What can we learn from digital Ukraine?

April 28, 2022

In the e-Estonia Briefing Center’s podcast series “The Art of Digitalisation” we invite some of the most influential people in politics and business to discuss all angles of digitalisation in Estonia and the world. From past learnings to current challenges and future plans. Here’s the full transcript – created by Estonian startup Snackable AI’s Insights Engine – of our episode with  Jaanika Merilo,  an evangelist of e-government, the Head of PR and Communication of Funderbeam, an Advisor to the Deputy Prime Minister and Minister of Digital Transformation of Ukraine and advocate of EU and Ukrainian relations.

Jaanika Merilo on her background and her passion for Ukraine

Florian Marcus

Hello and welcome to another episode of The Art of Digitalisation. My name is Florian Marcus. I’m your host today, and with us today, we have Jaanika Merilo. She is the Head of PR and Communications at Funderbeam. She is also an advisor to the Deputy Prime Minister and Minister of Digital Transformation of Ukraine. And besides that, she is also a full-time advocate of Estonian, Ukrainian, and arguably European relations. First of all, Jaanika, thank you so much for being with us. How are you today?

Jaanika Merilo

Thanks so much for inviting me! Well, very challenging times. Yesterday was better than today, but I hope tomorrow will be better than today also.

Florian Marcus

Yes, also! We should say that we are recording this episode towards the end of February, and there are still a few days to go. But we’re very much looking at the current situation in Ukraine and how it all develops. But before we delve into that topic, among many others, can you maybe tell us about your background and both sort of, your ethnically speaking, but also where does your passion for Ukraine and Estonia come from? And then also, how did you get into the tech scene out of all the different scenes?

Jaanika Merilo

Well, it’s a little bit twisted. Let’s say I was born with a Ukrainian father and Estonian mother, so probably it was somewhere in the DNA already a long time ago.

Florian Marcus

Sorry – you were born in Estonia or in Ukraine?

Jaanika Merilo

Yes, I was born in Estonia, but I spent all my summers in Ukraine, as you know, when the parents leave their children with their grandmothers. My grandmother happened to be in Ukraine. Time went by and I somehow found myself in IT. I started programming when I was small or young, which means at the age of 17 or 18. 

And then, of course, programming, then project management, and investment management. Then one thing led to another and I found myself in Ukraine, like twenty years later. Because in Ukraine, there was the Orange Revolution. It was a very exciting time actually, where the foreigners, let’s say, came to power or were invited to take the government roles, which means the young reformers and some of them were foreign. I consider myself only half foreign! But Lithuanian Minister of Economic Affairs Aivaras Abromavičius came to the cabinet, and he asked me to be an advisor because I was walking around and preaching about e-government. Like some crazy evangelist saying that once there will be a time and everything will be “e”. Then he asked me: “You have been talking the talk, but can you really walk the walk?” So I ended up in the Ukrainian government as an advisor because I’m Estonian. My nationality is Estonian, and the only thing I can be is an advisor.

But still, it was a very exciting time, or has been, because when I came in 2015, there was nothing “e”, basically no e-services whatsoever. Like nothing – no registries, no services. So Ukraine has been building it up during the last seven years. And it’s very exciting to really have a country of 40 million and to start figuring it out. So we have nothing, we should have every single thing ready tomorrow. And what are the components? What are the priorities? Estonian lessons learned basically: what are the fundamentals we can take from Estonia? What should we reinvent? Because as you don’t have heritage technology you can take the latest one, which is very exciting. So for example, in Ukraine, there is e-government in smartphones not like wired ID-cards anymore. 

Jaanika Merilo and Florian Marcus at the e-Estonia Briefing Centre.

Estonia’s return to politics in the 1990s and early 2000s

Florian Marcus

So before we get into the e-Gov Ukraine topic, you mentioned the Orange Revolution and how many many foreigners with Ukrainian roots came back, or also came into power during that time. Obviously having this Estonian background as well, you’re surely aware of how the first wave of politicians in the 1990s in Estonia – there were so many people who came back from abroad as well. Did it feel somewhat similar? The Ukraine of the 2010s, the early 2010s? And then, Estonian returns in the late 1990s? Would that be fair to compare?

Jaanika Merilo

Well, not so many Ukrainians really returned to work with the government, it was a strange situation where the foreigners were brought in, actually. In the government there were like, two ministers from Georgia, then half American, then a Lithuanian, and so on. So it was a little bit like old ancient Kyiv times when it was like the government of varyags –  when the government was outsourced to Lithuanians, the Scandinavians, and so on. So it was also a little bit different because the situation was totally alike, economically and fundamentally different. When Estonia in the nineties, it was like the birth of a new country, like everything is possible, like all the rules weren’t there yet. You have to reinvent the government. Then in Ukraine, it was like more of a strange status quo. When you have oligarchs, when you have certain economic interests, when you don’t really have a rule of law, and so on. So it was yes, it was a movie rodeo.

Florian Marcus

How do you break the stalemate was probably more the question there. 

How is the e-government in Ukraine?

Florian Marcus

Now you already mentioned e-government, which is precisely what we want to talk about. I think most people would agree that Ukraine is one of the most dedicated students of Estonia in terms of building a digital society. And you also mentioned that, you know, just under 10 years ago, there was little to nothing in terms of e-society in Ukraine. How has that development been going, and where are we today? Could you tell us more about that?

