Draft Informat|on Secur|ty o||cy

kLSLN1A1ICN 8
Name Iranc|s Mwaura
Des|gnat|on Sen|or Ass|stant D|rector
Lvent CIC]eGov Conference
Date 30
th
November 2011
lnLroducLlon
lL ls noLeworLhy
W 1he securlLy manual has been wrlLLen already
W ln Lhe process of dlssemlnaLlon Lo
sLakeholders
W key Lechnlcal pollcles have been ldenLlfled and
are ln developmenL
lnLro
W lL ls a seL of laws rules and pracLlces LhaL wlll
regulaLe how Cok lC1 asseLs are managed
W 1he drafL lnformaLlon securlLy pollcy ls ln llne
wlLh Lhe wlder lC1 SLraLegy and ls geared Lowards
asslsLlng reallsaLlon of seL ob[ecLlves ln a secure
lC1 envlronmenL
W lL covers Lhe followlng aspecLs
W ConfldenLlallLy lnLegrlLy AvallablllLy
W 8egulaLory leglslaLlon
W 8equlremenLs
W SLandards and compllance lSC sLandards besL pracLlces
W Cwnershlp lnfrasLrucLure daLa appllcaLlons and processes
W lndlvldual pollcles manual guldellnes
lnLroducLlon
W lL ldenLlfles roles and responslblllLles ln Lerms of pollcy
W lmplemenLaLlon LnforcemenL AudlL 8evlew eLc
W ollcy Cwnershlp and accounLablllLy framework
W 1he ulrecLoraLe of LCCv
W lC1 secreLary
W ulrecLor lnformaLlon securlLy
W SecurlLy CommlLLee
W AccounLlng Cfflcers and heads of ueparLmenLs
W lC1 heads
W SysLem neLwork and daLabase AdmlnlsLraLors
W All oLher users
W 1he scope cover all Lhe governmenL lC1 asseLs and users
ollcy hlerarchy
W Covernlng pollcy Slngle documenL
W 1echnlcal pollcles MulLlple documenL
W Culdellnes / rocedures SecurlLy Manual
1echnlcal pollcles
W AuLhenLlcaLlon pollcles
W SysLem pollcy
W neLwork pollcy
W uaLa prlvacy
W uaLa lnLegrlLy
W SysLem admlnlsLraLlon
W usage pollcy
W SecurlLy lncldenLs managemenL pollcy (@%
W hyslcal (8ulldlng and uaLa CenLre% securlLy
W PealLh and safeLy pollcy
W 8lsk and buslness conLlnulLy managemenL
W l1 asseL dlsposal
W 1hlrd arLy access ollcy L1C eLc
key Success lacLors
W SLrong leadershlp pollces and procedures
W lnvolvemenL of sLakeholders
W AdopLlve pollcles
W MonlLorlng and regular updaLes
W 1ralnlng and awareness
Asanten| !!
|nfosecQkenyagoke