Cambodian ICT Masterplan 2020 2. CamCERT Enhancement for Establishing ICT Security 2.1 Introduction The RGC will conduct enhancement plans for the existing CamCERT that has been operated since 2007 as a single national authority for establishing policies related to information security as well as coping with security incidents. Through this project, the RGC will expand business scope of CERT to the international level and enhance proactive response to incidents. Additionally, the RGC will change the CamCERT works from offline to online by implementing CERT-related information systems. Lastly, the RGC will extend the service scope of CamCERT to the whole of government agencies and major private agencies in Cambodia. 2.2 CERT in Cambodia The ICT Security Department under GDoICT of the MPTC is responsible for CamCERT business now. But most of team members had not enough knowledge and experience for operating systems and infrastructure related to CERT. In terms of work status, “Proactive Service”, which monitors and prevents incidents before they occur, is insufficient. And CamCERT manages incidents just 2~3 times a month, hence it does not provide enough services to effectively respond to incidents on vulnerability that should be handled in the real time. Additionally, CamCERT is working their tasks with PC by using just worksheet programs such as EXCEL and e-mail without information systems. Moreover, because CamCERT did not establish information systems for CERT business and services, security infrastructure related to CamCERT is vulnerable. Therefore, the RGC needs systems for CamCERT - such as ESM (Enterprise Security Management), TMS (Traffic Management System), IMS (Incident Management System), VAS (Vulnerability Analysis System)-, security S/W, training appliances and safe infrastructure configuration plans. 2.3 Establishment Plan for CamCERT Enhancement The RGC will conduct CamCERT enhancement through three phased approaches. Among them, this Pilot Project focuses on first phase in the short term perspective. Specifically, in order to efficiently and safely perform CERT business and service, CamCERT will conduct the following agenda: developing CERT business system, developing CERT service system, improving the working environment of CERT operation staff and strengthening the infrastructure of the CERT office. 49