Jaanika Merilo

Well, yes. Ukraine is a very good student of Estonia. Still, Ukraine is kind of observing and taking bits and pieces that could be like used in Ukraine, but also, as I said, hopping over several technologies and basically hopping over 20 years of old technology.

But what was interesting, actually, was that it was a political decision that the government was a priority. The minister was established, and now over 300 people work in the Ministry of Digital Transformation, which means that the government understood that it’s important to empower someone who has authority over other ministries to make it happen. Because before that, there were some attempts at the city level, some attempts like one ministry level. But you need the national and not an attempt, but actually, power to make it happen now. And now as a result of it, the minister is 30-something years old. He’s very, very young. His deputy ministers are like 25-26 who don’t even remember this – you know, in our good old times, they used to work like that.They don’t remember. Not the good, not the old, not any times besides time with the smartphones. So basically, now 11 million people are using government services through the mobile phone. And even, for example, you can show your passport on your smartphone, your driving license, your student license. And so basically it’s happening very fast. It’s very challenging because you have many, many, many registries you need to create, like the demographic register and everything in the background. But still, people are starting to use services very fast. Like e-health reform, it has happened in just a few years, from zero to like 60 percent of people using it.

Florian Marcus

I think the most important thing is that the decision-makers don’t get discouraged by the low usage numbers at the start, because obviously, as with every technology you will at the start, you have these trailblazers who just want to try out the latest thing. And then probably the grandmothers and grandfathers in the country will be one of the later adopters. So this is perfectly normal. And probably not to get discouraged too early.

Jaanika Merilo 

You know, it’s actually a strange thing that when you have nothing and you implement something, you will have lots of positive feedback because every step you take is more than there was and there is like one force or one set of people who are ready to use who didn’t have this kind of possibility. So it’s constant positive feedback, and it was really nice to also implement changes in the level of the city because, for example, we didn’t have any e-health solution. People were waiting in the lines, the doctor basically started from the very early hours of the morning. And then a year later, you have implemented it in one million cities and you can see that three million people or times were booked through the internet. They’re not waiting like the real people, real services and you really improve their life. It’s unbelievable feedback, really, when you feel and see it’s not numbers, it’s people whose lives they’re changing.

Florian Marcus

And what I think, what strikes me about the Ukrainian experience is actually one of the main counterarguments that Estonia always experienced. Oh, we can’t learn from Estonia because it’s so small. It’s only 1.3 million people. And so finally, we have a country with tens of millions of people with cities – Kyiv for example is bigger than the entire population of Estonia. So all of a sudden, we can see how it does work on a bigger scale and we can see it right here. So this is very encouraging in my opinion.

Jaanika Merilo 

The rationale behind it works basically is taking the bits and pieces and the fundamentals that work basically have the X-Road. You should integrate the registries, you should have them, you should implement one similar principle, you should have an ID, and so on. So the main blocs definitely work.

What can Ukraine learn from Estonia?

Florian Marcus

You just mentioned the X-Road just for I mean, we have plenty of avid listeners who will know what the X-Road is just in case I will say, you know, that’s the data exchange and data transfer mechanism that works in Estonia and almost similarly in Ukraine. Although I would say that in Ukraine, it has a more poetic name. It’s called Trembita. I’m probably butchering that pronunciation, but it refers to, I think, an ancient instrument for communication or across the mountain ranges. So a very nice image for that kind of technology. But when we look at President Zelenskiy’s promise of the state on a smartphone, where do you think Ukraine can still learn from Estonia at this point and perhaps also from all the experience that Ukraine has made by now? Where can Estonia learn a bit from Ukraine?

Jaanika Merilo

I think it’s almost that Estonia could start learning from Ukraine.

Florian Marcus

I’m sure that there is something to learn. Yeah, absolutely. Tell us, yes.

Jaanika Merilo

For example, I hate this ID-card. I hate plugging it in. Having the wire and the whole concept is so ancient, I’m really sorry. So basically the idea is to have my smartphone, I have my government on here, I like it very much. Yeah, including that Estonians say like, Oh, you were. All you need is an I.D. card. No, all you need is basically a mobile phone and all your documents are there. So I would say that e-Estonia also needs to step up a little bit and to leave these heritage solutions not behind. But let’s say, implement also new solutions because really, for example, the e-ticketing transport in public transport. It was implemented first in Ukraine by Ridango and then in Estonia because Ukrainians were like: “OK, why do I need to have the step between? We have contactless bank cards. Why should we be like putting it in somewhere or have the [smart card] readers? So I think I would very much like to have this wireless solution, a mobile phone-based solution not like my desktop, my government, in a desktop, basically.

Florian Marcus

Now I will have to defend the ID card. Here it is, especially in the winter. It is excellent for scratching ice off your car. But no, of course, you’re right that you know, applications and digital-based services are becoming much more attractive and also an ever-growing part of the population knows how to use them. So very generally, it will become more accessible to more people over time.

