Ulusal Siber Güvenlik Stratejisi: Fransa

Year 2022, Volume: 3 Issue: 1, 42 - 78, 01.03.2022

Ahmet Emre Köker

Abstract

Siber uzaya yönelik risk ve tehditler çoğaldıkça, siber güvenlik ve savunma konuları Fransa için önemli bir politika alanı haline gelmiştir. Uluslararası ilişkilerde beşinci boyut alanı olarak kabul edilen siber ortamda, Fransa, rakiplerinin gerisinde kalmıştır. Aynı zamanda, Fransa, söz konusu rakiplerini yakalamak, tehditleri bertaraf etmek, gerekli reformları gerçekleştirmek, siber ortamda küresel liderliği sağlamak gibi amaçlar doğrultusunda ulusal güvenlik stratejilerini belirleyerek doktrin geliştirme çabasına girmiştir. Bu makale, Fransa’nın ulusal siber güvenlik ve savunma politikalarının kavramsal temeline, geliştirilen strateji ve doktrinlere, uluslararası ilişkilerde gerçekleştirilen ikili ilişkilere, kurumsal yapının en önemli unsurlarına, kritik noktalara yönelik gerçekleştirilen siber saldırılara, son olarak siber çabalara ve girişimlere genel bir bakış sunmaktadır. Makale, Fransa’nın siber güvenlik stratejini incelemeye yönelik gerçekleştirilecek araştırmalar için bir başlangıç sağlamayı amaçlamaktadır. Bu amaç doğrultusunda, makale, Ulusal Bilgi Sistemleri Güvenlik Ajansı (L’Agence nationale de la sécurité des systèmes d’information-ANSSI) ile Savunma ve İçişleri Bakanlıklarının (MOD ve MOI) çabalarına odaklanmaktadır. Söz konusu çalışma gerçekleştirilirken, Fransa’nın siber güvenlik ve savunma politikalarını belirleyen kurumlar ve kişiler özelindeki tüm aktörlerin birincil (resmi belgeler ve üst düzey devlet yetkilileri tarafından yapılan açıklamalar ile yasal mevzuat) ve ikincil kaynaklarına (kitaplar, tezler, akademik makaleler, haberler ve bu konuda yazılmış analizler) odaklanılarak analiz gerçekleştirilmiştir.

Keywords

Siber Güvenlik, Siber Savunma, Fransız Siber Savunma ve Güvenlik Politikaları, Ulusal Güvenlik ve Savunma Organizasyonu, ANSSI

