76 No. 39475
GOVERNMENT GAZETTE, 4 DECEMBER 2015
NATIONAL CYBERSECURITY POLICY FRAMEWORK FOR SOUTH AFRICA
media and telecommunications companies in Estonia demonstrated the vulnerability of a
society's information infrastructure as an aspect of national security that needs attention in all
countries. There are views that Internet is becoming more and more militarized. The problem
is very specific to malware being distributed through terror groups.
1.4
The recurrence and growing incidence of cyber-attacks indicate the start of a new era in
which the security of cyberspace requires a global dimension and the protection of National
Critical Information Infrastructure must be elevated, in terms of national security, on par with
traditional defence interests.
1.5
National Cybersecurity is a broad term encompassing many aspects of electronic information,
data, and media services that affect a country's security, economy and wellbeing. Ensuring
the security of a country's cyberspace thus comprises of a range of activities at different
levels. Towards this end, the most important policy domains include reducing the vulnerability
of cyberspace, preventing cyber threats and attacks in the first instance and, in the event of
an attack, ensuring a swift recovery of the functioning of critical information systems.
1.6
Thus, a Cybersecurity strategy must appraise the vulnerability
of a country's critical
information infrastructure, devise a system of preventative measures against cyber-attacks,
and decide upon the allocation of tasks relating to Cybersecurity management at the national
level. Moreover, it is also important to improve the legal framework against cyber-attacks, to
enhance international and institutional co-operation, and to raise public awareness and
develop training and research programmes on Cybersecurity.
1 .7
The above threats necessitate a comprehensive and all-encompassing approach in dealing
with cyber threats. In short, a Cybersecurity culture, driven in main by the State, is critical to
ensure that citizens take advantage of the information age, whilst remaining conscious of the
threats and vulnerabilities of cyberspace. The NCPF recognises the need to balance, on the
one hand, the risks associated with the use of information systems and, on the other hand,
the indispensability of extensive and free use of information technology to the functioning of
open and modern societies.
The growing threats to Cybersecurity should not hinder the
crucial role of information and communications technology in stimulating the growth of
economies and societies.
1.8
In response to the above challenges, Governments worldwide have established policies and
structures that govern interaction and collaboration between Government, private sector,
academia and civil society in an effort to prevent, react to, combat and mitigate Cybersecurity
vulnerabilities and attacks.
1 .9
The NCPF recognises that the State is charged with implementing a Government led,
coherent and integrated Cybersecurity approach which, amongst others, will:
11
This gazette is also available free online at www.gpwonline.co.za