On the user interfaces in Estonia

Jaanika Merilo 

And also the user interfaces. Oh my God. Sometimes in Estonia, there are quite ancient things from the times that were developed. And even when you have some upgrades, let’s say a few weeks, then some solution is from a year ago, and something else from 10 years ago and it’s mixed all together. It’s like mixing the heritage with not really upgraded new with something upgraded. Let’s say, for example, e-health or, you know, like e-Estonia, it’s quite a mix of different solutions, interfaces, and so on.

Florian Marcus

When you mentioned that point, I was thinking of two examples. Number one, the e-health system, which was brought online in 2008, and then of course, the services have been added over time. That’s where you can see the sort of one is a bit more user-friendly than the other. But the layout itself is still from 2008, and I believe it is under development by some Estonian companies right now. There is an update to be expected soon. One point or one portal that used to be also on the tricky side in terms of user-friendliness, but has recently been updated was the business registry. These things take time to renew. I fully agree. And so there are different, I guess, advantages and disadvantages to being an early or a late mover and adopter. And so exactly as I said, Ukraine can just skip technology, ID card, and mobile ID SIM card if they want to. So this is the luxury that you guys have right now.

Jaanika Merilo

And you mentioned the business registry – no open data, which means it has to fetch and request and so on. So this is also like a big block where Ukraine is working very hard to create everything in open data format to open as much information as possible. The e-procurement system, really, was the best in the world according to different competitions. So, yes, Ukraine has the advantage of a late mover.

Florian Marcus

Yeah. So there’s plenty to learn on both sides. And I think I mean, that’s very encouraging overall because the more different countries have different good sides to show, the better the service quality in the world will be. I’m sure.

What is cyber attack attribution and how does it work?

Florian Marcus

If we look at the current political situation, of course, it’s still very much fluid right now. We don’t quite know where things are going. But I wanted to tackle this from the side of cybersecurity and cyber attacks. Just a couple of months ago Estonia had the presidency in the United Nations Security Council, and as part of that, the focus was very much on, you know, cyber-attack attribution and also putting the digital sphere in the context of international law. You know – what constitutes an attack?

I think it’s fair to say that this work has not been completed because it does take more than a month and just a couple of days ago, a Ukrainian ministry website and so on were under attack as well by a country that shall not be named. We officially don’t know where the attackers come from, but so I guess the question is what can we do to address digital attacks in the modern age? Is there something where NATO should step up? Is this something that only the U.N. can solve or is it something that every country has to decide for itself? How does this work help us?

Jaanika Merilo

Well, the country that we don’t name or are living by messages of cyberwar, or hybrid warfare. Let’s say it consists of several parts – information warfare, cyberwar, and classical warfare. And because of the attacks in Estonia in 2007, it was considered really the first cyberwar in the world by the country we don’t name. Because of that, Estonia established its Cyber Security Defence Center basically. I liked the idea by general Kert who said – we don’t have the biggest army but what we can do is to defend our country, which is not only in physical space but also in cyberspace.

Jaanika Merilo

And so basically the strategy of NATO’s created in Estonia, let’s say welcome to. So definitely it’s like in parallel, while they’re creating the electronic resources, you should also protect them because it’s all about basically data security and so on. But is definitely both basically creating the national strategy with the help of the international, let’s say, partners.

Ukraine has received lots of help, especially lately, but it’s also still a national issue, basically, because every country defends itself, and especially when it comes down to not only the country but the regional development and regional defence, because one thing is to have a CERT – a central government regulatory authority. But then again, you have lots of sector-based solutions. You have lots of regional data centres and so on. So what you also noticed is that it’s not enough that you have one government CERT…

Florian Marcus

Just very quickly – Computer Emergency Response Teams, just for those that are not in the know of all the cool IT lingo, yes. Sorry, continue.

Jaanika Merilo 

Yeah, sorry. So basically every. Let’s say everyone who creates their own information centers should be able to protect them. And I think it’s a very nice concept that e-Estonia has the Cyber League. Meaning that the I.T. professionals, the volunteers, and the companies are also welcome to react to different threats to test, try to penetrate the system, to kind of participate in this testing and development of the system.

And I very much like this concept of different CERTS where the private sector participates. And this is why what Ukraine is right now working on is not the only government because the government has always liked limited resources. It’s about engaging the best from the field as well. So creating this front of volunteers, professionals, government, I.T., education centres, and so on.

Florian Marcus

I think it’s quite fittingly called a cyber militia in Estonia and if memory serves me right. The first search that was created in Estonia was to do with the financial sector and then later integrated, you know, from the government side. So to have this overview of the threat landscape for both critical infrastructure providers from the private sector and then also the public sector is really, really important to make sure that you know what’s going on in your country. So I fully agree.

Jaanika Merilo

This is a very important point also that Ukraine is also, let’s say, having tough times because of our neighbour. Which means that Ukraine is constantly under attack in regards to critical resources, in regards to showing what could be done and so on. So, for example, like during 2021, there were almost 200,000 attacks on Ukrainian information systems. And if you can imagine, like all the banks, all the infrastructure – like electricity, ports, airports, there are a huge number of systems that should be protected and critical information systems. So it’s quite a challenge.

Florian Marcus

You’ve got all kinds of what’s sometimes referred to as SCADA systems. So whether it’s critical dam infrastructure where if you had the right server that you can open the floodgates or something. There’s a lot of crazy stuff that can be done with cyber-attacks these days.

