The government through DICT shall provide techniques to ensure that they are strategic direction for cybersecurity. The effectively implemented. CICC, being a coordinating center for CERTS and LEAs, as well as international linkages, ea PROSECUTION AGENCIES shall promote The NCERT menting Although of ¢ Support the national protection, prevention, cybercrimes Ny foreign cyber threat intelligence and Table 1 has already described course of implementing in the Plan. attribution ¢ Secure national security and military systems ¢ Support the national protection, prevention, mitigation of, of agencies are the first line of defense in the protection of the Cll. The following functions shall also be mandatory (cyberdefense) to their existing functions and the functions of their agencies: i. Assess the risk and magnitude harm that could Table 1.b - Roles and Responsibilities of Key Stakeholders of the result from unauthorized access, use, disclosure, disruption, modification, or destruction of information or information systems that support operations or assets under their control; ii. Determine the levels of information security appropriate to protect such information and information systems; iii. Implement policies and procedures to cost-effectively reduce risks to an acceptable level; and iv. Conduct 24 the development and implementation policies, plans, programs, of its and guidelines for security and protection. To put emphasis, cybersecurity relates to actions that stakeholders must take to establish and maintain security in cyberspace. The other domains of security“ are necessary in implementing the protection of Cll. Information security talks about confidentiality, It is also noteworthy to mention that the heads and recovery from cyber incidents ¢ Investigate cybercrimes under military jurisdiction There are several layers in security that the Information Security Roles and Responsibilities of Heads of Agencies determine KEY AREAS FOR CYBERSECURITY strategy shall focus on and shall prioritize for and eliminate duplication or dysfunctions in the ¢ Defend the country from cyberattacks ¢ Gather responses. the major key stakeholders, the governance and management structure shall be fleshed out during stakeholders’ consultation to bring a cohesive and coherent governance structure mitigation, and Pa Oe ¢ Coordinate cyber threat investigations projects, and activities for general the roles and the responsibilities of cyber threat intelligence ¢ Prosecute and is the operating arm for imple- rograms, computer emergency prosecute cybercrime - Lead domestic national security operations * Conduct domestic collection, analysis, and dissemination Reena acne cooperative, coordinated, collaborative environment for all stakeholders. ¢ Investigate, attribute, disrupt, and of information security controls and the formulation of policies, guidelines and periodic testing and evaluation integrity, availability, authenticity, and nonrepudiation, of information as an asset of the organization. We look at the strategy from a multi-dimensional perspective. As mentioned earlier, the digitization of the world has made everything interconnected and interdependent, from man to machine through ICT enabledtechnology, internet, mobile-based devices, or smart devices (the concept of Internet of Things or loT). This is achieved through the application of policy, education, training and awareness, and technology. The government aims to institutionalize information security across all government agencies down to the smallest operating units of the government. The NCSP shall provide the guidelines and the minimum compliance requirements to jumpstart implementation of information security in the government. 14 International Organization for Standardization. (2012). Information Technology — Security Techniques - Guidelines for Cybersecurity,1st Edition (ISO/IEC 27032:2012). Published in Switzerland