AFRICAN UNION- 23RD-27TH July 2018 PRESENTER: Mr. Nawa J.T Samatebele Cyber Security Specialist - ZICTA Member of Zambia CIRT

LEGAL FRAMEWORK In 2009, a new regulatory regime, Zambia Information and Communications Technology Authority (ZICTA) ,was ushered in after enacting three laws; However the law, Electronic Communications and Transactions (ECT) Act of 2009, is the one that addresses the following with regards to cyberspace: Protect of personal information Protection of critical databases Access to stored communication Encryption Communication Cyber Inspectors Cyber Crime

LEGAL FRAMEWORK SADC proposed the separation of our ECT act into three (3) Bills Cybercrime & Cyber Security Bill Data Protection Bill Electronic Transactions and Communications Bill This has since been done and submitted to the Ministry of Justice Other developments: Undertook A Cyber Security Maturity Assessment – in partnership with WorldBank and Oxford University Formation of a National Cyber Security Technical Committee Currently finalizing National Cyber Security Policy and Cyber security Strategy

E-GOVERNMENT

OBJECTIVE OF ZmCIRT 1- Serve as a trusted focal point 2 - Develop a capability to support incident reporting. 3 - Develop an infrastructure for coordinating response. 4 - Conduct incident, vulnerability & Artifact analysis. 5 - Participate in Cyber Watch functions. 6 - Help organizations develop their own incident management capabilities. 7 -Facilitate Cyber drills and Exercises 8 - Make security best practices & guidance available. 9 - Provide awareness, education & trainings

Facilitated Specialist Training Course of Govt. Institutions HISTORY & TIMELINE 2012 2013 Facilitated Specialist Training Course of Govt. Institutions Facilitated Specialist Training Course of Govt. Institutions ISO2700, Ethical Hacking, Reverse Malware Analysis, Mobile Security, Intrusion Detection System Computer Forensics Investigations –Windows In Depth -408 Advanced Computer Forensic Analysis and Incident Response -508 GSEC boot Camp Kick started the Digital forensics assistance to Law enforcement silensec.com - Trainers SANS.com - Trainers 20th August 2012 COMPUTER INCIDENT RESPONSE TEAM Established Kick started the National Cyber Security Awareness Tour to cover All 10 provinces Police Computer Forensic Lab setup by CIRT Hosted AfNOG and AfriCERT Training CERT – INCIDENT RESPONSE, Network Forensic Training, ITU - Partners IMPACT ITU - Partners AfNOG & JPCERT - Trainers

Facilitated Specialist Training Course of Govt. Institutions HISTORY & TIMELINE 2014 2015 Facilitated Specialist Training Course of Govt. Institutions Network Pentesting, Log Analysis Mobile (IOS, ANDROID,BLACKEBERRY0& MAC OS Forensics Honey Pot setup and deployment Hosted the First Africa Cyber drill IMPACT- ITU - Trainers Training undertaken with CII, Law Enforcement, Judiciary , and defense forces silensec.com , IMPACT-ITU , BIT DEFENDER & NUIX - Trainers Adopted ISO27000 series standards – National Gazette ZM CIIRT MoU Zambia Bureau of Standards

HISTORY & TIMELINE 2016 2017 2018 ZmCIRT is affiliated with FIRST SIGNED MoU with Financial Intelligence Commission (FIC) Facilitated train the Trainer Program in collaboration with Ministry of Higher Education Information sharing regarding financial fraud or Cyber –enabled financial Fraud ZM CIRT Trained over 200 high school teachers in basic Cyber security Started the ICT girls club in High schools Cyber security awareness programme targeting university and colleges ZmCIRT is affiliated with FIRST First Phishing Cyber DRILL Conducted silensec.com , IMPACT-ITU , BIT DEFENDER & NUIX - Trainers ZM CIRT Contributed to drafting of Cybersecurity , Cybercrime and Data Protection Bills ZM CIIRT Draft Laws are before parliament ZmCIRT, Ministry of Justice, Smart Zambia Institute, Ministry Transport and Communication, Independent Broadcasting Authority and Zambia Information Communication & Technology Authority - Stakeholders

SERVICES Reactive Services Proactive Services Artifact Handling Alerts & Warnings Announcements Artifact Analysis Incident Handling Technology Watch Artifact response Incident Analysis Security Audits Artifact response coordination Incident response support Security Assessments Security Quality Management Incident response coordination Configuration & Maintenance of Security Risk Analysis Incident response on site Development of Security Tools Awareness Building Vulnerability Handling Intrusion detection services Security Consulting Vulnerability Analysis Security related information dissemination Education/Training Vulnerability Response Project Evacuation or Certification Vulnerability Response Coordination

ON GOING NATIONAL ACTIVITIES… Formulation of Public Key Infrastructure Framework Establishment of National Cyber Security Agency Creation of Sub-Sector CIRTS

THANK YOU…. ZIKOMO ZAMBIA at 50 yrs. + 4 yrs. on 24th October 2018