Pov The strategy appropriate through requires that agencies implementing information agency implements commensurate i. National Computer a comprehensive program. information with CICC as provisioned provide in the law. protection of their resources The program should Team that each ii.Government Computer be Response to the sensitivity of the being processed, transmitted, and stored within the information systems Team Team of Response shall be jumpstarted activities to fully equip with Emergency Emergency Team Computer (Organization developed CERT) who shall awareness CERT structure shall be clearly defined to make in the country, governance implementation of the NCSP monitoring The Computer be on target with its objectives until 2022. CERTs. shall be composed Government The CERTs National CERT body for cybersecurity CERTsS, Government Private) CERTS, CERTs Response to the National CERT. preparatory stage while the agencies are still in the organizing stage (CERT Sectoral (or provide structure in the country. basic computer emergency employees. of how to respond security incident that may may However, the CERTs Cybercrime shall include regular new ones are long term development practices and protocols to attend at regular intervals. The objective of the government that communications 26 (a ). 2012 is to ensure and coordination with all over the country are firmly estab- lished as we try to prepare and ensure that plans and the investment shall be substantial. The government needs to acquire and strengthen its capabilities to protect against any cyber threat. This means we need to develop and retain talented and qualified cybersecurity shall engage and other institutions to support the development drill exercises to synchronize meetings and coordination that shall be all over the country Act 2012. R.A No. 10175 Section etc. established and scheduled real-time coordination?’ Prevention Response, must assign focal personnel the Program Emergency CERTs 27 Development Cultivating existing talents and developing professionals. The government of all CERTs during cyber-attacks. All CERTS system. shall also conduct Capacity Building and Capability and collaborate with the academe the communication not be fully compromise building). The will provide training programs, communication to a computer public networks. such as Training of Trainers, Basic Computer The program IT personnel, although they have technical understanding, aware and educational response awareness to government IT report incidences Emergency government The strategy will include projects that will Figure 4 illustrates the hierarchy of the Computer Response is the highest as well as organizational shall coordinate and impact of the cyber-attacks. This will serve as effective to ensure that the plan shall Basic Computer Emergency Response Program related activities. All CERTS, who to report to, and how to deal with the of its progress and milestones of the National and the Sectoral response works, what to do in the event of the attack, efficient and the Establishment of the Computer Emergency Response Structure and leveling of the understanding of how computer emergency the environment through Cll protection of government and considerable investment for Therefore, the first step is to build the Apart from establishing the hierarchy of more of agencies will take time to be training will have to be planned accordingly. be given the assignment to function as a Program government Level CISO in an agency. CERT, Building the capability of the CERT Emergency building personnel Emergency Figure 4: Hierarchy of Computer Emergency Response in the Country Response (Sectoral and Private CERT) iv. Organizational The CISO Program Response (GCERT) iii, Sectoral Computer the agency. a series of training and capacity Emergency (NCERT) of cybersecurity specialists through curriculum development. Much like the need for skilled workforce to support the Outsourcing demand Industry, the gap between and supply for key cybersecurity roles must be addressed now. The lifeblood of any organization is to have a skilled workforce. cyberspace The lifeblood to secure our is to have skilledcybersecurity specialists. we work together towards a resilient ICT 36 37