fraudulent) by deploying an email verification system on government networks as
standard and encouraging industry to do likewise;
promoting security best practice through multi-stakeholder internet governance
organizations such as the Internet Corporation for Assigned Names and Numbers
(ICANN) and UN Internet Governance Forum (IGF);
working with law enforcement channels to protect citizens from being targeted in cyberattacks from unprotected infrastructure overseas;
working towards the implementation of controls to secure the routing of internet traffic
for MDAs to ensure that it cannot be illegitimately re-routed by malicious actors.
We will develop these technical interventions as threats evolve to ensure that citizens and
businesses are protected by default from the majority of large-scale commodity cyber-attacks.
The Government will measure its success in establishing effective ACD by assessing progress
towards the following outcomes:
Sierra Leone is harder to ‘phish’, because we would have better defenses against the use
of malicious domains and deter social engineering attacks;
a far larger proportion of malware communications and technical artifacts associated with
cyber-attacks and exploitation are being blocked;
Sierra Leone’s internet and telecommunications traffic is significantly less vulnerable to
rerouting by malicious actors;
ONS/CISU, the Armed Forces’ and other units to respond to serious state - sponsored and
criminal threats have significantly increased.
4.1.2 BUILDING A MORE SECURE INTERNET
Changing technology provides us with the opportunity to significantly reduce the ability of our
adversaries to conduct cybercrime in Sierra Leone by ensuring that future online products and
services coming into use are ‘secure by default’. That means ensuring that the security controls
built into the software and hardware we use are activated as a default setting by the manufacturer
so that the user experiences the maximum security offered to them, unless they actively choose
to turn it off. The challenge is to effect transformative change in a way that supports the end user
and offers a commercially viable, but secure, product or service – all within the context of
maintaining the free and open nature of the Internet.