Article 130 of the Criminal Code, according to which: • "Whoever takes part in the activities of a foreign intelligence service or acts on its behalf, against the Republic of Poland, shall be subject to the penalty of deprivation of liberty for a term not shorter than 5 years" (§ 1). • "Whoever, taking part in the activities of a foreign intelligence service or acting on its behalf, provides this intelligence service with information the transmission of which may cause damage to the Republic of Poland, shall be subject to the penalty of deprivation of liberty for a term not shorter than 8 years or life imprisonment" (§2) • "Whoever declares readiness to act for the benefit of foreign intelligence against the Republic of Poland or in order to provide foreign intelligence with information the transmission of which may cause damage to the Republic of Poland, collects or stores such information or enters an information system in order to obtain it, shall be subject to the penalty of deprivation of liberty for a term of between 6 months and 8 years" (§ 3) - Act on Anti-Terrorist Activities on 10 June 2016 • The powers of the Head of the Internal Security Agency in accordance with Article 9 of the above-mentioned Act:  Head of the Internal Security Agency may order, for a period not longer than 3 months, the discreet conduct of activities with regard to a person who is not a citizen of the Republic of Poland, with regard to whom there is a concern as to the possibility of his/her conducting terrorist activity or committing an offence of espionage, consisting of: o 1.Obtaining and recording the content of conversations conducted by technical means, including by means of telecommunications networks. o 2. Obtaining and recording images or sound of persons from premises, means of transport or places other than public places. o 3. Obtaining and recording the content of correspondence, including correspondence conducted by means of electronic communication, o 4. Obtaining and recording data contained on computer data carriers, telecommunications terminal equipment, information and data communication systems. The Anti-Terrorist Centre (main tasks): - The Anti-Terrorist Centre role is to coordinate the process of information sharing between participants in the counter-terrorism defense system and to implement timely joint response procedures in the event of the occurrence of one of the four categories of defined threat: • 1. a terrorist event on Polish territory affecting the security of Poland and its citizens, • 2. a terrorist event occurring outside the borders of the Republic of Poland, affecting the security of the Republic of Poland and its citizens, • 3. obtain information on potential threats that may occur in Poland and abroad • 4. obtaining information on 'money laundering' or financial transfers that may be indicative of the financing of terrorist activities Survey - - The most expected places of a terrorist attack on EU territory: • Critical infrastructure (39,3%). • Open urban spaces (32.9%). • Tourist infrastructure and sports facilities (14.8%). • Military bases (7.4%). • Government office buildings (5.3%). The biggest technological challenge for services dealing with IT security: • Highly advanced control process automation technologies (35.1%). • Artificial intelligence (26.6%). • Cloud storage (22.3%). • Development of 5G transmission standards (12.7%). • Quantum technology (2.1%). • Encryption of communications (1%).