References

• • Agence Nationale De La Sécurité Des Systèmes D’information (2021), “The National Cybersecurity Agency Of France”, Erişim Tarihi: 07.11.2021, Erişim Adresi: https://www.ssi.gouv.fr/en/cybersecurity-in-france/the-national-cybersecurity-agency-of-france/.
• • Agence Nationale De La Sécurité Des Systèmes D’information (2021), “International Agreements”, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.ssi.gouv.fr/en/certification/common-criteria-certification/international-agreements/.
• • Anadolu Ajansı (2021), “5 Fransız Bakanın Telefonunda Casus Yazılım Pegasus'un İzi Bulundu”, 24.09.2021, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.gazeteduvar.com.tr/5-fransiz-bakanin-telefonunda-casus-yazilim-pegasusun-izi-bulundu-haber-1536117.
• • Ardisson, Alexandra Valetta & Lachaud, Bastien (2018), “Filed In Application of Article 145 of the Rules, By the Commission for National Defense and the Armed Forces, In Conclusion of the Work of a Cyber Defense Information Mission”, National Assembly, 04.07.2018, Erişim Tarihi: 29.10.2021, Erişim Adresi: http://www2.assemblee-nationale.fr/documents/notice/15/rap-info/i1141/#P439_94811.
• • Baumard, Philippe (2017), Cybersecurity in France, Springer, ss. 56-65.
• • Bliddal, Henrik & Vitel, Philippe (2015), “French Cyber Security and Defence: An Overview, Vitel and Bliddal”, Information and Security: An International Journal, Cilt 32, ss.1-13, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://connections-qj.org/system/files/3209_france.pdf.
• • Bockel, Jean-Marie (2012), “Report on behalf of the Foreign Affairs, Defense and Armed Forces Committee”, Erişim Tarihi: 02.11.2021, Erişim Adresi: https://www.senat.fr/rap/r11-681/r11-681.html.
• • Cerulus, Laurens (2021), “France Wants Cyber Rule To Curb US Access To EU Data”, Politico, 13.10.2021, Erişim Tarihi: 31.10.2021, Erişim Adresi: https://www.politico.eu/article/france-wants-cyber-rules-to-stop-us-data-access-in-europe/.
• • ComCyber (2021), “GDA Tisseyre: On Est 3400 Cybercombattants et on Deviendra 4500 en 2025”’, @ComcyberFR on Twitter, 12.10.2019, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://twitter.com/ComcyberFR/status/1172186486134968322.
• • De León Cobo, Beatriz (2020), “The Keys To Understanding French Cyber-Strategy And Its Risks”, Atalayar, 22.10.2020, Erişim Tarihi: 30.10.2021, Erişim Adresi: https://atalayar.com/en/content/keys-understanding-french-cyber-strategy-and-its-risks.
• • Delerue, François & Desforges, Alix & Géry, Aude (2019), “A Close Look at France’s New Military Cyber Strategy”, War On The Rocks, 23.04.2019, Erişim Tarihi: 31.10.2021, Erişim Adresi: https://warontherocks.com/2019/04/a-close-look-at-frances-new-military-cyber-strategy/.
• • Dewar, Robert S. (2018), “CSS Cyber Defense Project, National Cybersecurity And Cyberdefense Policy Snapshots”, Erişim Tarihi: 23.01.2022, Erişim Adresi: https://css.ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/Cyber-Reports_National_Cybersecurity_and_Cyberdefense_Policy_Snapshots_Collection_1.pdf, ss. 7-24.
• • Defense Intelligence and Security Directorate, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.dgse.gouv.fr/en.
• • Defense And Security Of Information Systems: France’s Strategy (2011), National Information Systems Security Agency, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.ssi.gouv.fr/uploads/IMG/pdf/2011-02-15_Defense_et_securite_des_systemes_d_information_strategie_de_la_France.pdf.
• • Digital National Council, Erişim Tarihi: 02.11.2021, Erişim Adresi: https://cnnumerique.fr/.
• • Directorate General of Armaments, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.defense.gouv.fr/dga.
• • Direction du Renseignement et de la Sécurité de la Défense Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.drsd.defense.gouv.fr/.
• • Directorate of Military Intelligence, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.defense.gouv.fr/drm.
• • Diriliş Postası (2017), “Fransa’da Cumhurbaşkanlığı Seçimlerinde ‘Siber Saldırı’ Uyarısı”, 08.01.2017, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.dirilispostasi.com/haber/6292216/fransada-cumhurbaskanligi-secimlerinde-siber-saldiri-uyarisi.
• • Éléments Publics De Doctrine Militaire De Lutte İnformatique Offensive Report (2019), Ministry of the Armed Forces, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.defense.gouv.fr/fre/content/download/551497/9393997/El%C3%A9ments%20publics%20de%20doctrine%20militaire%20de%20lutte%20informatique%20OFFENSIVE.pdf.
