68 No. 39475
GOVERNMENT GAZETTE, 4 DECEMBER 2015
NATIONAL CYBERSECURITY POLICY FRAMEWORK FOR SOUTH AFRICA
Table of Contents
ABBREVIATIONS .......... ..................................................... ................................................................. 4
EXECUTIVE SUMMARY ................................. .................... .................. . .. . . ....................... ............... . . . 5
DEFINITIONS
......................................................................................................................................
8
1.
Introduction .......... . . . . . . ............................................................ . . . ............ . . . . ............................... 10
2.
The South African Context ......... ......... ............... ............................ .. ............... ... ..................... 1 2
3.
Purpose of the NCPF
4.
Key Objectives of the NCPF............... ........................ ............... .......... ..... .............. . ................ 15
5.
Capacity to Respond to Cybersecurity Imperatives ....... ............................... ...................... ... 15
6.
Cybersecurity Hub and Additional CSIRTs . . . ................................. ......................................... 18
7.
Verification of Information Security Products and Systems ........... . . .......... . . . . . ................. . . . . . . 19
. . . . . . . . ...... .................................................... . .............. .............................
14
8.
NCII Protection ................. ............................................................................ . . . ...................... . . . 20
9.
Cryptography
.
.
.
.
.
.
................. ................ . . . . ........ ....... ......... ............................ .................... ........
21
10.
Online E-ldentity Management in Cyberspace ............... . .... ............................ .. ................ 21
11.
Promote and Strengthen Local and International Cooperation......................... ...... . ......... 23
12.
Capacity Development, Research and Development ....................................................... 24
1 3.
Cyber-warfare ............. ............................ ........................................... ............... . .... ............. 24
1 4.
Promotion of a Cybersecurity Culture .... .......................... .. . ........ . . . . . . . . .. ............................. 25
1 5.
Technical and Operational Standards Compliance ......... . . ......... ....... . . . ............................. 25
1 6.
The Role and Responsibility of the State
1 7.
The role and Responsibility of the Private Sector ............................................................. 29
18.
The Role and Responsibility of Civil Society ..................................................................... 29
19.
Conclusion
.
.
.
.
......... . . . . ............................... ............. ...............
.
. ... ............ .... ...... . . . . .................................. ......................... ........... ........... . . .. . . . .
26
30
3
This gazette is also available free online at www.gpwonline.co.za