74 No. 39475
GOVERNMENT GAZETTE, 4 DECEMBER 2015
NATIONAL CYBERSECURITY POLICY FRAMEWORK FOR SOUTH AFRICA
"Cyber terrorism" means use of Internet based attacks in terrorist activities by individuals and
groups, including acts of deliberate large scale disruptions of computer networks, especially
4
computers attached to the Internet, by the means of tools such as computer viruses ;
"Cybercrime" means illegal acts, the commission of which involves the use of information and
communication technologies;
"ICT"(Information and Communication Technologies) mean any communications device or
application including radio, television, cellular phones, satellite systems, computers, network
hardware and software and other services such as videoconferencing ;
"Information society" means 'people-centred, inclusive and development-oriented information,
where everyone can create, access, utilise and share information and knowledge, enabling
individuals, communities and people to achieve their full potential in promoting their sustainable
development and improving the quality of their life.
"JCPS CRC" means Justice, Crime Prevention and Security Cluster's Cybersecurity Response
Committee.
"Malware" means malicious software, and is programming (code, scripts, active content, and
other software) designed to disrupt or deny operation, gather information that leads to loss of
privacy or exploitation, gain unauthorized access to system resources, and other abusive
behaviour. The expression is a general term used by computer professionals to mean a variety of
forms of hostile, intrusive, or dangerous software or program code. Malware's most common
pathway from criminals to users is through the Internet: primarily by e-mail and the World Wide
Web. (Symantec published a report in 2008 indicating that ''the release rate of malicious code and
other unwanted programs may be exceeding that of legitimate software applications. "According
to F-Secure, "As much malware [was] produced in 2007 as in the previous 20 years altogether."
\
"Organisation
and
user's
assets"
include
connected
computing
devices,
personnel,
infrastructure, applications, services, telecommunication systems, and a totality of transmitted
and/or stored information in the cyber environment.
"Organ of State" means an Organ of the State as defined in section 239 of the Constitution.
"Phishing" indicates, as an example, the fraudulent way of attempting to acquire sensitive
information such as usernames, passwords and credit card details by someone masquerading as
a trustworthy entity in an electronic communication, to lure the unsuspecting public. These modus
4
Ibid.
5
http://en.wikipedia.org/wiki/Malware
9
This gazette is also available free online at www.gpwonline.co.za