SCOPE The National Cybersecurity Plan 2022 intended is government or misuse, whether it includes intentional or accidental, or from natural disasters. to shape the policy of the on cybersecurity and the crafting of guidelines that will be adapted The above definition is reflective of the down definition of cybersecurity! from the to the smallest unit of the government. The strategy also intends to provide a International Standards on Guidelines for coherent set of implementation Cybersecurity plans, (ISO/IEC 27032:2012), programs, and activities to be shared to the “oreservation of confidentiality, integrity, and public and the private sector, the civil availability of information in the Cyberspace”, society, and the academe, which including the incidentally was also adopted from the private individuals. International Standards on Information The strategy covers the entire country 27000:2014). including all Philippine networks connected document, through government ISO/IEC 27032:2012. Security Management networks, domestic and System (ISO/IEC For the purpose of this it shall adopt the definition from A report from Trend Micro? international. The strategy also mandates that all government be assessed and public systems shall and must be classified under the Thus, Information Security, Application Security, Network Security, Internet Security, National Security System. and Cll Protection are central to the key areas The nexus of the cybersecurity strategy is government. anchored is set to share the vision of the Government of developing the cybersecurity on the last three clauses under plan of the The objective of this document Section 2 of the Republic Act No. 10844, to for cybersecurity wit, “(l) to objectives to achieve the goal, including the ensure the rights of individual to in 2022 and the key privacy and confidentiality of their personal guiding principles, roles and responsibilities information;(m) to ensure the security of the of all key players and the stakeholders. critical ICT infrastructures including information assets of the government, individuals, and businesses; and (n) to provide oversight over agencies governing and regulating the ICT sector and ensure consumer protection and welfare, data THE CYBER THREAT LANDSCAPE To understand better the threat that we are now facing in the digital age, the black privacy and security, and foster competition market having a pivotal role in cyber threats and growth of the ICT sector.” is discussed Therefore, the context of cybersecurity within this document refers to the protection of information systems (hardware and briefly within this section. The criminal underground use of the web organized operating with the is highly fragmented. Each expertise on certain services and each infrastructure), the data within these systems, actively offers said services on the deep web. systems from any unauthorized by these access, harm However, as it learns more of the “benefits” anonymity offers, the Japanese ecosystems market now that are actively operating across Europe, North and South America, Africa, and Asia. boasts uncommon as leaked data search engine underground offerings such privacy protection services. Each of these criminal ecosystems offers The Chinese underground economy sells unique and specialized services in the black both software and services similar to its market. counterparts. The economy Stiff competition in the Russian market pushes up the game. provide goods black The sellers in the shortest amount of has a robust offering of tools and hardware development and acts as a prototype hub for criminals. time, with the most efficiency. The Russian black market is one of the pioneers in the The North American underground encourages to budding economy and provides support counterparts such as Germany. the criminal world. This type of criminal ecosystem The Japanese hand underground on the other is still relatively new in the cybercrime economy. It prefers to cater more on taboo underground novices to jumpstart a career in is not exclusive to members the Japanese hackers like Russians, Germans, and Chinese. Unlike its US counterpart, the Canadian rather than on the typical illegal trade that underground occurs in the black market and is only documents prefers to sell fake or stolen and credentials. exclusive to specific members. 1 International Organization for Standardization. (2012). Information Technology —- Security Techniques — Guidelines for Cybersecurity,1st Edition. Published in Switzerland. like and is unlike the tech-savvy criminal group offers specialized software including associated and support and the services that are provided indicated that there are at least six different cybercriminal 2 http://www.trendmicro.fr/media/wp/cyber crime-and-the-deep-web-whitepaper-en.pdf