cognizant of these facts and
virtual environment.
realities of the
asset of the government,
the pulic and
private sector and down
To adapt to the fluid state of changes of the
of hacking, defacement,
2013 through the Information and
information and communications
Denial of Service or DDOS.
Communications
technologies, the Internet and cyberspace,
Incident Response
Information as a critical
Manual
was crafted in
Technology
(ICT) Office.
the Philippine Congress
to the individuals
that reside within our computer sytems,
On September
network systems, or application systems
189 which created the National Cybersecurity
must be protected
compromised
and secured
from being
Inter-Agency Committee
or NCIAC
passed to protect
a
necessary undertaking
passed
into law on
Distributed
The Philippines is no stranger to being a
May 23, 2016 the Republic Act No. 10844
victim of cyber-espionage.
which
security firm reported”? in 2016, that a
is The Creation of the DICT.
was
signed. The creation of the National
or breached. As early as 1965,
laws have already been
2015, the Executive Order No.
and
A Finland-based
malware was found targeting confidential
NCIAC
is
information of government
Under R.A. 10844, it paved the way for a
reflective of its
National Agency
and
private
organization. The malicious virus called
to focus and address ICT-
vision towards creating a safe Philippine
related issues and matters. Incidentally, the
Remote Access Trojan (RAT) is often
individuals or a group of individuals who
Cyberspace.
Cybercrime
disguised as an innocent file but once it has
violate and cause harm to our right to privacy
aspects in the creation of the NCIAC
of information or those who seek to
have one direction in the coordination
compromise
between
people and
property and to prosecute
our system. To cite a few, we
government
is to
Act of 2000.
Prevention Act of 2012 (R.A.
10175) which constituted the creation of the
been opened,
Cybercrime
victim’s computer and gathers intelligence to
Investigation and Coordinating
Center (CICC) and the National Privacy
agencies and other
relevant sectors. This provides an avenue
have the Anti-Wire Tapping Act of 1965 and
the Electronic Commerce
One of the most important
in
Commission
be sent back to the attacker.
which was created through the
Data Privacy Act of 2012 (R.A. 10172).
building a consensus that requires national
attention, and immediate decision and action
In 2004, the Arroyo Administration
included
has
in its priority the agenda
of
such as the pre-paration of appropriate and
In the creation of the DICT, the National
effective measures
Telecommunications
to strengthen
Commission
(NTC), the
establishing a National Cybersecurity Plan.
cybersecurity capabilities against existing
CICC and the NPC were
This became
and future cyber threats.
Department as attached agencies.
documents
one of the main reference
when
the Information
\\
NATION
. STATE
Resilience
Organizations
o
Voters’
ADVANCED
PERSISTANT
THREAT
Most.
®
On March
AGILITY/SPEED OF ACTION
OU
B
TOOLS-BASED
INTEGRATED PICTURE
DYNAMICDEFENSE
RESILIENT ENTERPRISE
People based
following
doctrine and
doing there best
to “put out fires”
Applying tools
and technologies
piecemeal to
assist people in
reacting faster
Loosely intergrated
with focus on
Predictive and agile,
the enterprise
instantiates policy,
illuminates events,
and helps the
operators find, fix,
and target for
response
Predictive and
mission focused,
isolates and contains
damage, secure
supply chains, and
protext key critical
infrastructures to
operate through
cyber attack
standards-based
data
exchange
IA situational
awareness
for
Philippines in which at least 54
million sensitive data®
numbers
According
>
of Filipinos working
to common
by various newspapers,
the breach into the
to ordinary individuals:
Cyber-enabled criminals
These are traditional crimes that are
magnified, and increased
by
IP address was discovered and tracked
down.
networks, and other forms of
Information and Communications
or ICT (e.g. cyber-enabled
Technology
fraud and data
Cyber-dependent criminals
These are crimes that can be committed
through the use of ICT devices. These
devices become
wesites have
been subjected? to attacks including attempts
8
http://cnphilippines.com/news/2016/06/17/
Comelec-hack-data-breach.html
in
the use of computers,
theft).
the National Bureau of Investigation after the
12
public, and private sectors and
trickles down
computer
news articles reported
In 2016, at least 68 government
government,
scale or reach through
overseas.
injection. The alleged hacker was arrested
There are two interrelated forms of criminal
perpetuated,
was leaked into the
system occurred through the use of SQL
Figure 1: Cybersecurity Maturity Model
7
The Economic Impact of Cybercrime and Cyber Espionage. Center for Strategic and International Studies.
McAfee. July 2013
by
Internet, including 1.3 million passport
A
REACTIVE & MANUAL
interoperability and
Anonymous
was reportedly hacked
Cyber criminals
threat against information assets of
2016, the server of the Philippine
Database
SOURCES OF THREATS
activity that increase the risks of the potential
The Threats
CONVENTIONAL
THREAT
>
under the
Security
a
THREAT
4
placed
it releases a virus into the
committing
an instrument for both
the crime and the target of the
crime (e.g. hacking to steal data, developing
and
propaga-ting
intrude and
malware
to be used to
breach systems for financial
gains, disruptions of network systems, etc.).
13
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents