across various spectrums, encompassing government and private
sectors institutions, security and law enforcement agencies as well as
individual citizens.
xi.
Specific
Principles
on
Cybersecurity
Innovation
&
Manpower
Development:
•
The policy recognizes the need for national expertise, local skills
development, and harnessing of local potentials through coordinated
national mechanism, towards addressing fast changing cyber threat
and the dynamism of the nation’s cyber risk exposure.
•
This includes encouraging knowledge sharing and transfer, creativity
and innovation necessary to respond to such changing cyber threat
landscape.
xii.
Specific Principles on Cloud Computing Security, National Data Security
Management & Hosting:
•
The policy recognizes cloud computing as an evolving sub-domain of
cyberspace. The policy will harness and align cloud computing security
frameworks and guidelines in line with national interest and economic
protection needs of the country.
•
Within the context of national security, the policy maintains a position
that the nation and its organizations do not transfer hosting of critical
national data to countries that do not have effective data protection and
privacy regimes.
•
The policy recognizes the evolving nature of the country’s capability on
local data hosting infrastructure and management services. Thus, the
policy will facilitate country capability in partnership with stakeholders.
xiii.
Specific Principles on Cyber-Physical Infrastructures:
•
The policy seeks to facilitate a regulatory framework that would secure
the
most
critical
cyber-physical
systems,
which
control
core