Critical Agencies Told To Get ISMS Certification To Face Cyber Threat

KUALA LUMPUR, Aug 5 (Bernama) -- All critical national agencies have been urged to obtain the Information Security Management System (ISMS) certification in order to be better prepared in facing the cyber threat.

Minister in the Prime Minister's Department Datuk Seri Mohamed Nazri Aziz said the certification was to ensure that the organisations manage their own critical systems according to the appropriate procedures and level of security.

"The Cabinet had also decided that all the critical agencies get the ISMS certification within the stipulated time," he said when closing the Cyber Crisis Practical Training 2010 (X-Maya3), here Thursday.

Also present was Science, Technology and Innovation Deputy Minister Fadillah Yusof.

All organisations can obtain the ISMS certification within three years from Feb 24, 2010 from Sirim Berhad, the certification body.

Mohamed Nazri said continued monitoring and control of the nation's cyber space was necessary to ensure peace would prevail and to safeguard the country against elements that could threaten its security and sovereignty.

"More importantly, against threats to the Critical National Information Infrastructure (CNII) which must be dealt with effectively as it is the pillar of the country's social, economic and political stability and security.

"Each critical organisation must play its role and carry out its responsibility as outlined in the National Cyber Crisis Management Plan drawn up by the National Security Council.

"Without the commitment of these agencies, the effort will not at all be successful."

He said in dealing with the cyber threat, each organisation should also take into consideration the Business Continuity Plan (BCP) or Disaster Recovery Plan (DRP) so that its operations could continue even when faced with a cyber threat.

The X-Maya 3, organised by the National Security Council and CyberSecurity Malaysia, an agency under the Science, Technology and Innovation Ministry, was an annual practical training session to test the preparedness of the CNII in facing the cyber threat.

-- BERNAMA

source and credit : http://www.bernama.com/bernama/v5/newsgeneral.php?id=519254