[kictanet] Government website Hacking incident a crying shame

[waudo siganga]

Thanks for the news Brian. This is a big shame for all Kenyans
that our Government sites can be hacked by a simpleton. It is
important to establish who in the maze of ICT Governance in the
Government is responsible for Government sites and what
coordination there is between different agencies and ministries.
Are there appropriate ICT Policies in place covering areas such
as Hosting Policy, Server Back-up Policy, etc? Is there regular
ICT Audit of Government systems and methods to ensure that they
conform to recognised standards and are acceptably safe and
secure? Some learning should come out of this incident.


On Tue, Jan 17, 2012, at 04:09 PM, Brian Munyao Longwe wrote:



  The fact that a student on a hacking/computer security course
  could hack into and deface more than 100 Government of Kenya
  websites in one night(!) is a crying shame. In addition to
  that, the fact that it seems all or most of these sites were
  hosted on a single server is a travesty of best practice.



Is it so difficult for GoK to invite (readily available)
information security experts to design and implement a suitable
online information framework for public government websites?



Shaking my head,



Brian

--
Brian Munyao Longwe
e-mail: [1]blongwe at gmail.com
cell:  +254715964281
blog : [2]http://zinjlog.blogspot.com
meta-blog: [3]http://mashilingi.blogspot.com

_______________________________________________
kictanet mailing list
kictanet at lists.kictanet.or.ke
http://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at http://lists.kictanet.or.ke/mailman/
options/kictanet/emailsignet%40mailcan.com

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform fo
r people and institutions interested and involved in ICT policy and regula
tion. The network aims to act as a catalyst for reform in the ICT sector i
n support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors onl
ine that you follow in real life: respect people's times and bandwidth, sh
are knowledge, don't flame or abuse or personalize, respect privacy, do no
t spam, do not market your wares or qualifications.

References

1. mailto:blongwe at gmail.com
2. http://zinjlog.blogspot.com/
3. http://mashilingi.blogspot.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20120117/6fd44c78/attachment.htm>