A Proposal For The Action Plan For Developing ICT In Cambodia 2010

ICT Development Action Plan 2010St r u c t u r a l A s p e c t s o f e -Go v e r n m e n tD e v e l o p m e n t a t Ea c h M i n i s t r yNiDAMinistr y AMinistry BMinistry CMinistry NICT Policy on General Issues and/or Common Matters (Lead Office: NiDA)ICT Poli cy for eAdmi nistrationIC T Strategy fore- Admi nistrati onIC T Ma sterPl anICT Po li cyIC T P ol icyIC T Poli cyICT Poli cyIC T Strateg yICT Stra tegyIC T Strate gyIC T Strate gyIC T Ma sterPl anICT M aste rP lanIC T MasterPl anIC T MasterPl anIC T ActionPl anICT Ac ti onP lanIC T Actio nPl anIC T-Re la tedLaw S ystemDevelopm entIC T-R el ate dLaw Sys temD evelo pm entICT- RelatedLa w S ystemDe vel op mentIC T-RelatedLa w S ystemD e vel op m entIC T Sys temDevelopm entICT S ystemD evelo pm entIC T Syste mDe vel op mentIC T Syste mD e vel op m entIC T HR DICT H RDIC T H R DIC T HR D IC T Actio nPl anIC T ActionPl anICT- RelatedLaw S ystemDevel opmen tIC T SystemDev el opment,in clu di ngGA IS/PAISIC T H R D4Te n To -Do Li s t f o r D r a f t i n g N a t i o n a l I CT P o l i c yt o D e a l w i t h Ge n e r a l I s s u e s a n d H a n d l eCo m m o n M a t t e r s o f Go v e r n m e n t o n I CTICT FrameworksICT infrastructure1.2.3.4.5.[ICT Development Framework]Develop a national ICT framework to ensureoptimal national economic and social stimuli[e-ASEAN Framework Agreement]Take measures towards achievement of the eASEAN Framework Agreement, and makeefforts to keep up with ICT at ASEAN levelby promoting and innovating ICT inCambodia[ICT for Government Services]Enhance government services throughfurther utilization of ICT applications[ICT for Private Sector Development andReform]Promote utilization of ICT for private sectordevelopment and reform as well as for growthof e-Commerce environment[ICT Literacy]Enhance the level of ICT literacy of thepopulation6.7.8.9.10.[ICT Infrastructure]Develop a safe and reliable national ICTinfrastructure nationwide[ICT Industry Development]Promote growth of national ICT industry andestablish its links in the ASEAN region[ICT Human Resources Development]Develop competitive and skilled ICT expertsand savvy ICT human resources[WID]ICT DevelopmentConsider WID (Women In Development) InICT Sector[Global Warming Issue]Endorse awareness of ICT as a means tocombat against Global Warming (GlobalClimate Change)Commitment toGlobal IssuesICT Services10

ICT Development Action Plan 2010Ver.1. 0 as of Dec. 2009Action No.A-2Preparation of Internal ICT Policy of NiDA consisting of ICTPolicy for e-Administration and ICT Policy for InformationSecurityCategoryICT PolicyImportanceIt is necessary to establish an internal ICT Policy of NiDA forguiding principle of ICT development relating to NiDA, whichwill mainly cover areas of e- Administration (e-Government) andinformation security.PriorityAction to be taken as soon as possible, considering that creation ofsuch an internal ICT Policy will lead NiDA to sole ICT controland management authority in RGC.RelevanceThe internal ICT Policy of NiDA will be able to be a good sampleof ICT Policy for other entities.BenefitsAs a result of establishing the internal ICT Policy, NiDA canchoose a right way for preparing ICT Strategy and Plan anddeveloping ICT related laws.NiDA can declare the establishment of the internal ICT Policyto other entities, which will lead them to what internal ICTpolicy should cover at entity level.Expected DifficultiesNothing in particularSustainabilityN/ARelated Ministry and/ororganizationOCMConsiderationIt is an essential matter to establish an internal ICT Policy whichconsists of ICT Policy for e-Administration (e-Government ofNiDA) and Information Security. ICT strategy, plan, related lawswill be constructed under this internal ICT Policy as well as theNational ICT Policy.ReferenceNational ICT Policy – Policy Proposal for the Royal Governmentof Cambodia11