Jaanika Merilo

Because even like a few years ago, it was like the attack of Petya, NotPetya, WannaCry and so on. It was huge. And I remember very well the day when even the bank ATMs were down. So basically, the big systems are down, and it was even a joke that my good friend, the Head of Ukrainian Post, was laughing that we have almost zero down because we have zero digital.

Florian Marcus

It’s all good. If it’s all paper, then you know, no problems! Yeah, I mean, WannaCry and all these ransomware attacks, that was a time where a lot of countries, not just Ukraine, but also others very quickly noticed:1) how fragile the digital world can be if it is not taken care of. 2) the aspect of cyber hygiene, such as teaching individuals not to click on email x and so on. This sounds ridiculous to people like us, but…

Jaanika Merilo

No, it’s always the human factor! The weakest link is the human factor.

What is Funderbeam?

Florian Marcus

But perhaps moving on from the digital and physical destruction to building digital and physical things up. You are also working for Funderbeam. Could you tell us what that is, what it does and what you do?

Jaanika Merilo

Absolutely love it. And I’m truly happy about working there. It’s very cool, basically almost a stock exchange or a marketplace for early growth companies. Which means that basically Nasdaq in big stock exchanges, you can only trade and buy shares of the huge companies. But Funderbeam enables you to buy and sell shares 24/7 of the young companies like very cool I.T. companies. So you can be part of this growth story. Yeah, and I’m basically responsible for PR and comms, which means to have the message out and be heard that many cool companies are waiting for investors. And it’s possible to fundraise. The traits of the system are global. We have 11 countries represented in the marketplace.

Florian Marcus

I mean, you made it into the best podcast in the world. So now you have the right audience for, for these kinds of things.

Jaanika Merilo

This is why I’m trying to get everything in as many as possible Marketplace companies.

Florian Marcus

You’re doing great. Is Estonia one of these countries that is part of Funderbeam?

Jaanika Merilo

Yes, it’s Estonia, the U.K., Finland, Denmark, Singapore, Croatia, and over 60 companies. And it’s really cool technology. We have built this mall as an almost stock exchange alternative, which is like a huge tech behind it. Let’s say to have it up and running and clearing 24/7. It’s like even the Nasdaq is open only certain hours. 

The next unicorns from Estonia and Ukraine

Florian Marcus

Now I do have two more questions for you. Number one, if you had to name the three next start-ups from Estonia and from Ukraine, they would become, in your opinion, unicorns. Which ones would they be?

Jaanika Merilo

Oh my God, I cannot name from the Funderbeam. I’m not supposed to, you know. So that’s almost unfair because I definitely know two of them. OK?

Florian Marcus

Would it be OK to ask about Ukraine, though, seeing as it’s not part of the portfolio for now?

Jaanika Merilo

Yes, I think actually that they might even come not only from the startup sector, meaning that, for example, from Ukraine there is Grammarly, Depositphotos, and so on. They might even come from the big software houses because actually, it might even sound strange. But the big I.T. companies there are really, really big. So, for example, United Sector, works like 300000 people and the I.T. houses like in Estonia Helmes, Nortal or so on. They have maybe 1000 employees, 1500.

Florian Marcus

Let’s say that counts as a big company in Estonia. 

Jaanika Merilo

Yes, it does. But in Ukraine, it’s like 10000. So I think some unicorns might come from this really strong export-oriented sector as well. We have three-four lined up.

Florian Marcus

That was a wonderfully diplomatic answer. Excellent.

What can Estonians do to help out the current situation in Eastern Europe?

Florian Marcus

Now I do have one last question as promised. And that’s a very simple one. Taking into consideration the current situation in Eastern Europe, what can Estonians and listeners of this podcast do to help out?

Jaanika Merilo

Depends. Means that it’s always nice to have some professional partnerships, which means if you’re working in IT, there are definitely many, many ways to cooperate with Ukrainian companies, how to find this little outsourcing source, and so on. But still, you know, it’s the small things that matter. Basically, when you see some Ukrainian friend in the newsfeed, just say something in Ukrainian like Slava Ukraine just post blue.yellow heart. That’s enough that it will make her happy, basically. So the small things really are showing some signs of attention when you find some, I don’t know, drink food in the shop, which has a Ukrainian label, just make a social media post and say hi to Ukraine. Really small things matter. It’s about unity and support.

Florian Marcus

As with digitalisation, so also in international friendships, both the big and the small things very much matter. Jaanika, thank you so much for being with us today! To all our listeners at home . I hope you enjoyed our conversation and if you have any more questions, I’m sure that you will also be able to find Jaanika on various social media outlets where she is contactable. But yes, thank you so much, Jaanika, for your time!

Jaanika Merilo

Thank you for all the attention to Ukraine, Funderbeam and startups that I’m very much in love with.

✈️  Can’t travel but want to hear the e-Estonia story or implement e-services in your country or company? Take a look at our services and get in touch – we’ve got you covered!

Resourse: e-estonia

A fake cyberwar held in Estonia could help nations prepare for real life threats

April 20, 2022

Jenna McLoughlin

From the tiny Baltic nation of Estonia, some 30 nations are participating in mock cyberwar exercises. While the annual NATO-led exercise may be fiction, the threat emanating from Russia is very real.