• • Federal Office for Information Security (Germany) ve National Information Systems Security Agency (2020), “Third edition of the Franco-German common situational picture”, Erişim Tarihi: 03.11.2021, ErişimAdresi: https://www.ssi.gouv.fr/uploads/2020/12/anssi-bsi-common_situational_picture_2020.pdf, ss. 1-20.
• • Franchi, Charles De & Joly, Christophe (2016), “Cyber Security Opportunities in France”, International Trade Administration, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://2016.export.gov/france/build/groups/public/@eg_fr/documents/webcontent/eg_fr_110164.pdf.
• • French Republic Prime Minister, “French National Digital Security Strategy”, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.enisa.europa.eu/topics/national-cyber-security-strategies/ncss-map/France_Cyber_Security_Strategy.pdf, ss. 1-44.
• • French Ministry for Europe and Foreign Affairs (2019), “France Diplomacy Digital Diplomacy”, 18.09.2019, Erişim Tarihi: 30.10.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/digital-diplomacy/.
• • General Directorate of Internal Security, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.interieur.gouv.fr/Le-ministere/DGSI.
• • Governing National Law, Decree 2009-834 of 7 July 2009, establishment of a service with national competence called “National Agency for the Security of Information Systems”, Erişim Tarihi: 01.11.2021, Erişim Adresi: https://www.legifrance.gouv.fr/loda/id/JORFTEXT000020828212/.
• • Güleç, Özge & Kişman, Zülfükar Aytaç (2021), “Uluslararası İlişkiler Açısından Siber Güvenlik ve NATO’nun Siber Güvenlik Stratejileri”, Akademik Açı, Cilt 1, Sayı: 1, ss. 127-154.
• • Güngör, Murat (2015), “Ulusal Bilgi Güvenliği Strateji ve Kurumsal Yapılanma”, Kalkınma Bakanlığı Bilgi Toplumu Dairesi Başkanlığı Uzmanlık Tezi, Ankara.
• • Hiscox (2020), “Hiscox Cyber Readiness Report 2020”, ss.1-16.
• • Intelligence Online (2018), “The DGA Develops Cyber Warfare Games In Bruz”, 04.07.2018, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.intelligenceonline.fr/renseignement-d-etat/2015/03/11/la-dgadeveloppe-les-jeux-de-cyberguerre-a-bruz,108065256-bre.
• • Karaca, Kayhan (2015), “Fransa Siber-Cihatçıların Da Hedefinde”, Deutsche Welle Türkçe, 15.01.2015, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://p.dw.com/p/1EKx5.
• • Laudrain, Arthur (2018), “Avoiding A World War Web: The Paris Call for Trust and Security in Cyberspace”, Lawfare, 04.12.2018, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.lawfareblog.com/avoiding-world-war-webparis-call-trust-and-security-cyberspace.
• • Laudrain, Arthur P.B. (2019),“France’s New Offensive Cyber Doctrine”, Lawfare, 26.02.2019, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.lawfareblog.com/frances-new-offensive-cyber-doctrine.
• • Maglana, Lorie & Man, Sunny (2020), “Europe: EU Imposes The First Ever Sanctions Against Cyber-Attacks”, Global Compliance News, 21.08.2020, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.globalcompliancenews.com/2020/08/21/eu-imposes-the-first-ever-sanctions-against-cyber-attacks-20200810/.
• • Mackenzie, Christina (2019), “French Defense Chief Touts Offensive Tack In New Cyber Strategy”, Fifth Domain, 18.01.2019, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.fifthdomain.com/global/europe/2019/01/18/french-defense-chief-touts-offensive-tack-in-new-cyber-strategy/.
• • Ministry of the Armed Forces, “The Cyber Defense Command (COMCYBER)”, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.defense.gouv.fr/ema/organismesinterarmees/le-comcyber/le-comcyber/comcyber.
• • Ministry of the Armed Forces (2019), “Ministerial policy of defensive IT control”, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.defense.gouv.fr/salle-de-presse/communiques/communique_la-france-se-dote-d-une-doctrine-militaire-offensive-dans-le-cyberespace-et-renforce-sa-politique-de-lutte-informatique-defensive.
• • Ministry of Europe And Foreign Affairs (2019), “France Diplomacy”, Erişim Tarihi: 31.10.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/security-disarmament-and-non-proliferation/fight-against-organized-criminality/cyber-security/.
• • Ministry of the Armed Forces (2013), “White Paper: Defense and National Security Report”, Erişim Tarihi: 29.10.2021, Erişim Adresi: http://www.livreblancdefenseetsecurite.gouv.fr/index.html.
• • Ministry of Europe and Foreign Affairs (2017), “France's International Digital Strategy”, 15.12.2017, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/digital-diplomacy/france-s-international-digital-strategy/#:~:text=France's%20international%20digital%20strategy%2C%20presented,governance%2C%20the%20economy%20and%20security.
