I wish to also express my appreciation to Y. Bhg. Tan Sri Samsudin Osman, Chief Secretary to the Government of Malaysia, for entrusting MAMPU with the task of preparing and publishing this handbook. Finally, I thank my officers and staff in MAMPU, in particular those in the ICT Security Division who were actively involved in the entire process of conceptualising, drafting, reviewing and publishing this handbook. D ATUK DR. M UHAMMAD RAIS BIN ABDUL KARIM Director-General Malaysian Administrative Modernisation and Management Planning Unit (MAMPU) Prime Minister’s Department, Malaysia January 2002 ii