SADC Harmonised Cyber

Security Legal Framework

SADC Secretariat Infrastructure and Services Directorate
CYBER SECURITY & PUBLIC KEY INFRASTRUCTURE (PKI)
PROTECTION MEETING
26
th
28
th
November 2013
Presented by: Dr. George Ah-Thew
Programme Officer - Telecommunications
SADC Secretariat Infrastructure and Services Directorate
Table of Contents
Background
e-SADC Strategy Framework
SADC Harmonised Cyber Security Model Laws
National Transpositions
On-going Work
SADC Secretariat Infrastructure and Services Directorate
Background
SADC Heads of States Declaration on ICT [August 20011].
The Declaration on ICT identified five priority areas of focus,
namely:
Regulatory Environment for ICT;
Infrastructure for ICT Development;
Community Participation and Governance in ICT Development;
ICT in Business Development; and
Human Resource Capacity for ICT Development.
SADC Secretariat Infrastructure and Services Directorate
e-SADC Strategy Framework (1/2)
In May 2010 SADC created an ICT development strategy
called the e-SADC Strategy Framework.
The e-SADC Strategy Framework was developed under the
auspices of the DIS and is part of the e-SADC initiative
undertaken in the context of the SADC-UNECA Multi-year
programme of collaboration between the two (2) institutions.
Specifically, formulation of the e-SADC Strategic Framework
was undertaken as part of the implementation of the African
Information Society Initiative (AISI).
SADC Secretariat Infrastructure and Services Directorate
e-SADC Strategy Framework (2/2)
The 7 strategic objectives of the e-SADC Strategy Framework
are as follows:
Establish a conducive legal, policy and regulatory environment for the
development of an ICT culture;
Develop the ICT infrastructure and security;
Invest in human resource development;
Develop e-applications including e-Government;
Increase the use of ICT in business;
Develop an ICT industry; and
Develop institutional mechanisms.
The SADC Harmonised Cyber Security Legal Framework for
Southern Africa falls under several of the above strategic
objectives.
SADC Secretariat Infrastructure and Services Directorate
SADC Harmonised Cyber Security
Model Laws (1/2)
Formulation of SADC Harmonised Cyber Security Legal
Framework (ITU-HIPSSA) consisted of the following model
laws for the SADC Region:
E-Transactions/E-Commerce Model Law;
Data Protection Model Law; and
Cybercrime Model Law.
Project started in November 2011.
SADC and ITU put together a team of 7 Experts: 1 Project
Manager, 3 International Legal Experts and 3 Regional Legal
Experts.
Included an assessment through a questionnaire to better
analyze the existing legal instruments in SADC Member
States.
SADC Secretariat Infrastructure and Services Directorate
SADC Harmonised Cyber Security
Model Laws (2/2)
In line with the ITU Global Cyber Security Agenda (GCA) of
2007 which provides a framework for international
cooperation aimed at enhancing confidence and security in the
information society.
Model laws are in conformance with the African Union (AU)
Convention on Cyber Security.
Multi-stakeholder validation workshop was held on 27
th
February to 2
nd
March 2012 in Gaborone, Botswana.
Model laws were looked at again during SADC ICT SCOM on
18
th
to 19
th
April 2012, in Balaclava, Mauritius.
Model laws were approved by SADC ICT Ministers on 8
th
November 2012 in Balaclava, Mauritius.
SADC Secretariat Infrastructure and Services Directorate
National Transpositions
SADC Member States are undertaking national transpositions
of the SADC HarmonisedCyber Security Model Laws:
Lesotho, Namibia, Swaziland, Tanzania, Zambia and Zimbabwe (ITU).
Botswana (Commonwealth Secretariat).
Seychelles (UNECA).
Member States are at an advance stage.
Legal Expert have been recruited.
Legislative gap analysis or national assessment have been
conducted.
Draft bills have been formulated and circulated to stakeholders
for views and comments.
SADC Secretariat Infrastructure and Services Directorate
National Transpositions
Workshops (consultative forums) convened for stakeholders
to interact.
Views and comments taken on board and draft Bills reviewed.
Final draft Bills Submitted for approval by the Cabinet and
then later by Parliament.
SADC HarmonisedCyber Security Model Laws are being
published in English, Portuguese and French for dissemination
to SADC Member States.
SADC Secretariat Infrastructure and Services Directorate
On-going Work
Recently convened the SADC Cyber Security Awareness
Workshop on 4
th
to 6
th
November 2013 in Lusaka, Zambia,
Member States plan to develop their national Cyber Security
legal frameworks , derived from SADC Model Laws by
December 2014.
Member States plan to establish their own National CIRT and
implement PKI by December 2015.
Wish to collaborate on cybercrime statistics, collection and
sharing by National CIRTs for possibility of preparing a
SADC Annual Cybercrime Report.
SADC Secretariat Infrastructure and Services Directorate
Thank you for your kind attention
gah-thew@sadc.int
www.sadc.int