Part Three
The Strategy
“
• A means of proposing legislative or regulatory
updates, based on relevant research or lessons
learnt
• A potential agent for future economic growth in
Malta within the cyber security domain
• A complementary mechanism to a collective
approach for sharing cyber security knowledge
and intelligence, proposed as Measure 3 (i).
It is highly recommended
that a concerted, ongoing
strategic approach is
undertaken, potentially
through a nationwide
Communications strategy
for cyber security; aimed
at addressing the various
strata of society, business
and public sector along with
their corresponding needs,
expectations, and potential
ICTs and concepts applied
The establishment could potentially be enabled
through:
• Agreement of overseas cooperation on related
matters
• Related EU supporting initiatives
• Inclusion of existing internationally certified local
expertise in cyber security.
iii. Ensure relevant education and training to
public sector staff and other stakeholders50
Training and education on cyber security is one key
priority within the public sector, especially given the
sector’s wider extensive use of ICT and sensitive data,
compared to other sectors. In any office environment
it needs to be kept in view, that technology controls
are not sufficient to protect data from related cyber
security threats. The controls need to go hand in
hand with human resource, awareness and employee
guidance programs51.
”
• Ensuring the necessary legal safeguards to
protect both the student as well as the teaching
profession on cyber related challenges such as
cyber bullying.
Curricular developments and academic programmes
aimed at establishing a cyber security focus47 is to be
further encouraged, seeking further creative ways of
instilling such education48 in the process.
The development of cyber security expertise within
the public sector is another key area that merits
particular attention. In the process, it also needs
to be ensured that a comprehensive list of public
sector professionals certified under internationally
recognised certification programs in cyber security is
established and maintained52. Furthermore, it needs
to be ensured that ICT personnel are trained so as to
enable them to recognise cyber incidents, to detect
anomalies in their ICT systems and to respond and to
report them accordingly.
ii. Explore possibility of establishing a Cyber
Centre of Excellence
The establishment of a cyber centre of excellence
may serve as:
• A form of implementation of Action 60 – Building
national capacity in specialist skill sets of Digital
Malta , refered to in the previous measure
• A training base for cyber security expertise.
• Having a maintained comprehensive list
of professionals certified under internationally
recognised certification programs in cyber
security49
• A source of promotion of related best practice
iv. Foster application of research and development
on cyber security
Such measure aims to ensure cyber security as
among key research priorities. It effectively calls
for encouragement and support for research in any
25
MALTA CYBER SECURITY STRATEGY 2016