28th Parliamentary Intelligence-Security Forum – Cybersecurity: Working With & Protecting Each Other

DICT Undersecretary Joseph Dy explained that there are two competing spheres in cybersecurity—consumer protection and the concept of national security. Technology has created efficiency and expanded opportunities but it also introduced vulnerability. Thus, he underscored the need for cybersecurity measures in view of the increase in the reliance on digital platforms for governance and commerce.

By virtue of Executive Order No. 58, series of 2024, the National Security Operations Center and the National Computer Emergency Response Team (NCERT) were established pursuant to the National Cybersecurity Plan (NCP) 2023-2028. The NCERT allows for real-time collaboration with different government agencies during cyber-attacks. In 2024 alone, the NCERT managed to block 5.4 million cases of cyber-attacks or attempts to different government agencies, and processed 250 million logs from Security Information and Event Management.

Undersecretary Dy highlighted the fact that 95% of critical infrastructure pertaining to water, power and other critical sectors, is operated by the private sector, where government has no mandatory oversight and the regulatory framework is fragmented. Currently, there are ongoing discussions on the enactment of a Cyber Security Law which will establish a regulatory agency for critical infrastructure.

Aside from technology and regulation, the government is also focused on establishing a skilled workforce through capacity building programs, with emphasis on training and international collaborations with countries like Japan and the United States. Likewise, considering the cross-border issue of cybersecurity, and noting the mutual legal assistance and other established mechanisms under the Budapest Convention, the need for international collaboration becomes even more crucial.