The National Cyber Security Policy 2021 Policy Review
By: Audrey. JAKAM
Papua New Guinea’s National Cyber Security Policy (NCSP) 2021 is a framework outlining the government approaches, strategies and initiatives that aims to combat cyber threats, risks, and challenges and make PNG a cyber safe country. It extends in collaborating with state and non-state actors on a national and international level. Therefore, this review will be able to evaluate and analyze the NCSP through summary, critique on both the strengths and weaknesses, recommendation and aligning it to the PNG’s National Security Policy (NSP) 2013.
Summary
The PNG’s NCSP 2021 is developed to improve on the existing frameworks and the policies like the PNG National Security Policy 2013. It aims to prioritize cyber related issues aligning with the frameworks and policies which is necessary to boost government operation framework that will protect the country, institutions, environment, resources and its people. More so, this document contains 6 chapters inclusive of the introduction, policy alignment and framework, visions, mission and goals, policy focus areas, implementation plan/framework, and monitoring and evaluation. So, to properly analyze and evaluate this policy, this review will be critiquing chapters 1 to 4.
Critique
One of its strengths is that it is comprehensive. Chapter 1-3 presents a detailed and clear outlook on the missions, aims and objectives of this policy. For instance, some of its 7 goals focus on risk management, preparedness and resilience, critical infrastructure & essential services, capability and capacity building and awareness raising. These makes it easier to understand and link it with all the other necessary areas in order for this policy to be effective. It aligns with PNG’s NSP chapter 1 that emphasizes on the importance of security and its significance to address emerging challenges and risks in order to protect its people and its sovereignty.
Furthermore, it encourages corporation amongst government institutions and departments. In chapter 4.1 to 4.1.4.7 stresses on how the government will be using a pragmatic approach that will change the current NCSP that is under foreign administration to a national administrative control. This will involve collaboration starting from all government institutions like the national cyber coordinating center, national cyber security agency and department of information and. Institute for Government Oracle (2020) states that collaboration goes beyond its literal meaning encompassing a way of delivering better results for everyone by meeting their needs seamlessly. It helps saves money, reduce duplication and promotes innovation according to successive governments. Ata (2019) also supports that central government agencies are in charge of maintaining control and leverage over the public sector and its powers and influence of these agencies varies depending on the needs of the country and government.
In contrast, it lacks resource allocation. Chapter 4.2 talks about risk management, readiness and resilience. This proactive approach is good however, these initiatives have to indicate the planning, time, resources, and processes needed and when it is needed in order for the implementation frameworks to be effective. Geeks for Geeks Organization (2024) states that by making sure that resources are fully utilized, resource allocation maximizes economic output and social welfare thus, aligning with PNG’s NSP chapter 3.6.3 emphasizing on cyber security threats that comes when embracing ICT causing its jurisdiction to be vulnerable due to the absence of appropriate resourcing, legislation's and mechanism that are governing ICT administration and regulation.
Moreover, it is limited to private sectors. As stated in chapter 4, a national cyber security legislation will be formulated to implement the objectives and goals of the NCSP. This legislation will be more focused and collaborating with existing laws, international standards, cyber security agencies and stakeholder to combat both physical and cyber threats and hazards. This is due to lack of awareness of cyber related risks in the private sector. Grant (2018) argues that many governments depend on private companies to lead in the delivery of cyber security for critical infrastructure, working on the principle that these assets are privately owned or operated and focusing on establishing public-private partnerships which are based on collaboration and cooperation.
Recommendation
Few recommendations to this policy are by reviewing the existing laws and regulations that is included in the PNG’s NCSP, the PNG’s cyber security agencies, institutions and departments to review their roles and functions and there must be transparency and accountability from everyone who is part of this policy including others.
In conclusion, the national cyber security policy 2021 highlights most of the important approaches that the government will take to address risks and challenges associated with cyber security. It has 6 chapters that includes the introduction to the implementation process of this policy. The key strengths are comprehensiveness and corporation between government institutions and departments. However, it poses challenges like lack of resource allocation and its limitlessness to private sectors. Hence, all of these is linked with PNG’s national security 2013 which sets the basis of this policy.
Reference
Ata, R. (2019). CENTRAL AGENCIES COORDINATION IN PNG. Devpolicy Blog. https://www.devpolicy.org/2019-Pacific-Update/Day_2_Panel_4B_Robyn_Ranu_Toma-Ata.pdf
Department of Information & Communications Technology. (n.d). Papua New Guinea Cyber Security Policy 2021. https://www.ict.gov.pg/cyber-security-policy-2021
Geeks for Geeks Organization. (2024, January 10). Why Resource Availability and Resource Allocation is an Important Concern for Governments? https://www.geeksforgeeks.org/why-resource-availability-and-resource-allocation-is-an-important-concern-for-governments/
Grant, V. (2018). Critical Infrastructure Public-Private Partnerships: When is the Responsibility for Leadership Exchanged? Security Challenges, 14 (1), 40-52.
Institute for Government Oracle. (2020). How to improve collaboration across government.
Comments
Post a Comment