Archives par étiquette : justice

CTO Cybersecurity Forum, Yaoundé Edition, Write Up Part 1

Last days, was held at the Palais des Congrès of Yaoundé 3rd Cybersecurity Forum organized by the Commonwealth Telecommunications Organisation (CTO). We had the opportunity to take part in this event with the assistance of the organizing committee of the CTO Event, who has kindly granted to the non-governmental organization working in the areas of Cybersecurity and Awareness of populations in Cameroon called « Cameroon Cyber ​​Security (2CS) », a free entry pass. For information, note that access to the various workshops was paying, to the order of 130,000 FCFA and more per person, depending on the member’s affiliation. We hereby wish to thank the organizing committee of the CTO Cybersecurity Forum for their encouragement to our local initiative.

CTO Cybersecurity Forum 2013 (1)

The venue does not have an Internet connection, which is quite curious especially because the Internet was cut the spotlight as the subject, it was impossible to livetweet the event in its entirety. However, you can reach some of the tweets made during the various workshops that were held over via the hashtag #CTOSecure on Twitter.

As a prelude to the main conference, held from Monday 22 to Wednesday, April 24, a workshop on the protection of Children Online. Being arrived at the site of the conference on Wednesday 24, we have not had the opportunity to take part in this workshop. However, presentations made during this past session are available online on the website of the CTO [1], and are about the measure taken by the Commonwealth countries for the protection of Children in the online services and an Experience Sharing for the implementation of these programs with practical case for the Gambia, Nigeria, Mauritius, Ghana, Serra Leone and Cameroon.

The Thursday 25 marked the beginning of the Forum itself with messages of openings and welcome by Senior Representatives of various organisations involved in the event (ITU, Government of Cameroon, ART, …). This opening sequence is followed by various keynotes led by several high profile experts in their fields, each in a 15 minute « Fastrack » mode.

During these keynotes, we got to turn speeches by Professor Tim UNWIN, Secretary General of CTO, under the theme: « Cybersecurity in the Commonwealth: Setting the stage ». It was a matter to draw the attention of the public and in turn members of the Commonwealth states on the need and the importance of implementation operational and efficient Cybersecurity Program, this by recalling to everyone that Cybersecurity is not just about our computers, but extends to all ICT devices (Smartphone, tablets, mobile devices, home automation, …).

Following this very rewarding keynote, it was the turn of Jamie Sanders to talk on the theme: « Cybergovernance and Growth », where it was clear that the mastery of cyberspace is closely linked to the growth of a nation.

David POLLINGTON in his presentation: « Critical Information Infrastructure Protection: Implications for developing countries » thus, we talked about the problems and opportunities relating to the Critical Informations Infrastructure Protection (CIIP) at the state level for countries in development. Indeed, most of these countries have become platforms for expansion and pivot for cybercriminals, putting at risk the integrity of their CIIs (Critical Information Infrastrutures). This presentation was further at the workshop on the CIIP, always animated by David Pollington in partnership with the FIRST (Forum for Incidence Response and Security Teams).

Presentations of Alex SERGER on « Cybercrime: The Cost of Crime-The Benefits of Cooperation » and Mario MANIEWICZ « Internet governance: Towards a Global Approach on Cybersecurity » is challenged before a major aspect in the fight against Cybercrime: Information Sharing. It is therefore crucial to the various stakeholders, both national, international and non-governmental to setting up processes for Intelligence sharing on threats and attacks present on each of their networks, in order to generate a climate of cyber overall prevalence. Indeed, Cybersecurity is a process involving several links in the chain, without a global vision and comprehensive measures, cybercriminals can always slip between the cracks, exploiting these differences in processes and laws to their advantage. These topics also discuss about the Budapest Convention and it’s ratification buy many countries. The main idea here was « Cooperation and Sharing ».

We can not go on without mention to you the presentation of Pierre DANDJINOU from AfricaCERT under the theme: « Promoting Cyber ​​security in Africa » ​​where the issue was for him to present the evolution of this joint initiative from its genesis to its past, current and future accomplishments. This is a very promising program by which the Cybersecurity ecosystem in Africa was rise up several (creation of naAFRICACERTtional CERT/CIRT, Workshops and Training on Incident Detection and Security Management held annually, Sessions of Good Practices Sharing between our local CERTs and International Organizations – like Team Cymryu, JCERT, FIRST … – Cybersecurity bill submitted to the African Union, …).

