The Infocomm Security Masterplan will augment current capabilities and develop new capabilities in three key areas - assuring information protection and risk mitigation, situational awareness and contingency planning and in the development of human and intellectual capital, which includes enhancing cyber security awareness among Internet users, the development of professional skills and the promotion of research & development in infocomm security. Initiatives to be rolled out include:
- The National Cyber-threat Monitoring Centre, which will be a central facility for 24 by 7 vigilance and analysis of cyber threats, actively monitoring and detecting real-time attacks.
- A National Authentication Infrastructure, to develop reliable and robust authentication means to curb identity theft and encourage offering of more secure e-services.
- The National Infocomm Security Awareness Programme, where a series of public outreach and awareness campaign will reach out to and educate home users on best computing security practices.
- An Infocomm Vulnerability Study for National Critical Infrastructure, to assess the infocomm protection defences of critical infrastructures such as finance, energy, water, telecoms, healthcare and transport.
- Business Continuity Readiness Assessment Framework, to measure the effectiveness of business continuity plans of government agencies.
- A Common Criteria Certification Scheme, to build the capability to certify infocomm products in accordance to the Common Criteria, a set of international standards on security.
The masterplan was developed through a multi-agency effort led by IDA under the guidance of the National Infocomm Security Committee (NISC), chaired by Peter Ho, Permanent Secretary for Foreign Affairs and National Security & Intelligence Coordination. Feedback and inputs were gathered from companies and government agencies through surveys and focus group discussions.
"A cyber security incident in one organisation could very likely have a ripple effect across other critical infrastructures and systems," said Peter Ho, Chairman of the NISC.
He went on to say that while government looked at issues of national security importance, the infocomm industry could lend its expertise and experience to develop important services and solutions for the Masterplan projects.
Quelle: Public Sector Technology & Management, 07.03.2005
