Leping

MEMORANDUM OF UNDERSTANDING BETWEEN UNICATIONS THE MINISTRY OF FCONOMIC AFFAIRS AND COMM OF THE REPUBLIC OF ESTONIA AND THE EUROPEAN SPACE AGENCY ON RSECURITY ENHANCING COOPERATION IN THE FIELD OF CYBE  OF THE MINISTRY OF ECONOMIC AFFAIRS AND COMMUNICATIONS CY, THE REPUBLIC OF ESTONIA AND THE EUROPEAN SPACF AGEN the (hereinacter referred to colleetively as the “Participants” and singularly as “Parti ci pant”): Recognizing the existing &iendly relations between the European Space Agency and and Estonia, and the considerable progress in the development of information cornmunication technology; services Further recognizing that the security of network and information systerns and the has becorne pararnount, as security incidents and cyber attacks increasingly have al potential to bring severe challenges to information infrastructures supporting essenti services to society. Noting their shared interest in strengthening cooperation on cyber security issues between the Participants based on the principles ofequality and reciprocity and thereby contributing to the mutual benefit and friendly relations between the two countries; y and Desiring to further develop cooperation between the European Space Agenc ogy Estonia in the tield ofcybersecurity by strengthening information exchange, techno sharing and capacity building; utes to Believing that such cooperation would serve their cornrnon interests and contrib the development of cybersecurity between the Participants; t, non Respecting the principles of sovereignty, territorial integrity, mutual respec interference in the internal affairs ofeach Participant; and s of the Pursuant to the reievant iaws and reguiations and international cornrnitrnent Participants. H ave reached the fbi Iowing understandings;  Article 1 Purpose The purpose of this Memorandum of Understanding (hereinafter referred to as “MoU”) is to prornote partnerships and provide a Frarnework For enhancing cooperation in the field of cybersecurity between the Participants. Cooperation under this MoU is not intended to generate classified inFormation by the Participants. In case classified inforniation is received or generated by the Participants it wifl be used, stored, handled, transrnitted, and safeguarded in accordance with relevant applicable Iaw. Article 2 Status This MoU does not create any obligations whatsoever and neither Participant has any liability to the other for failure to perform any of the items presented in this MoU. No contractual obiigation wiII exist between the Participants regarding the subjects addressed below unless and until a written agreement to incorporate such obiigation is duly executed. Articie3 Scope The Participants vi11 undertake the following cooperation: 1) Strengthen Incident Response a. strengthen the response capacities and capabilities to cybersecurity threats and attacks; b. alert the other Participant, in case a malicious activity is detected and affects the network information system of the other Participant; c. assist the other Participant with incident investigation and mitigation ofincident irnpact, ifrequested; d. For incidents deemed by both Participants to be of highest priority, the Participants wiII mutually consult on the actions to be taken on ernergency response and the speciflc action plans. 2) Bilateral cooperation onjoint research including: a. developing operational activities and methodology in cybersecurity; h. best practices on a case-by-case hasis, to create secure network environrnent. 3) C’apacity Buildiiig a. support capacity huilding and provide training as relevant; h. mutual exchange and support For the developrnent of joint cybersecurity exerc i ses; .5  C. providing scholarships; d. raising awareness and raising the level of digital Iiteracy in the field of’ cyher and inFormation security; e. site visits; f. other lbrms ofcapacity huilding cooperation. 4) Inforniation Sharing Both Participants xviII share information on the strategy, regulation, policy, best practices, and implementation on: a. cybersecurity; b. cryptography; c. critical national infrastructure protection; d. protection ofhurnan right and freedom in cyberspace; c. building awareness and competence in information security; f. irnprovernent ofeffectiveness iii information security management. Article 4 Point of Contact Both Participants respectively appoint dedicated Point of Contacts (PoCs) responsible for the contact and coordination with each other. Details of the PoCs are included in the Annex 1 ofthis MoU. Article 5 Financial Arrangements 1) Each Participant wiII bear its own costs associated with the activities and participation under this MoU. 2) There is no clairn or obiigation for any payrnent towards the other Participant regarding to the cooperation based on this MoU. 3) Other tinancial arrangernents may be carried out mutually by the Participants, which wiII be confirmed by written and legally binding agreernent. Article 6 Amendment The Participants may revisit or amend this MoU at any time by mutual written consent. Such revisioiis or arnendments vi1I forni an integral part ofihis MoU. 4  Article 7 Termin ation The Participants may at any time terminate this MoU by giving a written notitication to the other Participant 3 (three) months before intended termination date. 1 -4 ) IN WITNESS WHEREOF, the iindersigned being duly authorized, have signed this Mo U. Signed in duplicate in Paris, on June 1 7, 2024, by authorized representatives. For the Ministry of Economic Affairs and For the European Space Agency Communications of the Republic of Estonia Massirno Mercati Sandra Särav-Tamrnus Head of the ESA Security Office Deputy Secretary General for Econornics and Innovation 6  ANNEX 1 ‘Fo the Memorandum of Understanding hetveen the Ministrv ui’ Economc Affairs and Conimuncations ui the Rcpubhe ui’ Estonia and the European Spacc Agency Designated points oieontact tor iniormatioii sharing under the SC0C of the Mo(J: Ministry of Econoniic Affairs and Cornniunications of the Republic of Estonia O PoCs wiII be nominated hy the Head oi’ Estonian ESA [)eiegation Office hours: Monday — Thursday 9:00 — 17:00 (GMF+2 / GMT+3 with DST svhich starts on the Iast Sunday in March and ends on the Iast Sunday in October) Duty service: ibr partners (MuU) 24/7 The European Space Agency Duty Servke: O PoCs: +39 06 94180881 +39 344 2501624 Roisin ONeiH Securitv.Ofliceesa.int Incident IIandHn2 +39 344 2501624 +3906 94180881 Roisin O’Neill SecurityOfflceiesa.int Cooperation & Information +390694180881 j+39 344 2501624 Roisin O’Neill ecuriiv.Omcei csa.int Management [.iason Mondav Friday 8:00 17:00 (CET) OITice hoiirs: — — 24/7 Dut servicc: for partners (MoU)