1. 2011 East African Internet Governance Forum (EA – IGF) Rwanda Cyber briefing: Positive steps and challenges Didier Nkurikiyimfura IT Security Division Manager, RDB - ICT 17 August 2011

2. Outline Introduction Cyber Security Legal Framework Development Cyber Security – Stakeholders / Key players National ICT Development Strategy – 2015 NICI III Clusters Ongoing Cyber Security Programs/Initiatives Challenges

3. Introduction The World Summit on the Information Society (WSIS) in its plan of action line C5 recognises and identifies the need to build confidence and security in the use of ICT’s. Rwanda initiated the development of Cyber security mechanisms in line with ITU recommendations: Organisational Structure, Legal, Technical and Procedural Measures, International and regional collaboration, and National partnership of stakeholders.

4. Telecommunications Law Interception Law E-Messages, E- Signatures and, E- Transactions Law Regulations governing CA Internet café guidelines ICT bill Child Online Protection Cyber Security Legal Framework Development

5. ICT Bill – Key cyber security highlights Matters of national interest and data security Electronic records, signatures and e-government Electronic Communications Electronic transactions Consumer protection Privacy Computer misuse and cyber crime Cyber security regulations

6. Cyber Security – Stakeholders / Key players Ministry of ICTRwanda Utilities Regulatory AgencyRDB-ICTService Providers: Licenses Telecom Operators and ISPs Civil Society: IGF, ISOC – Rwanda, Consumer’s associations Justice Sector Agencies: Law Enforcement and prosecution

7. National ICT Development Strategy – 2015

8. NICI III Clusters Service delivery across five identified clusters: Skills Development – high quality skills Private Sector Development – vibrant and innovative private sector Community Development – empowered and transformed communities E-government – improved government operational efficiency Cyber security – secure cyber space and information assets

9. Ongoing Cyber Security Programs/Initiatives Development of Information Security Guidelines Development of Children Online Protection guidelines Setting up a Computer Security Incident Response Team (CSIRT) Establishment of the National Public Key Infrastructure National cyber security public awareness Cyber Security capacity building Collaboration and partnership with regional and international cyber security agencies and organizations

10. Challenges Collaboration and coordination: Coordination and synchronization of efforts for the implementation of Cyber Security programs/initiatives Regulatory and legal framework: Absence of legislations to address cyber Security Issues (Critical Information Infrastructure Protection Act, Information and Communications Network Protection Act, Security breach notification laws, etc) Skills: Lack of critical mass of skilled staff to handle cyber security issues Awareness: Lack of public awareness on the cyber threat

11. Thank you