security technology and improve their overall security capability. The security level of eGovernment services shall be based on the risk-based assessment. 12) Establish secure and reliable environment for e-Government and e-commerce with National Public Key Infrastructure The GoR shall promote the use of national Public Key Infrastructure (PKI) in order to establish a secure and reliable environment for e-Government and e-Commerce through security services based on PKI technology including authentication, data integrity, confidentiality, and non-repudiation In collaboration with other stakeholders, the ICT Regulator shall put in place laws, regulations, policies and standards that promote use of national PKI. The ICT regulatory Authority shall manage the Root Certification Authority (Root CA) and licensing of PKI services and shall define the requirements for Accredited Certification Authority (ACA) and usage of digital certificate. The Agency in charge of Cyber Security shall be accredited as the GoR certification authority. In collaboration with other certification Authorities, it shall promote the usage of digital certificates in critical e-Government services, e-Commerce, e-Banking, e-Healthcare system as well as other sectors. POLICY AREA 6 – CYBER SECURITY CAPACITY BUILDING AND AWARENESS Objectives: (i) To build cyber security prevention and response capabilities; (ii) To create cyber security awareness for the Rwandan citizens. Measures: 13) Cyber Security Capacity Development Cyber security threats are dynamic and complex to mitigate and require a comprehensive program of continuous development of human capacity and retention policy. To ensure a sufficient level of expertise in the field of cyber security across the public and private sector, the Agency in charge of Cyber Security shall develop and implement a cybersecurity capacity-building program. In this program a workforce of professionals skilled in cyber security shall be crated through capacity building, skills development and professional training. 13

Select target paragraph3