It is on these keynotes that is completed the first part of the day. A second part will be the subject of our next publication and focus on the Workshop entitled « A Practical Approach to Critical Information Infrastructure Protection »

 

Source :

[1] CTO Cybersecurity Forum Presentations Repository :

[2] AfricaCERT Website

 



3rd Commonwealth Cybersecurity Forum

Du 22 au 26 Avril prochain, la capitale politique du Cameroun, Yaoundé, abritera la Conférence annuelle  sur la Cyber Sécurité dans les états membres du Commonwealth. Cet évènement se tiendra au Palais des Congrès de Yaoundé sis au quartier Tsinga.

Les sessions de cette conférence porteront principalement sur les sujets suivants :

  • Protection des Infrastructures Critiques
  • La Sécurité en ligne pour les plus jeunes, qui par ailleurs fera l’objet d’un atelier en préliminaire.
  • Garantir la Sécurité tout en préservant la vie privée et les libertés individuelles
  • Les implications des vols d’identité en ligne
  • Mise en Œuvre de normes communes grâce  à des partenariats avec diverses parties prenantes.

En prélude à la conférence proprement dite qui débutera le 25 Avril, un atelier sera organisés du 22 au 24 Avril et portera sur la Protection des Enfant en ligne et son Programme Pilote d’implémentation dans 6 pays membres à savoir le Cameroun, la Gambie, le Nigeria, le Ghana, la Sierra Leone et la Mauritanie.

Résumé :

  1. Thème  : « Bringing Safety, Resilience and Security in Cyberspace »
  2. Date : du 25 au 26 Avril 2013
  3. Lieu : Yaoundé, Palais des Congrès
  4. Programme :http://www.cto.int/events/upcoming-events/commonwealth-cybersecurity-forum/commonwealth-cybersecurity-forum-programme/
  5. Modalités pratiques :http://www.cto.int/events/upcoming-events/commonwealth-cybersecurity-forum/commonwealth-cybersecurity-forum-venue/
  6. Plus d’informations :  http://www.cto.int/events/upcoming-events/commonwealth-cybersecurity-forum/commonwealth-cybersecurity-forum-more-information/

 

Source : http://www.cto.int/events/upcoming-events/commonwealth-cybersecurity-forum/



Textes Relatifs à la Cybersécurité au Cameroun

Le Cameroun dans sa croisade contre les cybercriminels et dans le but de se doter d’un arsenal juridique pour le traitement des divers incidents liés au Cyberespace a mis à disposition des lois, décrets et organismes qui serviront de référentiels en la matière.

Le présent article en recense les principales. Il s’agit notamment de :

  • La loi N°2010/012 du 21/12/2010 Portant sur la Cybersécurité et la Cybercriminalité au Cameroun : texte
  • La loi N°2010/13 du 21/12/2010 Régissant Les Communications Electroniques Au Cameroun : texte
  • La loi N°2010/021 du 21/12/2010 Régissant Le Commerce Electronique Au Cameroun : texte
  • Le Décret N°2012/1643/PM du 14/06/2012 Fixant Les Conditions Et Les Modalites D’audit De Securite Obligatoire Des Reseaux De Communications Electroniques Et Des Systemes D’information : texte
  • Le Décret N°2012/1318/PM du 22/05/2012 Fixant Les Conditions Et Les Modalités D’octroi De L’autorisation D’exercice De L’activité De Certification Electronique : texte
  • Le Décret N° 2012/309 Du 26/06/2012 Fixant Les Modalités De Gestion Du Fonds Spécial Des Activités De Sécurité Electronique : texte

L’organe gouvernemental en charge de la Cybersécurité et de ses ramifications est l’ANTIC (Agence Nationale des Technologies de l’Information et de la Communication).

Notons aussi la présence du CSIRT/ANTIC ( Computer Incident Response Team) de l’ANTIC, qui est l’organe exécutif en charge de la gestion des incidents de Sécurité Informatique sur toute l’étendue du territoire National.