ICT Development Action Plan 2010St r u c t u r a l A s p e c t s o f e -Go v e r n m e n tD e v e l o p m e n t a t Ea c h M i n i s t r yNiDAMinistr y AMinistry BMinistry CMinistry NICT Policy on General Issues and/or Common Matters (Lead Office: NiDA)ICT Poli cy for eAd mi nistrationICT Strateg y fore - Admi nistrati onIC T Ma sterPl anICT Poli cyIC T P ol icyIC T Po li cyICT Po li cyICT Stra te g yICT Stra teg yIC T Strate gyICT Strate g yIC T MasterPl anICT M aste rP lanIC T Ma sterPl anICT Ma sterPl anIC T Actio nPl anICT Ac ti onP lanIC T Actio nPl anIC T-Rela tedLa w S yste mDe vel opm en tIC T-R el ate dL aw Sys te mDeve lopm en tICT- Re la tedLa w S ystemD e vel op me ntICT-Re latedLaw S yste mD evel op m en tIC T Sys te mDe vel opm en tICT S ystemDeve lopm en tIC T Syste mD e vel op me ntICT Syste mD evel op m en tIC T HR DICT HRDIC T H R DIC T HRD ICT Actio nPl anIC T Actio nPl anICT- Rela tedLa w S ystemDe vel op me n tIC T Syste mDev el op me nt,in cludi ngGA IS/PAISIC T HR D4I n t e r n a l I CT P o l i c i e s a n dSt r a t e g i e s o f N i D ANational ICT PolicyNiDA Internal ICT PolicyICT Policy for e-AdministrationICT Policy for Information SecurityICT Strategy for e-AdministrationICT Strategy for Information SecurityRelevant Laws, Acts, etc.Cyber LegislationInternet RegulationRelevant PlansGISMS & G-CIOe-Government is only relatedto NiDA handling portion likeGAIS/PAIS. It can be definede-Administration12

ICT Development Action Plan 2010Ver.1. 0 as of Dec. 2009Action xpected DifficultiesPreparation of Portal Enhancement Plan (Feasibility Study)e-Government Service DeploymentIn case of government administration service, the ideal solution isto prepare One Stop Service for the public, including businesspeople. During the transition period, e-Government service willbe offered by each government entity, applying its own way,which will cause complicated e-Government service in total as aresult. However, there is a strong demand on a unified eGovernment service for the public.If people can access necessary e-Government service through agateway portal, where main three stems, Government, Businessand Citizen, are shown, their access will become easy and simpleas One Stop Service. So, as easy as and as simple as possible, eGovernment Gateway Portal should be created together with thosestem portals – that is the reason why Portal EnhancementFramework is needed.This planning work (feasibility study) shall be performed byNiDA immediately so that scope of the work will be envisionedand basic requirements can be specified.It is recommendable that the Portal Enhancement should beimplemented, integrated with PAIS Expansion Project, etc.It should be considered that public information disclosure, goodgovernance, industry development and growth of FDI (ForeignDirect Investment) can be accelerated by arranging theGovernment, Business, Citizen portals with the gateway.One Stop Service of e-Government will enormously contributeto the public and society, because an easy and simpleprocedure for e-Government access is essential in utilizing eGovernment service.As a result of opening a unified gateway portal, informationsecurity can be maintained tightly.Preparation of requirements for materializing a project will betough work, if carelessly handled in getting consents from otherentities.13

ICT Development Action Plan 2010Action No.B-1Preparation of Portal Enhancement Plan (Feasibility Study)SustainabilityFor upkeep of the portals, continuous improvement and dailyupdating work are required. Step-by-step development shall beconsidered from the beginning.Related Ministry and/ororganizationOCM and each entityThere is a keen and urgent need of preparation of PortalEnhancement Plan so that the following portal sites can be firmlydeveloped as recommended by “e-Government ServiceDeployment Plan”.-Government Portal EnhancementOpen of Business PortalOpen of Citizen PortalThe above portal sites are both in Khmer and English so that thesites can be used by not only Cambodian society but also byinternational society.ConsiderationThe portal website of Singaporean Government is one of therecommendable websites as reference. So, the following is anexample in case of RGC website URLs:www.cambodia.gov.kh(being used at existing website)Government:http://www.cambodia.gov.kh zens & sdint/Referencee-Government Service Deployment Plan, NiDA 2008 and itssupplementary report (The Follow-up Study Report on eGovernment Deployment Plan 2009)http://www.gov.sg14

