<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div dir="ltr"><h2 style="margin: 0in 0in 10.5pt; line-height: 22.5pt; background-position: initial initial; background-repeat: initial initial;"><span style="font-size: 12pt;">Dear Listers</span></h2>
<p class="MsoNoSpacing">On March 14, the GOK through the ICT Authority
released a 13 page draft Cyber Security Strategy (<span style="background-position: initial initial; background-repeat: initial initial;"><a href="http://www.scribd.com/doc/212456939/GOK-National-Cybersecurity-Strategy"><span style="color:windowtext">http://www.scribd.com/doc/212456939/GOK-National-Cybersecurity-Strategy</span></a></span><span style="background-position: initial initial; background-repeat: initial initial;">).<o:p></o:p></span></p>
<p class="MsoNoSpacing"><span style="background-position: initial initial; background-repeat: initial initial;"> <o:p></o:p></span></p>
<p class="MsoNoSpacing"><span style="background-position: initial initial; background-repeat: initial initial;">We had considered
conducting an online discussion on the draft as is usually the tradition, but this
has not been possible. I therefore requested Victor Kapiyo to give us some
initial thoughts that can we can build on, and which will form part of our
submission. <o:p></o:p></span></p>
<p class="MsoNoSpacing"><span style="background-position: initial initial; background-repeat: initial initial;"><o:p> </o:p></span></p>
<p class="MsoNoSpacing"><span style="background-position: initial initial; background-repeat: initial initial;">The deadline for
submission is this coming Friday, March 28.
We propose to send the comments by Thursday March 27, 2013.<o:p></o:p></span></p>
<p class="MsoNoSpacing"><span style="background-position: initial initial; background-repeat: initial initial;"><o:p> </o:p></span></p>
<p class="MsoNoSpacing"><span style="background-position: initial initial; background-repeat: initial initial;">I wish to kindly request
you to add/ subtract/amend by Thursday 1.00 pm (March 27, 2013). </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom: 0.0001pt;"><span style="background-position: initial initial; background-repeat: initial initial;"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-bottom: 0.0001pt;"><b>General
Comments<o:p></o:p></b></p>
<p class="MsoNormal" style="margin-bottom: 0.0001pt;"><b> </b></p>
<p class="MsoNormal" style="margin-bottom: 0.0001pt;"><span style="background-position: initial initial; background-repeat: initial initial;">The strategy appears to be generic. It
lacks specifics and glosses over several key issues:</span><br>
<!--[if !supportLineBreakNewLine]--><br>
<!--[endif]--><b><o:p></o:p></b></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->It lacks a detailed discussion of the
current context - current statistics of internet usage, threats to the
internet, key bodies, resolutions, policies, directives, key public concerns,
challenges facing the country, current legal and policy framework for ICT etc.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Lacks clear justification for the
strategy.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Fails to identify the key players/stakeholders/institutions
in governmet, private sector, civil society – and their roles and
responsibilities in addressing CS issues, how they will be involved and their
coordination mechanisms.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Does not provide reasons or demonstrate
how and why the prioritized goals were arrived at/chosen.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->The actions under the goals are few and
not SMART.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->It fails to discuss the current legal
and policy framework to address CS on which it should be anchored.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt -6pt; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><o:p> </o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt -6pt; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><b>Proposals/ Recommendations<o:p></o:p></b></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt -6pt; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;">The
strategy should clearly articulate what the government intends to do, viz:<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Enhance protection and promotion of
fundamental rights and freedoms in the Bill of Rights in particular on
expression, media, participation, personal data and privacy,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Promote the national values under article.
10 of the constitution – rule of law, democracy, participation, good governance
etc.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve preparedness, rapid response
and capabilities to respond - CERTs<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve cooperation with, clarify
obligations, and manage roles and responsibilities of operators of critical
infrastructure and key providers of on-line services, such as e-commerce
platforms, Internet payment gateways, social networks, search engines, cloud
computing services, app stores.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve transparency and accountability
in the management of the net and CS<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Address public concerns over censorship
/ mass surveillance in a post-snowden era<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve information sharing and
cooperation - how should the info flow, which routes?<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve the reporting and publicity of
cyber-security incidents to the relevant authorities<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Promote openness of the internet, GoK
commitments under open government.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Regulate - who is currently covered/who
is responsible?<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve international cooperation and
engagement with international instruments - EAC treaties, Budapest convention.<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Set standards and common minimum
requirements for government bodies and market,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Maintain the reliability and
interoperability of the Internet,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Promote research, innovation and
development in CS,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve governance of the internet,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Promote access to the internet,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Promote CS through strategic
procurement,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve the policy and legal framework
on CS,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Mainstream CS into national security
agenda,<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Improve coordination of CS initiatives,
and<o:p></o:p></p>
<p class="MsoNormal" style="margin: 0in 0in 2.25pt 12pt; text-indent: -0.25in; line-height: 15.95pt; background-position: initial initial; background-repeat: initial initial;"><!--[if !supportLists]--><span style="font-size:10.0pt;mso-bidi-font-size:11.0pt;font-family:Symbol;
mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol">·<span style="font-size: 7pt; line-height: normal; font-family: 'Times New Roman';">
</span></span><!--[endif]-->Facilitate training of law enforcement,
judicial and technical personnel to address cyber threats.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div> </div></body>
</html>