• • Ministry of Europe and Foreign Affairs (2019) “Indo-French Bilateral Cyber Dialogue”, 20.06.2019, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/security-disarmament-and-non-proliferation/fight-against-organized-criminality/cyber-security/article/indo-french-bilateral-cyber-dialogue-20-06-19.
• • Ministry of Europe and Foreign Affairs (2019), “G7 French presidency – Cyber Norm Initiative: Synthesis of Lessons Learned and Best Practices”, 26.11.2019, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/digital-diplomacy/news/article/g7-french-presidency-cyber-norm-initiative-synthesis-of-lessons-learned-and.
• • Ministry of Europe and Foreign Affairs, “Guaranteeing Cybersecurity”, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/digital-diplomacy/france-s-international-digital-strategy/article/guaranteeing-cybersecurity.
• • Ministry of Europe and Foreign Affairs (2020), “EU – Cyberattacks – Q&A from the press briefing”, 30.07.2020, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/digital-diplomacy/france-and-cyber-security/article/eu-cyberattacks-q-a-from-the-press-briefing-30-jul-20.
• • Mordorintelligence, “Fransa Siber Güvenlik Pazari - Büyüme, Eğilimler, Covid-19 Etkisi ve Tahminler (2022 - 2027)” Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.mordorintelligence.com/industry-reports/france-cybersecurity-market.
• • National Assembly Session Service Division Of Laws (2015), “Initial project of the Law”, 16.04.2015, Erişim Tarihi: 30.10.2021, Erişim Adresi: http://www.assemblee-nationale.fr/14/ta-pdf/2697-p.pdf, ss. 1-45. • NCSI, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://ncsi.ega.ee/country/fr/.
• • NIS Investments Report (2020), “European Union Agency for Cybersecurity”, Erişim Tarihi: 28.10.2021, Erişim Adresi: https://www.enisa.europa.eu/publications/nis-investments/at_download/fullReport.
• • Parly, Florence (2018), “Statement by Ms Florence Parly, Minister of the Armed Forces, on the manipulation of information”, 04.10.2018, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.vie-publique.fr/discours/206652-declaration-de-mme-florence-parly-ministre-des-armees-sur-la-manipulat.
• • Press center of the Ministry of the Armed Forces (2019), “Public Elements Of Military Doctrine For Offensive Computer Warfare”, 21.01.2019, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.defense.gouv.fr/salle-de-presse/dossiers-de-presse/dossier-de-presse_elements-publics-de-doctrine-militaire-de-lutte-informatique-offensive.
• • Souyris, Jean Philippe (2021), “France: Cybersecurity Comparative Guide”, Montaq, 16.04.2021, Erişim Tarihi: 03.11.2021, ErişimAdresi: https://www.mondaq.com/france/technology/963020/cybersecurity-comparative-guide.
• • Tannam, Ellen (2019), “Defence Secretary Says France Will Take An Offensive Cybersecurity Strategy”, Silicon Republic, 23.01.2019, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.siliconrepublic.com/enterprise/france-cybersecurity-parly.
• • The French Ministry of the Armies (2019), “International Law Applied To Operations In Cyberspace”, ss. 1-20.
• • The French Ministry for Europe and Foreign Affairs (2020), “EU Cyberattacks-Q&A From The Press Briefing”, 30.07.2020, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://www.diplomatie.gouv.fr/en/french-foreign-policy/digital-diplomacy/france-and-cyber-security/article/eu-cyberattacks-q-a-from-the-press-briefing-30-jul-20.
• • The International Institute for Strategic Studies (2019), “Cyber Capabilities and National Power: A Net Assessment”, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.iiss.org/blogs/research-paper/2021/06/cyber-capabilities-national-power, ss. 57-69.
• • Wavestone (2020), “Top Companies Cybersecurity Index: 2020 Annual Reports”, Erişim Tarihi: 28.10.2021, Erişim Adresi: https://www.wavestone.com/app/uploads/2020/07/Wavestone-Cyberindex-top-companies-2020-EN.pdf.
• • UN Office for Disarmament Affairs, “Developments In The Field Of Information And Telecommunications In The Context Of International Security”, Erişim Tarihi: 03.11.2021, Erişim Adresi: https://www.un.org/disarmament/ict-security.
• • Varlık, Ergün (2019), “Fransa Savunma ve Saldırı İçin Siber Politika Geliştiriyor”, Siber Bülten, 11.05.2019, Erişim Tarihi: 04.11.2021, Erişim Adresi: https://siberbulten.com/uluslararasi-iliskiler/fransa-savunma-ve-saldiri-icin-siber-politika-gelistiriyor/.
• • Voo, Julia & Hemani, Irfan (2020), “National Cyber Power Index 2020 Methodology and Analytical Considerations Report”, Harvard Kennedy School Belfer Center for Science and International Affairs, Erişim Tarihi: 29.10.2021, Erişim Adresi: https://www.belfercenter.org/sites/default/files/2020-09/NCPI_2020.pdf.