monitoring systems our networks and require a thorough perimeter understanding of Cll Protection Systems and networks that are operated our network architecture and how attackers critical infrastructure providers (e.g. can exploit gaps in between telecommunications, these network systems. Technological advancement growing and the number of available of network by water resource agencies, or power generators and plants) must be protected and secured. hacking tools have increased the threats into our systems. As a way to combat the growing problem, are connected recommended. Application Security Conducting Application security is a process performed to apply control and measurements application systems to manage to deployment and use risks. These controls and measurements are applied to the application itself (e.g. processes, components, and software, results), to the data (e.g. configuration application testing on a regular basis will mitigate and identify system for applications developed and institutionalized across all government agencies, especially Network Security Network security covers design, involved in the application’s life cycle. implementation, we develop the applications, security should be embedded stage of the System and stressed into every Life Cycle Development (SLDC). Security assessment of applications is conducted after it is developed public network, between between government these networks, and the users. with Operational Technology in Technology” The objective of internet security is to software systems to monitor and control the objectives. When Operational (consist of hardware and protect internet-related services and ICT industrial controls including systems and networks as an extension of systems, air/land/sea transportation control network security in organizations including in systems, etc.) is deployed the privacy of homes. Information Technology” (refers to application of computers to transmit, It also ensures the uses the internet. The risks that the defense in depth purpose of converging that flows across the cyberspace will ensure through a and network links are building control together with and store data the security internet poses such as data and information becomes robust. The these two methods protection of both the front and back ends from intrusion and potential attacks. One of in In 2001, the Government indicated that the the internet is small business-owners, list” of “critical infrastructure includes, especially since the use of the e-commerce without limitation, power platform has gained transmissions and distribution facilities, oil awareness and public network the Internet Security the internet must be fully understood. security on networks within the government and Technology the vulnerable groups with high exposure and operation of networks and and public Adopting of Integrating Information protecting critical infrastructure is essential to series of computers to achieve the purpose of information When approach highly likely to happen. Various threats over technology, processes and stakeholders The strategy includes the network. Everyone those that operate critical systems. data, user data, organization data), and to all as the critical infostructure (CII) plays processes are not fully implemented known a vital role in our economy. reliability and availability of internet services. vulnerabilities. Currently, vulnerability assessments into our network is inventory of the government OOO Ce UOT TUCO COCO Ce The critical information infrastructure also inventory of devices that momentum. Raising the will help reduce the risks and the and gas depots, plants, power key public work structures, vulnerabilities. vital communications 15 Harp, D. , Gregory-Brown, B. IT/OT Convergence, NEXDEFENCE.=,https://docs.google.com/document/ d/ILjiI9MeZbA2U63AVIbseVOWRmrnA8SBaNfjKNzq4m nksQ/edit?ts=58af77d6 16 Harp, D. , Gregory-Brown, B. IT/OT Convergence, NEXDEFENCE.=,https://docs.google.com/document/ d/ILjiI9MeZbA2U63AVIbseVOWRmrnA8SBaNfjKNzq4m nksQ/edit?ts=58af77d6 installations, public and and these issues are fixed. There are malicious actors Intrusion detection methods whose analysis are one of the most basic security only intention is to break into the and traffic computer systems and network systems to measures damage security of our systems. Auditing and them, whether for fun or for profit. we can implement to ensure the 17 Sec. 10, Memorandum Circular No. 37, s. 2001, Providing Four Pillars of Policy and Action of the Government Against Terrorism. 26 27