well as broaden the scope and target for cybercriminals. Hence, it is crucial for organizations to defend
against risks associated with evolving technologies.
However, the use of technology alone is not the only solution to successfully manage risks associated
with sophisticated cyber-attacks. It is important that organizations in Vanuatu be more strategic about
their ICT and Cyber Security approaches, and must continuously assess existing defences. Executing
plans such as investing in ongoing Cyber Security capacity building programs, policies, regular incident
response drills, and providing Cyber Security awareness campaigns are ways to achieving National
Security. Furthermore, working effectively with collaborative partners that strengthen cyber security
capabilities is an essential tool that can help Vanuatu and businesses to increase and improve cyber
resiliency and literacy. Increased Cyber literacy will help combat the rise in cyber-attacks and cybercrime
activities in Vanuatu, and across the globe.
The National Cyber Security Strategy (NCSS) values and highlights the importance of Cyber Security
for National Critical Infrastructure. It is important that all National Critical Infrastructures are identified
and associated formally to lead agencies to ensure they take full responsibility and have that sense
of ‘ownership.’ Such ownership encourages and motivates commitment that will drive appropriate
security efforts to secure and protect Vanuatu.
6.1. Critical Infrastructure Sectors
The urgency of protecting Vanuatu’s critical infrastructure and ensures this strategy identifies all lead
agencies, organizations, and recognize the types of critical infrastructure and their impacts on Cyber
Security. Figure 11 outlines all Critical Infrastructure and their respective lead agencies and organizations.
Cyber Security Critical Infrastructure Sectors
Lead Agencies: Ministry of
Justice, Attorney General
Office (SLO), Public
Prosecution Office
Lead Agencies: Ministry of
Internal Affairs, Depart. Of
Local Authorities, Ministry of
Public Utilities, Civil Aviation
Authority Vanuatu (CAAV)
Legal
Activities
Transportation
and
Aviation
Lead Agencies: Ministry of
Health
Law
Enforcement
And
Intelligence
Lead Agencies: The Prime
Ministers office, Office of the
Government Chief Information
Officer (OGCIO/CERTVU),
Communications,
TRBR, ISPs, MoE
Civilian
Activities
Technologies
and
Broadcasting
Banking
and
Finance
Health
Energy
Lead Agencies: Ministry of
Climate Change, Depart. Of
Energy, Ministry of Lands,
Depart. Of Water
Management
Borders,
Ports and Marine
Lead Agencies: Ministry
of internal Affairs, Vanuatu
Police Force, Ministry of
foreign Affairs, Depart. Of
Boarder Control, Depart.
Of Biosecurity,.
Water
Management
Trade
and
Industries
Food
Lead Agencies: Ministry
of Finance, the Reserve
Bank of Vanuatu, Ministry
of Tourism Trade
Commerce Ni-Vanuatu
Business, Vanuatu Bureau
of Standards (VBS)
Lead Agencies: Ministry of
Agriculture Live Stock Forestry
Fisheries and Biosecurity,
Ministry of Tourism Trade
Commerce Ni-Vanuatu
Business, VBS
Figure 11: Critical Infrastructure Sectors for Cyber Security in Vanuatu
Figure 11 also emphasize the importance of protecting all critical infrastructure and not just the core
Cyber Security infrastructure. Currently the CIs that are involved in Cyber Security development are:
Communications, Technologies and Broadcasting;
Law Enforcement and Intelligence;
Legal Activities;
Civilian Activities;
Vanuatu’s Cyber Security Strategy 2030 |
30