Assessing the Philippine National Cybersecurity Plan 2022 for SMEs: Challenges and Opportunities
Matthew Henry Bibangco, Elson Manahan · Philippine Journal of Science Engineering and Technology · 2024
In response to the escalating demands of the Information and Communications Technology (ICT) sector, the Philippine Department of ICT announced the National Cybersecurity Plan (NCSP) 2022 in May 2017. Amid rising cyber threats targeting the BPO and Offshore Gaming sectors, the NCSP 2022's robust framework is crucial for national economic security. The critical nature of this plan highlights its foundational role in national development, propelled by an increasing dependency on ICT solutions. This study aims to rigorously evaluate the alignment of the NCSP 2022 with the International Telecommunications Union's Global Cybersecurity Agenda (GCA) through a comprehensive benchmarking of its five pillars: legal measures, technical and procedural measures, organizational structure, capacity building, and international cooperation. Using a mixed-methods approach, this study combines quantitative data from an extensive spectrum of scholarly articles, official reports, and industry standards on cybersecurity, supplemented by qualitative insights from expert interviews. The findings reveal that while the NCSP 2022 excels in Organizational Structure and Capacity Building, it requires Legal Measures and International Cooperation improvements. Regardless, the assessment yielded an impressive cumulative compliance score of 88.5%, showing a significant adherence to the GCA standards. Despite its robust alignment with global benchmarks, the findings underscore the need for policymakers to prioritize the development of a cybersecurity legislative framework, offering professionals more straightforward guidelines for compliance.