g) Coordinate cybersecurity exercises and conduct cyber drills with regional CERTs
h) Periodically provide advanced trainings and capacity building programs to enhance
capacity and ensure improved performance.
5. Enabling secure and sustainable e-Government through the adaptation of best
practices and reliable technologies
a) MCIT will adapt and implement a comprehensive information security framework to
ensure a robust, secure trustworthy e-Government services throughout the government.
b) Afghanistan Root Certification Authority (ARCA) to enforce policies and mandate the
use of Digital signature for all e-Gov, and m-Gov services within the government
6. Establishing certification and testing body
a) MCIT will dedicate an additional line and recruit a team of professional programmers
solely to test and certify software and applications. The testing processes must be in
compliance with all international standards, security has to be part of software
developing life cycle. This will ensure the security and integrity of
software/applications
7. Facilitating trainings for Information and Cyber security experts
a) MCIT will engage and coordinate training and capacity building programs with donor
communities (World Bank, ITU, USAID) to secure funds for information security
trainings, seminars and workshops for CSOs within the government and private sector
b) MCIT will work closely with the Ministry of Higher Education (MoHE) and Civil
Services Commission to secure scholarships opportunities for masters programs in the
field of information security.
8. Safeguarding data privacy of government, businesses and citizens
a) ISSD of MCIT will develop a plan and information security frameworks for the
protection of Critical Information infrastructure. The plan should be inclusive of
secure mechanisms for information flow while in transit and at rest with proper
disaster recovery plan - meeting the business requirement
b) Guidelines and international standards will established for, Risk management, Crisis
management and cyber/electronic crime investigation
9. Promoting public private partnership
a) Private sector will be encouraged to work closely with public institutions and being
granted contracts and projects to deliver services complimentary to the government –
Information
Systems
Security
Directorate
-‐
MCIT