ARI SHAPIRO, HOST:

Just across the border from Russia, a war is taking place in a former Soviet republic. We’re not talking about Ukraine here but Estonia. The war is in cyberspace, part of a NATO-led annual drill. And this year, the stakes couldn’t be higher. NPR cybersecurity correspondent Jenna McLaughlin sends us this report from the Estonian capital.

JENNA MCLAUGHLIN, BYLINE: Berylia and Crimsonia are at war. The two islands disagree on politics, on who controls neighboring islands and their resources. One lashes out at the other in cyberspace.

MEJ YAKER: And as you can see on a screen there, about 20% of firewalls, for example, have been attacked out of a two-day campaign.

MCLAUGHLIN: Mej Yaker (ph) is the leader of the red team, Crimsonia, the bad guys in a cyber exercise held every year called Locked Shields. Normally, he’s the head of a private cybersecurity company. Today, he’s the adversary. A screen outside their war room shows the attacks they’re launching. Right now, it’s mostly attacks on energy companies and on the website of the Berylia institute of virology. And the red team is just getting started.

YAKER: We always play the, like in boxing, left and right hand. So we have a lot of very visible attacks. Usually, these are website defacements, and which are more of an annoyance, like drawing attention away to do the more prepositioning for the later attacks that the blue team most likely is not noticing yet.

MCLAUGHLIN: Everyone will notice when the attacks are really successful. For one thing, the giant screen imitating the power grid will turn red. Worst case, there’s a box full of firecrackers for special effects.

KERRY COONGER: And yes, when it explode, it means that the system’s down, basically.

MCLAUGHLIN: That’s exercise director Kerry Coonger (ph).

COONGER: If the blue teams defend it, then it won’t blow.

MCLAUGHLIN: The two imaginary island nations don’t exist, of course. But Estonia has been running cyber drills since 2008, the year after Russia basically knocked the country offline in one of the first overt ideological cyberattacks on a nation.

COONGER: We look at how modern conflict is being conducted, and we bring it into our exercise environment.

MCLAUGHLIN: The mastermind of the exercise, Adrian Venables, says he has been working on the plot of this week’s cyberwar for the last year, well before Russia invaded Ukraine.

ADRIAN VENABLES: I monitor global information warfare scenarios and real-world events, and then we incorporate them into our exercises. So they are absolutely real and are all inspired by what we see in today’s world.

MCLAUGHLIN: That includes hackers targeting brand-new technology, like 5G and a communication system for international banking, plus, says Venables, a big emphasis on the power of social media.

VENABLES: As the exercise has developed, we’ve introduced much more social media in use, So we have Twitter emulators and we’ve introduced for the first time this year a TikTok-type emulator of short videos.

MCLAUGHLIN: Simulated TikTok and Twitter – or Birdle (ph) in this fictional country – might sound funny, but the tone of these games is notably serious. The real-life war in Ukraine is on everyone’s minds.

KALLE LAANET: Of course, it’s more serious. And if I’m looking at the faces behind the computers, they are serious, motivated and trying to do his best.

MCLAUGHLIN: That’s Estonian Defense Minister Kalle Laanet. He stopped by the exercise wearing a blue flower pin on his lapel in honor of veterans month, a symbol of spring renewal. He noted the war in Ukraine is a stark reminder that Russia, just over the border, could attack any of the countries participating in the exercise at any time, something Estonia knows firsthand and is dead set on stopping.

Jenna McLaughlin, NPR News, Tallinn, Estonia.

(SOUNDBITE OF KHRUANGBIN’S “FATHER BIRD, MOTHER BIRD”)

Resouse: npr

Is the world ready for a cyberwar?

April 13, 2022

Blessing Oyetunde

Co-author and postgraduate student

Between 2009 and 2018, there was a 440% increase in documented global cyber warfare attacks. Within this period, over 50 countries experienced politically-motivated cyberattacks. Apparently, that was just the beginning!

From Estonia to the United States, the global landscape has witnessed critical and trajectory-altering cyber threats. How severe can cyber threats be? Is the world ready for a cyberwar? Where do we go from here?

Nothing is unhackable

The Microsoft Exchange Server hack was one of the most significant cyberattacks in 2021. It affected an estimated 250,000 servers and breached the data of at least 30,000 Microsoft customers. It was later discovered that the attack was perpetrated by Hafnium, a Chinese government-sponsored hacking group. While the motive is thought to be solely spying, some experts believe there may be more to it. In the same year, Estonia also had a similar experience. A hacker obtained over 280,000 personal identity photos following an attack on the state information system. The offender was quickly caught, and the stolen data was confiscated. 

Florian Marcus.

According to Florian Marcus, former digital adviser at the e-Estonia Briefing Centre, “the more honest proposition is that nothing is unhackable. Paper files can be edited, replaced, copied, and destroyed forever, and on a fundamental level, the same is valid for digital formats.” This he stated in the January 2021 edition of e-Estonia’s Speakers’ Corner. It seems being aware of this has made most progressive states and organisations 24/7 alert and radically innovative. 

