70 No. 39475
GOVERNMENT GAZETTE, 4 DECEMBER 2015
NATIONAL CYBERSECURITY POLICY FRAMEWORK FOR SOUTH AFRICA
EXECUTIVE SUMMARY
1.
Information and Communications Technologies (ICTs) are indispensable in modern
society.
The
interconnectivity
of computer networks contributes
significantly
to
economic growth, education, citizens' participation in social media and many others.
2.
This new electronic environment is commonly known as cyberspace. The dependence
of the daily functioning of society on information communication technology solutions
has led to a concomitant need for the development of adequate security measures.
This is because the danger that Cybersecurity threats pose, is real.
3.
The numerous cyber-attacks launched in recent years against advanced information
societies aimed at undermining the functioning of public and private sector information
systems have placed the abuse of cyberspace high on the list of international and also
local security threats.
stake,
it
is
Given the seriousness of cyber threats and of the interests at
therefore
imperative
that
the
comprehensive
use
of
information
communication technology solutions be supported by a high level of security measures
and be embedded in a broad and sophisticated Cybersecurity culture. For this reason,
the cyber threats need to be addressed at both the global and national levels.
4.
National Cybersecurity is a broad term encompassing the many aspects of electronic
information, data and media services that affect a country's security, economy and
wellbeing. Ensuring the security of a country's cyberspace therefore comprises a range
of activities at different levels.
5.
World-wide Cybersecurity strategies are being developed and are aimed at setting
policy
goals,
measures
and
institutional
responsibilities
in
a
succinct
manner.
Generally, the primary concern is to ensure the confidentiality, integrity and availability
(C-1-A) of computer data and systems and to protect against or prevent intentional and
non-intentional incidents and attacks.
Priority is also given to critical information
infrastructure protection (CliP).
6.
These strategies normally also contain measures against or reference to cybercrime.
Measures against cybercrime provide a criminal justice response to C-1-A attacks
against computers and thus complement
responses.
technical and
procedural Cybersecurity
However, cybercrime comprises also offences committed by means of
computer data and systems, ranging from the sexual exploi tation of children to fraud,
hate speech, intellectual property rights (IPR) infringements and many other offences.
Furthermore, any crime may involve electronic evidence in one way or the other. While
this may not be labelled "cybercrime", a cybercrime strategy would nevertheless need to
ensure that the forensic capabilities be created that are necessary to analyse electronic
5
This gazette is also available free online at www.gpwonline.co.za