1. AFRICAN UNION- 23RD-27TH July 2018 PRESENTER: Mr. Nawa J.T Samatebele
Cyber Security Specialist - ZICTA
Member of Zambia CIRT

2. LEGAL FRAMEWORK
In 2009, a new regulatory regime, Zambia Information and Communications Technology Authority (ZICTA) ,was ushered in after enacting three laws;
However the law, Electronic Communications and Transactions (ECT) Act of 2009, is the one that addresses the following with regards to cyberspace:
Protect of personal information
Protection of critical databases
Access to stored communication
Encryption Communication
Cyber Inspectors
Cyber Crime

3. LEGAL FRAMEWORK
SADC proposed the separation of our ECT act into three (3) Bills
Cybercrime & Cyber Security Bill
Data Protection Bill
Electronic Transactions and Communications Bill
This has since been done and submitted to the Ministry of Justice
Other developments:
Undertook A Cyber Security Maturity Assessment – in partnership with WorldBank and Oxford University
Formation of a National Cyber Security Technical Committee
Currently finalizing National Cyber Security Policy
and Cyber security Strategy

4. E-GOVERNMENT

7. OBJECTIVE OF ZmCIRT 1- Serve as a trusted focal point
2 - Develop a capability to support incident reporting.
3 - Develop an infrastructure for coordinating response.
4 - Conduct incident, vulnerability & Artifact analysis.
5 - Participate in Cyber Watch functions.
6 - Help organizations develop their own incident management capabilities.
7 -Facilitate Cyber drills and Exercises
8 - Make security best practices & guidance available.
9 - Provide awareness, education & trainings

8. Facilitated Specialist Training Course of Govt. Institutions
HISTORY & TIMELINE
2012
2013
Facilitated Specialist Training Course of Govt. Institutions
Facilitated Specialist Training Course of Govt. Institutions
ISO2700,
Ethical Hacking,
Reverse Malware Analysis,
Mobile Security,
Intrusion Detection System
Computer Forensics Investigations –Windows In Depth -408
Advanced Computer Forensic Analysis and Incident Response -508
GSEC boot Camp
Kick started the Digital forensics assistance to Law enforcement
silensec.com - Trainers
SANS.com - Trainers
20th August 2012
COMPUTER INCIDENT RESPONSE TEAM Established
Kick started the National Cyber Security Awareness Tour to cover All 10 provinces
Police Computer Forensic Lab setup by CIRT
Hosted AfNOG and AfriCERT
Training
CERT – INCIDENT RESPONSE,
Network Forensic Training,
ITU - Partners
IMPACT ITU - Partners
AfNOG & JPCERT - Trainers

9. Facilitated Specialist Training Course of Govt. Institutions
HISTORY & TIMELINE
2014
2015
Facilitated Specialist Training Course of Govt. Institutions
Network Pentesting,
Log Analysis
Mobile (IOS, ANDROID,BLACKEBERRY0& MAC OS Forensics
Honey Pot setup and deployment
Hosted the First Africa Cyber drill
IMPACT- ITU - Trainers
Training undertaken with CII, Law Enforcement, Judiciary , and defense forces
silensec.com , IMPACT-ITU , BIT DEFENDER & NUIX - Trainers
Adopted ISO27000 series standards – National Gazette
ZM CIIRT
MoU
Zambia Bureau of Standards

10. HISTORY & TIMELINE 2016 2017 2018 ZmCIRT is affiliated with FIRST
SIGNED MoU with Financial Intelligence Commission (FIC)
Facilitated train the Trainer Program in collaboration with Ministry of Higher Education
Information sharing regarding financial fraud or Cyber –enabled financial Fraud
ZM CIRT
Trained over 200 high school teachers in basic Cyber security
Started the ICT girls club in High schools
Cyber security awareness programme targeting university and colleges
ZmCIRT is affiliated with FIRST
First Phishing Cyber DRILL Conducted
silensec.com , IMPACT-ITU , BIT DEFENDER & NUIX - Trainers
ZM CIRT
Contributed to drafting of Cybersecurity , Cybercrime and Data Protection Bills
ZM CIIRT
Draft Laws are before parliament
ZmCIRT, Ministry of Justice, Smart Zambia Institute, Ministry Transport and Communication, Independent Broadcasting Authority and Zambia Information Communication & Technology Authority - Stakeholders

11. SERVICES Reactive Services Proactive Services Artifact Handling
Alerts & Warnings
Announcements
Artifact Analysis
Incident Handling
Technology Watch
Artifact response
Incident Analysis
Security Audits
Artifact response coordination
Incident response support
Security Assessments
Security Quality Management
Incident response coordination
Configuration & Maintenance of Security
Risk Analysis
Incident response on site
Development of Security Tools
Awareness Building
Vulnerability Handling
Intrusion detection services
Security Consulting
Vulnerability Analysis
Security related information dissemination
Education/Training
Vulnerability Response
Project Evacuation or Certification
Vulnerability Response Coordination

12. ON GOING NATIONAL ACTIVITIES…
Formulation of Public Key Infrastructure Framework
Establishment of National Cyber Security Agency
Creation of Sub-Sector CIRTS

13. THANK YOU…. ZIKOMO
ZAMBIA at 50 yrs. + 4 yrs.
on 24th October 2018