Estonia’s 2007 cyberattacks, a crucible for all

After experiencing what was, at the time, the most massive politically-motivated cyberattacks on a state, Estonia realised the need for heightened cybersecurity. The country adopted a wide range of national cybersecurity strategies to strengthen its digital security walls. It partnered with several companies from the private sector to build secure systems for public use, set up a secure data centre to house digital systems’ backups in another country, became an early adopter of innovations, invested in digital awareness campaigns, and also started pushing for more international cooperations with cybersecurity-focused organisations. 

The state continues to update its strategies and infrastructure to stay ahead. Unsurprisingly, Estonia currently ranks 3rd on the Global Cybersecurity Index (GCI), an index that reviews 193 countries’ commitments to cybersecurity. Over a decade since the 2007 cyberattacks, other nations continue to reference the incident and what can be learnt from it. In his keynote speech at the “Working Together towards the Future of Cyber Security in South-East Asia” conference held in conjunction with the Defence Services Asia (DSA) and National Security Asia (NatSec) 2022 exhibitions earlier in March, Malaysia’s Minister of Home Affairs, Datuk Seri Hamzah Zainudin Hamzah emphasised the need for a safe and secure cyberspace. 

“We must collectively learn from experiences, such as the Estonian cyber attacks in 2007 or the Ukrainian power grid attack in 2015. The act of cybercrimes disrupting our digital economic sectors poses a threat to our national well-being and must be dealt with at all costs,” he said. It is worth knowing that Malaysia ranks as one of the most digitally competitive and cybersecurity-committed countries globally. 

Ready for a cyberwar?

While widespread cyberattacks could have varying motivations and might be perpetrated by a private or public entity, the basis and perpetrator of cyberwarfare are defined. States or their proxies wage war through coordinated cyberattacks against other states with the explicit intention of damaging their infrastructure. This, precisely, Ukraine’s digital infrastructure faced hours before being physically invaded. “Several hours before the launch of missiles or movement of tanks on February 24, Microsoft’s Threat Intelligence Center (MSTIC) detected a new round of offensive and destructive cyberattacks directed against Ukraine’s digital infrastructure,” Brad Smith, Microsoft’s President, revealed in a public statement on the company’s website. 

It was quickly discovered that the attack was aimed at dismantling Ukrainian public services and financial entities. Nonetheless, against all odds, Ukraine’s digital infrastructure still stands resiliently! How? The answer to that is rooted in its design. According to Peeter Vihma, “Ukraine has a lesson to teach us all.” Faced with a similar situation, can your state or company’s digital infrastructure stand strong, or will it immediately collapse?

Solidarity in times of crises

The war against Ukraine has shed light on some of the strengths and weaknesses of nations and organisations in the global landscape today. One of the major strengths has been the earnest display of solidarity. Thousands of states, organisations, and individuals are openly supporting Ukraine, even with the social and economic threats associated with doing such. 

But beyond that, one of the biggest concerns in the face of the Russian invasion and standing in solidarity with Ukraine is that Russia could decide to wage cyber warfare against European nations and others getting involved as it had warned. On the one hand, both the European Union and NATO indicate that nothing recently suggested an increase in threat activity against their member countries.

Gert Auväärt.

On the other hand, Gert Auväärt, Deputy Director of the Information System Authority (RIA), revealed at a press conference that “Estonia’s cyber threat level has risen following Russia’s invasion of Ukraine and the cyber warfare efforts accompanying it.” He added that nations that supported Ukraine and were party to the sanctions imposed on Russia are additional cyber attack targets from both the Russian state and pro-Russian criminal groups. Regardless, beyond the humane standpoint (loss of lives and property in Ukraine), given the consequences the outcome of this war spells for international order, can any state afford to be neutral?

Where do we go from here?

While the European Union, NATO, and other major organisations continue to work hard to strengthen the security walls of members, defend them and protect the world at large, states, organisations, companies, and even individuals all have a part to play in this. At the state level, governments need to ensure that their infrastructure is solid enough to stand firm even in the face of unforeseen occurrences, vulnerabilities must be swiftly discovered and patched, and an around-the-clock cyber-watch needs to be enforced. 

Organisations, private firms, NGOs, and even individuals can also go the extra mile to research and train on cyber defence and bring innovations to life in this sphere. Already, the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) contributes substantially, but there could be more from other angles, primarily through collaborations. What can the regular people do in all these? The starting point might be paying more attention to news and news sources to separate genuine information from propaganda, thereby limiting the spread of misinformation. 

✈️  Can’t travel but want to hear the e-Estonia story or implement e-services in your country or company? Take a look at our services and get in touch – we’ve got you covered!

Resourse: e-estonia

The e-Governance Conference 2022: focus on resilient and seamless governance 

April 8, 2022

Federico Plantera

Author at e-Governance Academy.

The e-Governance Conference 2022, this year reaching its 8th edition, welcomes digital leaders and experts over the three years in Tallinn and online at egovconference.ee. This year the main focus is on the resilience of digital governance in times of crisis and the next step in the path of digitalization – seamlessness. Hannes Astok, Managing Director at e-Governance Academy, joined us in another episode of the Digital Government Podcast to give a sneak peek into this year’s event. And why you should all join, of course.

