No. 39475 77
STAATSKOERANT, 4 DESEMBER 2015
NATIONAL CYBERSECURITY POLICY FRAMEWORK FOR SOUTH AFRICA
a)
Promote a Cybersecurity culture and demand compliance with minimum security
standards;
b)
Strengthen intelligence collection, investigation, prosecution and judicial processes,
in respect of preventing and addressing cybercrime, cyber terrorism and cyber
warfare and other cyber ills;
c)
Establish public-private partnerships for national and international action plans;
d)
Ensure the protection of National Critical Information Infrastructure; and
e)
Promote and ensure a comprehensive legal framework governing cyberspace.
1 . 1 0 This framework is intended to implement an all-encompassing approach pertaining to all the
role players (State, public, private sector, civil society and special interest groups) in relation
to
Cybersecurity.
This
framework
will
be
supported
by
a
National
Cybersecurity
Implementation Plan which will be developed by the SSA in consultation with relevant
stakeholders,
identifying
roles
and
responsibilities,
timeframes,
specific
performance
indicators, and monitoring and evaluation mechanisms.
2.
2. 1
The South Afr ican Context
South Africa like many other countries has become dependent on the Internet to govern, to
conduct business and for other social purposes. The Internet has become indispensable to
many South Africans and will continue to be, as more people access the information highway.
Taking into consideration the increase in national and international bandwidth in South Africa,
cybercrimes and threats are and will continue to increase. These cybercrimes and threats
have the potential to impact on our national security and economy.
2.2
Currently
there
are
various
pieces
of legislation,
some
administered by different Government Departments and
with
overlapping
mandates
whose implementation is not
coordinated. Furthermore, the legislation when viewed collectively does not adequately
address South Africa's Cybersecurity challenges.
2.3
The
absence
of an aligned legal and regulatory
framework,
and
the
challenge
of
uncoordinated Cybersecurity efforts is not unique to South Africa, other jurisdictions are faced
with the same challenges.
2.4
Statistics in 2011 indicate that South Africa was in the top three countries that are targeted for
phishing purposes, the other countries are the USA and the UK. In addition to phishing, other
12
This gazette is also available free online at www.gpwonline.co.za