theories and critiques which will test the capability and response action plans on whether they are
achievable or not.
The ‘One-to-one’ consultations, the ‘Nationwide’ consultations and the ‘Targeted consultations have
great benefits for development of this Strategy and the future cyber security agenda. The consultations
have brought out the following key findings:
The identification of Cyber-threat statistics in throughout Vanuatu;
The need to increase Cyber resiliency and International engagement;
The need for the establishment of a National Cyber Security Agency;
The need to increase Cyber Security Awareness programs;
The need to increase in cyber capabilities which will help combat cybercrime;
There is critical need for an Information Sharing Platform or Resource Centre; and
Recommendation to design and develop community ICT and Cyber Security Standards,
Regulations and community bylaws to enhance community policing.
The consultations has highlighted the urgent need for cyber security and ICT standards, regulations,
and legal framework development. Consultation attendees have emphasized the need for legislations,
standards, regulations and community bylaws to be developed and enforced on the use of technologies
and age restrictions in communities and villages.
6.0 Cyber Security for National Critical Infrastructure in Vanuatu
The Government of the Republic of Vanuatu is committed to its economic independence and selfreliance through cross-sector trade efforts. This commitment and determination has by far proven
maturity to-date through major developments. Some of these developments in the Information and
Communication Technology (ICT) and Telecommunications sector include the establishment of the
Government Broadband Network (GBN) infrastructure, the National Cybersecurity Policy, the National
Security Council, the National Security Strategy and the establishment of the Vanuatu National
Computer Emergency Response Team (CERT Vanuatu | CERTVU). The developments highlighted
above are part of the entire Vanuatu National Infrastructure.
“National Infrastructure are those facilities, systems, sites, information, people,
networks and processes, necessary for a country to function and upon which daily
life depends. It also includes some functions, sites and organizations which are not
critical to the maintenance of essential services, but which need protection due to
the potential danger to the public.”
- UK CPNI.
In the Critical Infrastructure (CI) context, Cyber Security is usually a missing piece that poses an
increasingly urgent risk to any nation or organization. The risks associated with critical infrastructure
relate to either national disasters or Cyber-attacks. These risks and Cyber-attacks present unique
sophisticated challenges [8] such as:
Cyber-threat or attacks lack distinct borders;
Threat or attack tactics and technologies are constantly evolving and increasing in frequency;
Public and private sector entities that manage critical infrastructure lack the following best
practices; coordinated efforts, information-sharing processes, and effective standard operating
procedures.
Evolving technologies have also contributed to the increased risks in organizations but at the same
time provides a greater level of protection against threats. The use of integrated robust Cyber
Security methods can defend against malicious activities and anomalies in systems and networks. In
addition, evolving technologies allow interconnectivity and interoperability between online essential
services, processes and the security systems implemented to protect Vanuatu’s critical infrastructures.
Interconnectivity and interoperability platforms and services bring in efficient service delivery and as
29 | Vanuatu’s Cyber Security Strategy 2030