Seamless and resilient governments, in peace and emergency

The past two years have been characterized by governments’ responses to the pandemic. First, it was about shifting to online services and remote working. Secondly, on the rollout of vaccines and digital certificates, consolidating operational practices.

Recently, other crises have hit Tonga and Ukraine – respectively, a natural calamity and war. “So, I think the question of resilience has become very important throughout this year. Those crises bring plenty of challenges for public service delivery and digital transformation,” Astok says.

“But on the other hand, the topic of seamless government is very much related to resilience: even in peaceful times, people want services delivered with this approach. It means that citizens won’t have to apply online or offline for one or another service. Rather, people want to get them directly, with the government notifying you that a deadline is approaching or that you are eligible for a given benefit,” he continues.

Digital leaders of Estonia,  the UK, and beyond will shed light on the latest innovations in public service provision. As Estonia works as a role model and inspiration for many countries, the Conference features Government CIO Luukas Kristjan Ilves and Chief Data Officer Ott Velsberg to get the freshest insights on data management and AI for service provision. Also, you can join Siim Sikkut, the former Government CIO of Estonia, in a discussion on how effectively lead the digital transformation in the government.

The Conference speakers include the President of Estonia, Mr. Alar Karis, the President of the Future of Life Institute Max Tegmark, Author and UX consultant Vitaly Friedman, Research Fellow at the University of Oxford Paul Timmers,  Lisa Talia Moretti, Digital Sociologist at Ministry of Justice Digital (UK) among others.

Is it still possible to innovate during a crisis?

In a sense, the two years of the COVID-19 pandemic already provided an answer to this question. But things may change when the crisis at hand is a natural disaster or an active conflict. 

“It’s a good question, but I think crises are always a good environment for innovation. Let me bring up an example from medicine. Surgery, in particular, has developed a lot during times of war. The comparison here is that if you have a critical situation to face and the time slot available for a decision is very short, you need to take shortcuts, experiment, or at least try new methods, and processes. There is room to take risks because, if you don’t, you fail to address the problem at hand anyway,” Astok explains.

The Conference will shed light on how governments reacted during such periods. “From those areas where deep crises took place or are still happening, we can learn how governments acted rapidly, how they innovated and invented new ways of delivering services. This, of course, entailed creating shortcuts and eliminating useless, obsolete, time-consuming processes to provide for citizens quickly and in a digital format.”

You are all invited. May 10-12, in Tallinn or online

Resilience and seamlessness are the central umbrella under which we will contextualize the experience of governments in times of crisis. But our Conference topics do not stop there: we will also address participatory practices in policymakingcybersecurity, design of public services, the implementation and responsible use of artificial intelligence, and much more.

“You can go online and follow the three conference days by registering at egovconference.ee. But this year there is also a great opportunity to join the conference in Tallinn! The pandemic is increasingly fading and going easy on Estonia, spring is set to make Tallinn look even more beautiful, and we’re in a safe and secure environment. So, it’s worth coming, listening to our high-level keynote speakers and panellists, joining the discussion, and finding out more about digital governance’s resilience and seamlessness,” Astok concludes.

Interested in more? Join the e-Governance Conference on May 10-12, 2022, to get the best insights and lessons learnt about how digital governments cope with times of crisis and create seamless online services to make citizens’ life easier.

Resouce: e-estonia

Ukrainian digital infrastructure prevails!

March 31, 2022

Peeter Vihma

social scientist at the university of helsinki and the estonian university of life sciences

Ukraine and Estonia have had a long history of collaboration in developing digital solutions. While bombs fall on Ukraine, this cooperation endures, just like Ukrainians. Digital and decentralised government provides resilience that is especially sought after during these challenging times. In this regard, Ukraine has a lesson to teach us all.

A long history of cooperation

Cooperation between Estonia and Ukraine has quite a long history. The first large project, EGOV4UKRAINE, was led by the e-Governance Academy – between 2016 and 2021 – and it laid the digital architecture for current developments. This project was part of the more considerable administrative reform in Ukraine, ensuring that public services are delivered in an easy, fast, corruption-free, and efficient manner. The level of engagement by Ukraine in this reform is exemplified by the fact that Ukraine called into the office a separate Ministry of Digital Transformation. 

eGov4Ukraine team in their Kyiv office.

The project and the digital transformation of the Ukrainian administration have been tremendously successful. During the EGOV4UKRAINE project, eGA and its partners created and implemented a data exchange platform Trembita, which ensures safe communication between state registers and information systems; and the Vulyk information system connecting administrative service provision centres. Naturally, the aim was not only to create digital platforms for their own’s sake. Ukraine viewed the implementation of modern digital infrastructure as the foundation to build the reformation of administrative processes in all spheres of life and develop e-services for Ukrainian citizens and businesses. At the moment, Trembita connects more than 160 Ukrainian authorities and local governments, providing the basis for e-services. 

By the way, the word „trembita” stands for a horn used by Ukrainian highlanders as a means of communication to bring people together for events like weddings, deaths, and funerals. It is now calling together data for and from similar circumstances.

eGA’s subsequent project EU4DigitalUA is a continuation of this work. It is tasked with harmonizing Ukraine with the EU Digital Single Market and implementing the EU-Ukraine Association Agreement. European and Ukrainian experts are cooperating to develop Trembita, state registers, digital identity, e-services and strengthen cyber security capabilities. Thus, it is paving the way for even closer embeddedness of Ukraine into Europe.

