TABLE OF CONTENTS Contents FOREWORD...................................................................................................................................... ........ii PREFACE...................................................................................................................................................iii ACRONYMS..............................................................................................................................................vi EXECUTIVE SUMMARY........................................................................................................................vii 1. INTRODUCTION..........................................................................................................................1 1.1. Background.....................................................................................................................................1 1.2. Situational Analysis........................................................................................................................2 1.2.1. National Development and the Role of ICT...................................................................................2 1.2.2. Cybersecurity in Malawi.................................................................................................................3 1.2.3. Cybercrime in Malawi....................................................................................................................4 1.2.4. Linkages with other National Policies and Programmes................................................................4 2. METHODOLOGY..........................................................................................................................5 3. THE STRATEGIC ANALYSIS......................................................................................................5 3.1. Capability Maturity Model.............................................................................................................6 3.2. Key Strategic Issues........................................................................................................................9 4. BROAD DIMENSIONS FOR NATIONAL CYBERSECURITY STRATEGY..........................10 4.1. Vision............................................................................................................................................10 4.2. Mission .........................................................................................................................................10 4.3. Guiding Principles........................................................................................................................10 4.4. Strategic Goals..............................................................................................................................11 4.5. Specific Objectives and Actions ..................................................................................................11 4.5.1. Specific Objective 1: Identify the Critical Information Infrastructure of Malawi........................12 4.5.2. Specific Objective 2: Protect the Critical Information Infrastructure of Malawi.........................12 4.5.3. Specific Objective 3: Continuously manage cyber threats and risks to enhance incident response. ............................................................................................................................12 4.5.4. Specific Objective 4: Strengthen Malawi’s legal and regulatory frameworks .............................14 4.5.5. Specific Objective 5: Build capacity of law enforcement agents and the judiciary ....................14 4.5.6. Specific objective 6: Enhance technical and procedural measures for CIIs .................................14 4.5.7. Specific Objective 7: Continuously develop cybersecurity technical capacity in Malawi...........15 4.5.8. Specific Objective 8: Facilitate retention of cybersecurity expertise within Malawi...................15 4.5.9. Specific Objective 9: Enhance cybersecurity awareness across the general public and national institutions .........................................................................................................................................16 4.5.10. Specific Objective 10: Promote collaboration and information sharing on Cybersecurity. ......16 4.5.11. Specific Objective 11: Strengthen online safety for vulnerable groups, especially children ......17 4.5.12. Specific Objective 12: Strengthen Cybercrime detection ..........................................................18 4.5.13. Specific Objective 13: Promote national and international collaboration in the fight against cybercrimes .........................................................................................................................................18 4.5.14. Specific Objective 14: Enhance trust and confidence in cyberspace, especially in applications relating to e-Government and e-commerce. .....................................................................................19 4.6. Focus Areas ............................................................................................................................20 5. INSTITUTIONAL FRAMEWORK .....................................................................................21 5.1. Roles and Responsibilities ..................................................................................................21 5.1.1. Office of the President ...............................................................................................................21 5.1.2. Ministry of Information, Civic Education and Communications Technology (MICECT) .......21 5.1.3. Malawi Communications Regulatory Authority (MACRA) ..............................................21 5.1.4. Ministry of Justice and Constitutional Affairs ........................................................................21 5.1.5. Ministry of National Defence & Ministry of Home Affairs and Internal Security ....................21 iv