ANTIC POLICY FRAMEWORK
1.1 ANTIC at a Glance
Chapter 11 Section 7 (regulation and monitoring of electronic security activities) of Law №. 2010/012 of 21 Dec 2010 relating to cybersecurity and cyber criminality in Cameroon states that, The National Agency for Information and Communication Technologies (ANTIC), instituted by the Law governing electronic communications in Cameroon, is responsible for the regulation of electronic security activities in collaboration with the Telecommunications Regulatory Board (TRB).
In 2011, Antic became a member of the ITU-IMPACT, an international multilateral partnership against cyber threats that offers high-level training programmes to help partner countries (Cameroon) to fight and prevent the scourge.
According to the law stated above and the Cameroon Cyberwellness Profile (United Nations Statistics Division, December 2012), ANTIC is officially recognized as the national (and sector specific) cybersecurity framework including cybersecurity strategy, policy and roadmap for implementing internationally recognized cybersecurity standards for government agencies. ANTIC is responsible for the regulation, control and monitoring of activities related to the security of electronic communication networks, information systems, and electronic certification on behalf of the State (Chapter 11 Section 7: pg. 7-8 of Law №. 2010/012 of 21 Dec 2010 relating to cybersecurity and cyber criminality in Cameroon) . It has as missions to:
As a public body responsible for the regulation of electronic security activities, ANTIC has in place a number of action plans in order to bar the way to the cybersecurity scourge in Cameroon (source: http://www.antic.cm/index.php/cybersecurite/9-securite/244-regulation-des-activites-de-securite-electronique-au-cameroun--lantic-a-luvre)by controlling and monitoring tool Internet as follows:
1.1 ANTIC at a Glance
Chapter 11 Section 7 (regulation and monitoring of electronic security activities) of Law №. 2010/012 of 21 Dec 2010 relating to cybersecurity and cyber criminality in Cameroon states that, The National Agency for Information and Communication Technologies (ANTIC), instituted by the Law governing electronic communications in Cameroon, is responsible for the regulation of electronic security activities in collaboration with the Telecommunications Regulatory Board (TRB).
In 2011, Antic became a member of the ITU-IMPACT, an international multilateral partnership against cyber threats that offers high-level training programmes to help partner countries (Cameroon) to fight and prevent the scourge.
According to the law stated above and the Cameroon Cyberwellness Profile (United Nations Statistics Division, December 2012), ANTIC is officially recognized as the national (and sector specific) cybersecurity framework including cybersecurity strategy, policy and roadmap for implementing internationally recognized cybersecurity standards for government agencies. ANTIC is responsible for the regulation, control and monitoring of activities related to the security of electronic communication networks, information systems, and electronic certification on behalf of the State (Chapter 11 Section 7: pg. 7-8 of Law №. 2010/012 of 21 Dec 2010 relating to cybersecurity and cyber criminality in Cameroon) . It has as missions to:
- Examine applications for accreditation and prepare the specifications of Certification Authorities and submit them to the Minister in charge of telecommunications for Signature.
- Control the compliance of electronic signatures issued.
- Participate in the development of the national policy on the security of electronic communication networks and certification
- Give an advisory opinion on instruments that fall under its area of competence;
- Control activities aimed at ensuring the security of electronic communication networks, certification and information systems;
- Examine applications for the certification of cryptographic means and issue certificates of homologation for security equipment;
- Prepare agreements of mutual. recognition with foreign parties and submit them to the Minister in charge of Telecommunication for signature
- Monitor technological developments and issue warnings and recommendations regarding the security of electronic communication networks and certification ;
- Participate in research, training and studies related to the security of electronic communication networks, certification and information systems;
- Ensure the regularity and efficiency of security audits of information systems in accordance with established standards, public bodies and Certification Authorities
- Monitor, detect and provide information on computer-related risks and cybercriminal activities;
- Carry out any other mission of general interest assigned to it by the supervisory authority.
- Manage the Internet resources: CM » Domain Names, IP Addresses in Cameroon (Law N°2010/013 relating to Electronic Communication in Cameroon and Decree N° 2013/0402/PM)
- Elaborating on a National Information Security Policy
- Reinforcing the cybersecurity legal framework
- Sensitizing and promoting the teaching of cybersecurity related courses in universities
- Building partnerships with some organizations (Yahoo, Google, FIRST, INTERPOL)
- Elaboration of standards related to cybersecurity(charter, procedure, policy)
- Promoting the development of local expertise in the cybersecurity
- Setting up a national PKI (Public Key Infrastructure)
- Conducting security audits nationwide amongst others.
As a public body responsible for the regulation of electronic security activities, ANTIC has in place a number of action plans in order to bar the way to the cybersecurity scourge in Cameroon (source: http://www.antic.cm/index.php/cybersecurite/9-securite/244-regulation-des-activites-de-securite-electronique-au-cameroun--lantic-a-luvre)by controlling and monitoring tool Internet as follows:
- Establishment of an Internet regulation framework to help develop the legal and technical means that will promote the harmonious and efficient development of the Internet.
- Development of the activity of the security audit of information systems of public and private organizations to help maintain information systems to an acceptable level of security and deter cybercriminals constantly.
- Development of the activity of the security intelligence and response to cyber incidents; establishment of a Computer Emergency Response Team (CERT) to help undertake proactive and remedial actions related to computer security.
- Development of the activity of electronic certification; establishment of a public key infrastructure (PKI) that will allow and offer Internet users the same security (confidentiality, integrity, authentication and non-repudiation of transactions) to which they are entitled in the ordinary world.
- The Agency has organs like the Computer Incident Response Team, Public Key Infrastructure Centre, and the Department of Audit Security.