g) Coordinate cybersecurity exercises and conduct cyber drills with regional CERTs h) Periodically provide advanced trainings and capacity building programs to enhance capacity and ensure improved performance. 5. Enabling secure and sustainable e-Government through the adaptation of best practices and reliable technologies a) MCIT will adapt and implement a comprehensive information security framework to ensure a robust, secure trustworthy e-Government services throughout the government. b) Afghanistan Root Certification Authority (ARCA) to enforce policies and mandate the use of Digital signature for all e-Gov, and m-Gov services within the government 6. Establishing certification and testing body a) MCIT will dedicate an additional line and recruit a team of professional programmers solely to test and certify software and applications. The testing processes must be in compliance with all international standards, security has to be part of software developing life cycle. This will ensure the security and integrity of software/applications 7. Facilitating trainings for Information and Cyber security experts a) MCIT will engage and coordinate training and capacity building programs with donor communities (World Bank, ITU, USAID) to secure funds for information security trainings, seminars and workshops for CSOs within the government and private sector b) MCIT will work closely with the Ministry of Higher Education (MoHE) and Civil Services Commission to secure scholarships opportunities for masters programs in the field of information security. 8. Safeguarding data privacy of government, businesses and citizens a) ISSD of MCIT will develop a plan and information security frameworks for the protection of Critical Information infrastructure. The plan should be inclusive of secure mechanisms for information flow while in transit and at rest with proper disaster recovery plan - meeting the business requirement b) Guidelines and international standards will established for, Risk management, Crisis management and cyber/electronic crime investigation 9. Promoting public private partnership a) Private sector will be encouraged to work closely with public institutions and being granted contracts and projects to deliver services complimentary to the government – Information  Systems  Security  Directorate  -­‐  MCIT  

Select target paragraph3