Assessing the cyber-security status of the metropolitan municipalities in South Africa.
Nkosiyephana Jerome. Mabaso · ResearchSpace (University of KwaZulu-Natal) · 2018
Dedication vi 8.24 Correlations 229 8.8 My organisation has an overarching supply chain management policy that guides the acquisition of information infrastructure 204 8.9 My organisation has a documented cyber-security strategy 206 8.10 My organisation has an inventory of critical information infrastructure 208 8.11 My organisation has information infrastructure contingency plans 210 8.12 My organisational strategic risk register contains cyber-security risk 212 8.13 Descriptive statistics 218 8.14 Multiple comparisons 222 8.15 Multiple comparisons 225 8.16 Multiple comparisons 228 8.17 Correlations 229 d.What theoretical framework supports cyber-security implementation in the metropolitan municipalities in South Africa?The cyber-security phenomenon is fairly new compared to the related informa tio n security phenomenon.Due to the criticality of cyber-security, the researcher considered it imperative to seek explanations about cyber-security implementation in the metropolitan municipalities.The researcher wanted to determine what these government institutions do to implement cyber-security, and why they do what they do to safeguard the information infrastructures against cyber-risks.e.How can metropolitan municipalities in South Africa successfully assess their cyber-security status?An instrument or tool is required to conduct an assessment of cyber-security status.The assessment tool must produce assessment results that guide management in the decision-making process.Due to the sensitive nature of cyber-security, successful assessment of its status within these government institutions is believed would cultivate information infrastructure protection against cyber-threats.Cyberspace ills have the potential to shut down the operations of the metropolita n municipalities in the country, and, therefore, a risk management approach towards protecting the cyberspace is considered as one of the tools for securing the interconnected CII upon which the local governments rely so heavily for their day-to-day business operations.The country's CII and networks are exposed to unprecedented cyber-attack levels (IRMSA, 2015). RESEARCH OBJECTIVESThe digitisation of government operations and associated service delivery mechanis ms offers many opportunities, but risks of disruption of essential processes for production, logistics and services also increase.Assessing the status of cyber-security in the metropolita n municipalities is envisaged to enhance cyber-threats awareness, cyber-related informa tio n and knowledge sharing, and joining forces to protect and improve responsiveness of information infrastructures.The study aimed to enhance the protection, resilience, and reliability of metropolitan municipalities' information infrastructure assets.The ever-Cyber-security efforts in South Africa are led by the Cyber Response Committee which operates under the State Security Agency's oversight (Symantec, 2016b).This interim committee has the following role players: a) South African Police Service (SAPS), which plays the role relating to the investiga tio n of cybercrimes.b) Department of Telecommunication and Postal Services is the custodian of a cyber hub, and supports initiatives to ICT users on cyber-security matters.c) Department of Justice and Constitutional Development whose role is legisla tio n drafting.d) State Security Agency provides administration support to the Cyber Response Committee and is also responsible for the implementation of cyber-security initiatives in the country whilst waiting for promotion of comprehensive legislation on various aspects of cyber-security.e) Department of Science and Technology plays a significant role in the development and implementation of research and initiatives to advance the needed skills to deal with cyber aspects in the country.f) Department of International Relations and Cooperation, which is responsible forinternational relations specific to cyber-security.g) Department of Defence is responsible for the cyber offensive and defensive development and implementation thereof. LOCAL GOVERNMENT LEGISLATIVE FRAMEWORK IN SOUTH AFRICAThis section discusses the pertinent local government legislation that is important to the objectives of this enquiry which aims to assess the cyber-security status of metropolita n municipalities in South Africa. Constitution of the Republic of South AfricaThe Constitution (RSA, 1996) is the supreme law of the Country.No other Act or legisla tio n in South Africa can override the prescription of the Constitution.Chapter seven (7) of the Constitution is dedicated to the local government in the country.Section 151 of the Constitution provides the status of municipalities and states that: "(1) The local sphere of