Republic of Mauritius - National Cyber Security Strategy 1. INTRODUCTION Societies are becoming increasingly more dependent on information and communication technologies which are globally interconnected. With these growing dependencies, information systems and networks are extremely vulnerable to disturbances which can affect their functioning. Cyber-security threats have become more sophisticated and have more serious repercussions than before. There is a growing misuse of electronic networks for criminal purposes or for objectives that can adversely affect the integrity of a nation’s critical infrastructures. Cyber-attacks can be mounted at any time, against anyone and from anywhere. In a realm, where technology and change are speeding, responding effectively to cyber threats require a consistent and extensive effort. To address the cyber security issues in Mauritius, a National Cyber Security Strategy is required which will define the main goals, guidelines and action plans to respond effectively to cyber threats. The strategy also recognizes the fundamental challenge of balancing the measures intended to protect security. By following the strategic guidelines and measures, Mauritius will be able to manage deliberate and unintentional disturbances in the cyber space as well as respond to and recover from them. The aspiration is that the action plans outlined in this strategy will position Mauritius where citizens know what to do to protect them; law enforcement is tackling cyber criminals; effective cyber security is seen as positive for business in Mauritius; online public services are secure and the threats to our national infrastructure and national security have been confronted. The strategy provides an overview of what it takes to effectively protect information systems and networks and also gives an insight into the Government’s approach and strategy for protection of cyberspace in the country. The cybersecurity strategic programmes which were set out in both NICTSP 2007-2011 and NICTSP 2011-2014 have been taken into account to build the cybersecurity strategic plan. The inputs have also been taken from the survey conducted on the State of Information Security in Businesses in Mauritius completed in October 2013. The purpose of the survey was to assess the security posture of businesses in Mauritius. The cyber security policy is an evolving task and it caters to the whole spectrum of ICT users including home users and small, medium and large enterprises and Government & nonGovernment entities. It serves as an umbrella framework for defining and guiding the actions related to the security of cyberspace. It also enables individual sectors and organisations in designing appropriate cyber security policies to suit their needs. 5|Page