EXECUTIVE SUMMARY Te rapid changes in information and communications technology (ICT) have drastically altered the way we live. There are growing dependencies on these technologies that include critical functions of industries and industry control systems. The newly created Department of Information and Communications Technology, through its attached agency, the Cybercrime Investigation and Coordination Center (CICC), adapts to the new paradigm with the comprehensive National Cybersecurity Strategy Framework. The development of the Framework shall institutionalize the adoption and implementation of Information Security Governance and Risk Management approaches. These globally recognized standards shall provide the government a systematic and methodical practice of ensuring the protection of our mission critical and non-critical infostructure. The government shall build its capability and capacity for quick response and recovery through the establishment of the National Emergency Response Team (NCERT). Included in the mandates of DICT are to “ensure the rights of individuals to privacy and confidentiality of their personal information; ensure the security of critical ICT infrastructures including information assets of the government, individuals and businesses; and provide oversight over agencies governing and regulating the ICT sector and ensure consumer protection and welfare, data privacy and security, foster competition and the growth of the ICT sector.” One of the priority areas that the Department has to immediately institute is the formulation of the National Cybersecurity Plan to address the urgency to protect the nation’s Critical Infostructures, Government Networks both Public and Military, Small Medium Enterprises to Large Businesses and Corporations and its supply chains, and every Filipino using the Internet. The primary goals of this Plan include: (1) assuring the continuous operation of our nation’s critical infostructure, and public and military networks; (2) implementing cyber resiliency measures to enhance our ability to respond to threats before, during, and after attacks; (3) effective coordination with law enforcement agencies; and (4) a cybersecurity-educated society. 1. Making Critical Information Infrastructure (CII) Trusted and Secure The functions and services of critical infostructure and those of the governmental bodies are vital to the country’s socioeconomic activities. Any interruption of these functions and services can cause direct and significant consequences to people’s safety and security; therefore, it is crucial to take precautionary measures to address potential threats. It is necessary to take “mission assurance”-based approaches. Mission owners should analyze risks and should have discussions with asset owners in order to accomplish the functions and services of critical infostructure or the governmental bodies. Mission owners should ask comprehensive decisions of senior executives by providing information on vulnerabilities including resultant risks. ll. Making Government Environment Secure Information To respond to cyberattacks, particularly targeted ones that are apparently aimed at stealing, damaging, or altering information, the agency will take government-wide, multilayered measures based on the assumption of cyberattacks. This must also include contingency plans for this possibility - a certain entity will be used as a springboard for another entity that is the original target of a cyberattack. In promoting these measures, the Government will ensure that they are based on common internationally accepted standards for the governmental bodies, and will conduct risk analysis on its administrative responsibilities to optimize the processes involved in making government information environment secure. lll. Making Businesses Secure Along with the continuous increased interconnectivity of cyberspace and physical space, the number of cybersecurity incidents closely related to individuals and enterprises - such as illegal money transfers by exploiting Internet banking, stealing information by targeted attacks, and phishing — has drastically grown. There is also a rise in the number of breaches of personal or confidential information, including a large-scale personal data breach. Thus, such repeated crimes have become serious social concerns. Without avanced cybercrime response and investigative capabilities, it is difficult to capture the reality of malicious cybercrimes; to control cybercrimes appropriately in accordance with laws and statutes; and to be ready to handle new methods of cybercrimes that would likely emerge in the near future. IV. Making Individuals Aware and Secure In the current environment, cyber risks have become more complex and diversified and Internet users with insufficient cybersecurity awareness become victims or end up becoming offenders unknowingly. Therefore, the Internet and the advent of mobile technology have increased utilization of computers, smartphones, and other devices to transact, process, transmit, and store information. The public awareness and knowledge of cybersecurity should reach suf- TRUSTED RESILIENTICT INFOSTRUCTURE