92 No. 39475
GOVERNMENT GAZETTE, 4 DECEMBER 2015
NATIONAL CYBERSECURrTY POLICY FRAMEWORK FOR SOUTH AFRICA
1 6. 2 The Ministry of State Security and the State Security Agency (SSA) has overall
responsibility and accountability for coordination, development and implementation of
Cybersecurity measures in the Republic as an integral part of its National Security mandate.
16.2.1
The Ministry of State Security and SSA shall, amongst others, be required to perform
the following key roles and responsibilities in relation to cybersecutity in the Republic:
(a)
Ensure that the JCPS cluster is properly capacitated and is able to perform its
function as set out in this Policy framework including ensuring that the JCPS
cluster has the the necessary capacity to monitor, promote and guide the
implementation of the NCPF.
(b)
Ensure, in consultation with the relevant stakeholders, the establishment of
the Cybersecurity Response Committee, Cybersecurity Centre and proper
function of the existing RSA Government CSIRT in line with the approved
JCPS implementation plan.
(c)
Initiate and lead a process within the JCPS cluster for the development and
approval of guidelines and National security norms for the establsihment of
various sector CSIRTs as provided for in the policy framework.
(d)
Have an overall responsibility for the development and formulation of National
Cybersecurity in Republic and in consultation with stakeholders. This includes
reviewing and amending existing Cybersecurity policies as well as prescribing
regulations on information and communications technology security for the
Republic in order to advance the National Security interests of the Republic
(e)
Provide information assurance and secure information and communications
technology infrastructure of National importance in support
of national
security; This should include the development of State capacity to provide
threat
monitoring,
alerting,
C(}-ordination
and
response
for
information
communications technology related incidents pertaining to National Critical
Information Infrastructure of the State;
(f)
Prescribe a regulatory framework for the control by the State of the provision
and application of cryptographic solutions, development of National strategy
and
regulations
for
the
protection
of
National
Critical
Information
Infrastructure, and prescribe information communications technology security
technical standards to which the electronic communications security products
and services of organs of State must comply;
27
This gazette is also available free online at www.gpwonline.co.za