People First, Performance Now Ministry of Science, Technology and Innovation MALAYSIA’S NATIONAL CYBER SECURITY POLICY NATIONAL CYBER SECURITY POLICY Ir Md Shah Nuri Md Zain Ir. Md.Shah Nuri Md.Zain 6 November 2012 NATIONAL SECURITY COUNCIL
People First,Performance Now
Ministry of Science,Technology and Innovation
MALAYSIA’SNATIONAL CYBER SECURITY POLICYNATIONAL CYBER SECURITY POLICY
Ir Md Shah Nuri Md ZainIr. Md.Shah Nuri Md.Zain
6 November 2012
NATIONAL SECURITY COUNCIL
People First,Performance Now
Ministry of Science,Technology and Innovation
NATIONAL CYBER SECURITY POLICY
Formulated2006
???
2006
Started 2008Implement
People First,Performance Now
Ministry of Science,Technology and Innovation
NATIONAL CYBER SECURITY POLICY
VisionMalaysia's Critical National Information Infrastructure shall be secure, resilient and self-reliant. Infused with a culture of security, it will promote stability, social well being and wealth creation
Vision
Objective
• Address the risks to the Critical National Information Infrastructure (CNII)
• To ensure that critical infrastructure are protected to a level that
Protectionof
pis commensurate with the risks
• To develop and establish a comprehensive program and a series of frameworks
CNII
People First,Performance Now
Ministry of Science,Technology and Innovation
NATIONAL CYBER SECURITY POLICY
CNIICNII
Sectors
Sector Leads“Mi i t i l t b di f“Ministries or regulatory bodies of respective sector who oversee the CNII agencies”
People First,Performance Now
Ministry of Science,Technology and Innovation
NATIONAL CYBER SECURITY POLICY
P li Th t
Thrust 1:Effective Governance Thrust 5:Research & Development
Policy Thrust
Thrust 1:Effective Governance
Thrust 2:Legislative & Regulatory
Towards Self-Reliance
Thrust 6:Compliance &
NSC
AGC
MOSTI/MIMOS
Framework
Thrust 3:Cyber Security T h l F k
Enforcement
Thrust 7:Cyber Security E R di
AGC
MOSTI/CSM
MICC
NSCTechnology Framework
Thrust 4:Culture of Security & Capacity Building
Emergency Readiness
Thrust 8:International Cooperation
MOSTI/CSM
MOSTI
NSC
Capacity BuildingMOSTIMICC
People First,Performance Now
Ministry of Science,Technology and Innovation
NATIONAL CYBER SECURITY POLICY
Policy
OBJECTIVES & VISION
ACTION PLAN
Implementation Progress
8 POLICY THRUST
ACTION PLAN
PT1 PT2 PT3 PT4 PT5 PT6 PT7 PT8OBJECTIVES
People First,Performance Now
Ministry of Science,Technology and Innovation
• National Cyber • Cyber SAFE• National
Cryptography• NCSP Review
NATIONAL CYBER SECURITY POLICY - INITIATIVES
Security Governance
• NSC Directive : National Cyber
y
• Cyber 999
Cryptography Policy
• National Impact Analysis Study • National Data
Leakage
• National Cyber Readiness Index
Crisis Management Plan & Procedures
• Annual Cyber D ill E i
• Research Grant
• CIO Roundtable
• One Stop Centre
• Online Fraud Handling Mechanism
• National Cyber Security
gPrevention Framework
Drill Exercise
• Review & Harmonize Cyber related laws
Mechanism
• National Cyber Security Acculturation & C i B ildi
Security Awarenesss Programme
• National Cyber
• Cyber Operation Centre
• Adoption of MS ISO 27001:2007
Capacity Building Programme (NSACP)
• Information Security Professional Training
Coordination & Control Centre
• National Cyber Security
• MalaysCommon Criteria y
Monitoring Centre Eco-System Study
Criteria Evaluation & Certification
People First,Performance Now
Ministry of Science,Technology and Innovation
NATIONAL CYBER SECURITY POLICY
PeopleInternational
People
National
Process Technology Sector
Organization
People First,Performance Now
Ministry of Science,Technology and Innovation
Accelerate Malaysia’s
NATIONAL CYBER SECURITY POLICY
aspiration to achieve a sustainable high-income advanced country.
SAFER AND SECURE CYBER SPACE
People First,Performance Now
Ministry of Science,Technology and Innovation
THANK YOUTHANK YOU