20 April 2020 – The Department of Information and Communications Technology (DICT) directs all management information system (MIS) server operators to utilize the updated version of cryptographic protocols for all government websites. These directives are contained in Department Circular 007 issued on April 16, 2020 which aims to ensure that vital information systems are encrypted and secure from cyber threats.

“The DICT commits to protect our information systems as critical assets of the government in support of national efforts promulgated by President Rodrigo Roa Duterte and the Inter-Agency Task Force for the Management of Emerging Infectious Diseases to manage the COVID-19 pandemic and its consequences on the nation’s ICT landscape,” DICT Secretary Gregorio B. Honasan II said.

The Circular mandates the designated MIS administrators to migrate and configure all their existing web servers to the updated version of the Transport Layer Security (TLS) protocol to ensure enhanced communications security for government agencies, state universities and colleges, government-owned or controlled corporations, among others.

TLS is a cryptographic protocol prominently used for end-to-end security for transactions made over the Internet. It aims to prevent the occurrence of network eavesdropping, data tampering and message forging.

All concerned MIS administrators are enjoined to comply with the directives.

“We would like to promote responsibility and accountability among our IT practitioners in the government, especially among our MIS administrators. During this ECQ, cybercrimes are prevalent. And, to contribute to the administration’s efforts of keeping the people safe from the coronavirus, we should likewise keep them safe from threats against their data privacy and cybersecurity,” Assistant Secretary Emmanuel Rey Caintic stated.

The Department Circular takes effect immediately in view of the declared public health emergency.

For a copy of the department circular, click the link below:

DEPARTMENT CIRCULAR NO. 7 – PRESCRIBING THE USE OF UPDATED VERSION OF CRYPTOGRAPHIC PROTOCOLS FOR ALL GOVERNMENT OWNED, CONTROLLED, MANAGED, CONTRACTED, OR SPONSORED WEBSITES