National Cyber Security

and

Information (Cyber) Security Awareness

Prof SH (Basie) von SolmsImmediate Past President : IFIPUniversity of JohannesburgJohannesburgSouth Africabasievs@uj.ac.za

Agenda

1. SA Draft National Cyber Security Policy2. National Cyber Policy and Information (Cyber) Security Awareness3. Way forward for this Workshop initiative - Proposal

http://www.google.co.za/imgres?imgurl=http://upload.wikimedia.org/wikipedia/wo/thumb/2/21/Coat_of_arms_of_South_Africa.svg/453px-Coat_of_arms_of_South_Africa.svg.png&imgrefurl=http://wo.wikipedia.org/wiki/Dencukaay:Coat_of_arms_of_South_Africa.svg&usg=__0KiUVwYarTJNFdP7wS7zYZjQGFk=&h=599&w=453&sz=127&hl=en&start=1&zoom=1&itbs=1&tbnid=Qo7XINhWd5A7aM:&tbnh=135&tbnw=102&prev=/images%3Fq%3Dsouh%2Bafrica%2Bcoat%2Bof%2Barms%26hl%3Den%26sa%3DG%26tbs%3Disch:1

From SA’s Draft National Cyber Security Policy

6.

From SA’s Draft National Cyber Security Policy

No reference is made to general Information Security Awareness of potential users of cyber space, specifically as far as ordinary citizens, including school learners, are concerned.

Anyone today venturing into cyber space without a proper awareness of the risks involved, will surely suffer. This aspect is crucial and must receive focused attention in the final Policy.

Comments to DoC on the Draft Policy (March 2010)

One of the most important ways to reduce cybercrime threats and vulnerabilities is through user information security awareness.

Clause 4.1 should therefore have a specific reference to extensive national Information Security Awareness programs from primary school right through to adults. This is the way the ‘culture of cybersecurity’ mentioned in Clause 6 will be established.

Comments to DoC on the Draft Policy (March 2010)

Let us look at three more examples relating Information Security (Cyber Security) awarenessto Cyber Security

• Thus, user awareness education is just as vital a tool in protecting cyber space as the latest firewall or encryption technology

• The sorry state of information security awareness for the public at large is an even bigger problem ……………

• The state of information security in cyber space can be significantly improved by public service announcements and education campaigns

• Like the anticrime, environmental awareness, and antismoking television ad campaigns of recent years, a comprehensive and repeated program of public awareness could help instill fundamental security principals to make cyber space safer and more secure.

• Such awareness programs should point out that securing one’s own computer not only lowers the risk for that individual but also helps improve the security of cyber space and the country as a whole.

Stop. Think. Connect: National Cyber Security Awareness Month

October is National Cyber Security Awareness Month. Microsoft and the National Cyber Security Alliance (NCSA) have teamed up with the Department of Homeland Security (DHS) again this year to help increase awareness about Internet security issues and to educate people about how to help protect themselves and their devices.

NCSA's mission is to create a culture of cyber security and safety through education and awareness activities, No one can guarantee complete safety in cyberspace, but we can take steps to help prevent criminals and identity thieves from stealing our personal information and accessing our computers. We can also minimize our exposure to other Internet security risks.

Malaysian National Cyber Security Policy

National Security Vision

Malaysia’s Critical National Information Infrastructure will be secure, resilient and self-reliant. Infused with a culture of security, it will promote stability, social well being and wealth creation

THRUST 4: Culture of security and Capacity Building

• Develop, foster and maintain a national culture of security

• Standardise and coordinate cyber security awareness and education programmes across all elements of the CNII

• Establish an effective mechanism for cyber security knowledge dissemination at the national level

• Identify minimum requirements and qualifications for information security professionals

I state that this workshop today is the first such cooperation and I trust that it will be a ground breaking event in this area of cyber security in SA

Comment

Proposal

• Start working on a National Cyber Security Awareness Plan for schools

• Establish a National Cyber Security Awareness Day for schools in SA starting in 2011

• Role players :

All the institutions present at this Workshop

Congratulations to the group at UNISA for this initiative

Let’s get working!!!!!

Thanks