War does not stop time!

Despite the direst circumstances of the Russian invasion of Ukraine, the work on digitalisation continues daily. Employees at eGA still wonder how they had lunch with their Ukrainian colleagues just a few weeks ago, and now the bombs are falling. The war has even accelerated and empowered the eGA’s team in Ukraine, consisting of 20 experts currently working in more than 10 locations to support building and maintaining the digital realm. 

Ms. Mari Pedak, head of eGA’s Ukrainian team, announced that just this week, eGA is expecting to get additional funding for increasing cyber security and data security in Ukraine in line with best practices and taking into account all standards that safeguard fundamental freedoms. She emphasized how to access in an emergency situation, digitalisation, and location independence is crucial in providing Ukrainians access to the government services they need. 

Ms. Mari Pedak.

“We help to create preconditions for Ukraine’s victory by helping to develop strong cyber defence capability, maintaining the operation of ICT infrastructure, and supporting the provision of wartime services. The results of our team’s work reach every Ukrainian because we help to protect their personal data from falling into the hands of the aggressor and support the services to reach people. eGA supports territorial defenders with everything they need, from the means of communication to food parcels,” Ms. Pedak said.

Digitalisation allows much of life to continue — to a certain extent — as before. People still get married, apply for COVID support, and even start businesses. Mstyslav Banik, one of the leaders of Ukrainian digitalization, has reported, for example, how 98% of Ukrainians are registering births online. He even gave an example of how a fresh dad registered the birth of his daughter while sitting in MacDonalds. 

If you are interested to have a closer insight into how it is to work during the war, listen to the interviews with Yurii Kopytin and Oleh Burba, Ukrainian side leaders of EU4DigitalUA project.

Estonia and Ukraine – digitally related

Estonian expertise in providing assistance to Ukraine has tangible results. One could even say that technologically we are related because Trembita shares the Estonian X-Road model – an inter-organisational secure data exchange platform that runs underneath and between Estonian digital edifice. Cybernetica, which were part of the original consortium that developed the Estonian renowned data exchange platform in 2001, provided also the system for Ukraine. In Ukraine, it was launched in 2019.

Additionally, eGA helped to develop the Vulyk – Ukrainian for “beehive” – information system. Currently, more than 370 Ukrainian municipal service centers have connections to the Vulyk information system, which is connected to state registers via Trembita. Thanks to this connection, service centers can serve citizens faster and more correctly. The Ministry of Digital Transformation is planning to keep digitalising these service centers even further so that they are compatible with the new generation of mobile-based solutions.

Aiming for security and transparency

Ukraine has, sadly, been known for its corruption, but digital data management helps to prevent this, too. With paper documents, it is easy to extract bribes to advance them in the bureaucratic machinery. With digital systems, this option is not available and the processing of, say, construction permits, is transparent. Or, for another example, the Ukrainian Anti-Corruption Prevention Agency tasked with reviewing the income and asset declaration of public officials now has access to all relevant registers through a single portal.

For obvious reasons, the security of the digital infrastructure is also paramount. During the development of Trembita, Cybernetica has reported how they had to commit to providing state-of-the-art cryptography for Ukrainian standards. The result of these efforts pays off. Data exchange between Ukrainian databases is so secure that, until now, no leaks have been detected. This has given them the confidence to announce an open call to hack a copy of their data system with the award of a million grivnas (31 000 euros). So far – no one has got the prize!

Ukraine learning from Estonia learning from Ukraine

When Estonia came up with our e-governance solutions in the 1990s, the focus was primarily on computers. Now technological progress has allowed Ukraine to rely much more on smartphones. For one, the Ukrainian system DIIA allows currently to store 11 documents in digital folders electronically: traveller’s passport, driver’s license, car registration certificate, insurance documents, vaccination certificates, child’s birth certificate, student card, tax identification number, certificate of people fleeing the war zone of Donbas and Crimea. Additionally, a digital signature can be given using face-recognition software. For these reasons, people in Estonian digital systems are now also interested in learning from the experience of Ukraine.

Diia app views.

The Ministry of Digital Transformation continues to develop Diia’s products even during the active phase of the war with Russia. Recently, a new document appeared in the Diia application – a document that contains information about the person, passport data, tax number, and place of registration. Also, new services allow the transfer of financial assistance to the Ukrainian army and even an integrated chatbot that informs the Armed Forces of Ukraine about the military equipment of Russian invaders.

Furthermore, Ms. Pedak recognizes that Ukrainians have done an excellent job informing their citizens about the possibilities of digital solutions. Diia’s digital skills development program is planned to provide 6 million Ukrainians with digital knowledge and skills over 3 years. 

As Ms. Pedak acknowledges: “In addition to the world’s first State in Smartphone concept, Ukraine has set an example and shown the importance of training and informing the population. Estonia was a pioneer in the development of e-government, but Estonia’s approach was technocratic, and the importance of communication with people was only realized during the development process.”

All eyes on Ukraine!

Resource: e-estonia