although it is top of the agenda for many of these countries as networked computer
infrastructure expands.
The International Telecommunication Union (ITU) through the International Multilateral
Partnership against Cyber Threat (IMPACT) program has over the last few years played
a leadership role is providing early warning systems and training cyber security experts
around the world. Today, IMPACT has over 152 countries members. ITU has indeed
developed a framework for developing countries to help them kick start a process of
developing policies and strategy around cyber security.
Forum of Incident Response and Security Teams (FIRST Inc.) is a global forum of
Computer Security Incidents Response Teams (CSIRTs). Membership to FIRST is by
recommendation and through a rigorous standards process.
The Budapest Convention on Cyber Security which has been in force since 2004 was
elaborated by the Council of Europe with the participation of Canada, Japan, South
Africa and the USA. The Convention is open to any country which wants to participate.
The convention is used as a guideline, reference standard or model law in more than
100 countries.
iii. Regional Initiatives
Initiatives
Governments in Africa today have moved the ICT discussion from infrastructure to
cyber security. A decade ago, infrastructure was a major challenge to many African
countries. Many countries have invested in massive in-country infrastructure and the
connectivity and access challenge is waning. The networked computer infrastructure
coming up in many African countries has opened up cyber space to many more citizens
and accompanying this, the risk of using the Internet. A few countries like Tunisia, South
Africa and Kenya already have a CERT in place. Many countries are also in the process
13 | P a g e
National Cyber Security Policy & Strategy