The thrust of the cybersecurity framework is The middle layer shall establish an to build the trust and confidence on ICT and environment for sharing situational cyberspace. awareness. Cybercrime on the other hand, has its strategy anchored on crime prevention and criminal justice to ensure that the rule of operational actions which can be law applies in ICT and cyberspace. orchestrated simultaneously or in parallel words, cybercrime and prosecution cybersecurity In other focuses on investigation is on security and Framing The bottom layer is where developed. The Framework monitored, is composed of Cyberspace processes, interrelated procedures. As stated earlier, the country’s but have distinct functions. Their sets of activities are planned programmed However, and policies, guidelines, or synergy with its counterparts through a NIST Cybersecurity Framework® cooperative, collaborative, and coordinated starting point with the following core environment. functions: Identify — Protect — Respond under NCSP. is the strategy The apex of the pyramid illustrates the interrelationship between key players and its corresponding implement the NCSP. on the importance Emphasis also is given also of collaborating with public, private, and international partners. continue and operated The Government by intends to respecting the self-governance cyberspace In developing the policy to implement the individual or group to be self-reliant and strategy using the framework, government through proactive approach universal values and norms such as freedom, have to think and strategize a couple of to be adaptable to the future social changes simulating scenarios, studying threats and and incidences, or developing continuous analysis of information and data The foundation is the ability of every individual or group observes the established instead of being reactive. crucial to identifying potential threats, that responsible users of the Internet. Every the DICT shall adopt the of the cybercriminals. The potential risks through has developed. of cyber governance steps ahead evaluation of information shared that are run, managed, systems concurrently and continuously. government must take necessary measures continuous monitoring and thrives in autonomous various owners. — Recover. The activities under intelligence such as data and information is through Cyberspace Detect > The next layer indicates that sharing of measures society in general. Protection and democracy, peace, and stability within cyberspace, as it is used by diverse individuals or groups from all over the world. Collaboration with Multi-Stakeholders and International Cooperation constant and Collaborating with multi-stakeholders and that have been gathered. establishing international cooperation by enables a community stakeholders in a timely manner. of practice where information is shared among stakeholders. 13 National Institute of Standards and Technology.(2014).Framework for Improving Critical Infrastructure Cybersecurity Version 1.0. https://www.nist.gov/sites/default/files/documents/cyberframework/cybersecurity-framework-021214.pdf 20 these key Layers of defense can be built through the cooperation of the citizens, the businesses and organization, the education providers, governments, prevention from multi-dimension groups will minimize Autonomy and Self-Governance asa these functions can be conducted We innovative as it is in the physical world to ensure that there is order in our all roles to the rule of law is society. infancy stage, therefore, the core framework in the protection of the Cll shall adopt the these activities shall work in However, applied to the cyberspace strongly and strictly observed cybersecurity capabilities are still at its according to their mandates. The driver for the framework as much new areas still relatively unknown and unexplored. on three layers where all three key players are is a vast place with many and emerging evaluated, and analyzed which will provide input to improvements with the The Rule of Law responses to incidences and events are recorded, Figure 2 illustrates how the concept was is guided principles on the following: management. protection (proactive state). of the vision, its objectives and creating the framework with one another is invaluable to the entire lifecycle of incident resoonse (reactive state) while THE GUIDING PRINCIPLES The concept of sharing of information acts as an enabler for integrated and manage adverse Balance these cyberattacks to minimum impact. between Free Flow of Information and Privacy Rights of Individuals The rights of every individual to have equal access to the Internet are upheld at all times. However, balance must be made between protecting the privacy of the individual against securing protection of information and data of the users. Risk Based Management is another guiding Approach principle of the strategy. One of its national targets is the protection and security of the Clls. This approach vides a comprehensive pro- preparation in the for- mulation of a Risk Treatment Plan that the government and other relevant sectors will eventually undertake as it evaluates and thoroughly considers the type of risk appetite of the stakeholders. and the whole 21