we shall treat all forms of cyber-attack serious and we will defend ourselves at all cost;
we shall act in accordance with national and international laws;
We shall protect and promote our core values. These include democracy; the rule of law;
human rights;
we shall preserve and protect citizens’ privacy;
We shall work in partnership with all sectors. Government shall meet its responsibilities
and lead the national response;
responsibility for the security of organizations across the public sector, including cyber
security and the protection of online data and services, lies with respective MDAs;
we shall not accept significant risk being posed as a result of businesses and
organizations failing to take the steps needed to manage cyber threats; and
We shall ensure Government interventions have substantive impact on overall national
cyber security initiatives.
3.2 DUTIES
Securing the national cyberspace will require a collective effort. Each and every one of us has an
important part to play.
3.2.1 Persons
As citizens and noncitizens, we should take practical steps to secure the assets we value in the
virtual world just as we do in the physical world. That means fulfilling our personal
responsibility to take all reasonable steps to safeguard not only our hardware – our smart phones
and other devices – but also the data, software and systems that affords us freedom, flexibility
and convenience in our private and professional lives.
3.2.2 Private sectors and organizations
Businesses, public and private sector organizations and other institutions hold personal data,
provide services, and operate systems in the electronic domain. The connectivity of this
information has revolutionized their operations. However, with this technological transformation
comes the responsibility to safeguard the assets which they hold, maintain the services they
provide, and incorporate the appropriate level of security into the products they sell. Society shall
look to businesses and organizations to take all reasonable steps to protect their personal data,