ICT Development Action Plan 2010Th e I d e a o n M a t e r i a l i z i n g e Go v e r n m e n t P r o j e c t a t N i D A20082009 20102010 20112011 20122012 20132013 20142014 20152015 20162016 20172017 20182018 201920192008 2009Future ActionPortalEnhancementFrameworkPhase 3Use of Cloud Computing will be able to solve the difficultiesand then materialize an entire e-Government service platformPAIS Expansion*NAIS DevelopmentJICA Phase 2**1. ICT ManagementEnablingEnvironment200809200920 08 202. ICT HRD2. ICT HRD2013142013 2020142015201520166 201720120172018192018 20201920202020EEnn abgablinlingEnon mEnvirvironmenentt2.2.ICTICTHRDHRD3.ion3. NIINIIOperatOperation4.4.Standards &&DocumentationStandardsDocumentationPhPhasease 22Essentialal Inter-MinistryEssentiInter-MinistryAppl icationsApplicati onsPhPhasease 33EnhancedEnhancedGov’tPortalGov’ tPortalPPhasehase 444.& Documentation4.StandardsStandards& Documentation20100111 20122010 220120121.1.ICTICTManagemenManagementtPhPhasease 113. NII Operation4 programs18 projects* not pledged yet** being requestedPhase 1EnablingEnvironmentFrameworkCitizen PortalBusinessPortalCommon on-lineapplication interfacePhase 4Enhancede-ServicesPhase 6Phase 5EnhancedGov’t PortalCloudComputingExpected NiDAProjectsPhase 7As far as coverable, PAIS Expansion andNAIS Development Projects shall includeWork for Portal Enhancement20202020PPhasehase 55PPhasehase 66PPhasehase plication interfaceInter -o perabili tyStan dar ds need edBusinessBusi nessPortalPortalCiCitizentizen PortalPortalPut up s ervic es as a nd w hen r ead yEEnhancednhancede-Servicese-Services815

ICT Development Action Plan 2010Ver.1. 0 as of Dec. 2009Action ationwide e-Government Service Deployment Plan Based onCloud Computing (Feasibility Study)e-Government Service DeploymentEmployment of cloud computing for e-Government service willbe important from the viewpoints of:Acceleration of ICT development at the entitiesthat are delaying use of ICT, including arrangement of eGovernment service deployment.Rapid equalization of uneven ICT developmentamong the entitiesCloud computing can realize economical, safe and securedcomputing systems compared with conventional computing,releasing responsibility for ICT development of the entities tosignificant extent.It is recommendable to start studying how to configure eGovernment services nationwide as soon as possible, employingthe concept of cloud computing. The idea will be able to berealized by PAIS Expansion Project, etc.Advantages of cloud computing, which is economical, safe andrapid computing systems construction, can self-explanatorily showits relevance as explained mentioned in the item of importanceabove.Rapid system constructionEconomical, safe and secure computingAcceleration of ICT development since responsibility for ICTdevelopment at each entity can be lightened.Equalization of uneven ICT development among the entitiesMinimization of duplication of software applicationdevelopment among the entitiesExpected DifficultiesPreparation of requirements for materializing a project will betough work, if carelessly handled in getting consents from otherentities.SustainabilityFor upkeep of the cloud computing system, continuousimprovement and O&M work are required. Step-by-stepdevelopment shall be considered from the beginning.16

ICT Development Action Plan 2010Action No.Nationwide e-Government Service Deployment Plan Based onCloud Computing (Feasibility Study)B-2Related Ministry and/ororganizationOCM and potential entitiesIf acceleration of nationwide e-Government service deployment isconsidered necessary, use of cloud computing is one of therealistic solutions; each entity can commonly share services,platforms and infrastructure of cloud computing with others. So,duplicated application development can be minimized among theentities.ConsiderationThe advantages of cloud computing will be remarkable, thoughthis computing can be realizable subject to availability of highspeed broadband transmission network at low cost.Since NiDA will have a chance to study on employment of cloudcomputing over PAIS Expansion Project, etc., it isrecommendable to take into consideration a trend of technologytoward cloud computing.e-Government Service Deployment Plan, NiDA 2008 and itssupplementary report (The Follow-up Study Report on eGovernment Deployment Plan 2009)ReferenceTh e I d e a o n M a t e r i a l i z i n g e Go v e r n m e n t P r o j e c t a t N i D A20082008 20092009 20102010 20112011 20122012 20132013 20142014 20152015 20162016 20172017 20182018 20192019Future ActionPortalEnhancementFrameworkPhase 3Use of Cloud Computing will be able to solve the difficultiesand then materialize an entire e-Government service platformPAIS Expansion*NAIS DevelopmentJICA Phase 2**1. ICT ManagementEnablingEnvironment20080920 08 2020092. ICT HRD2. ICT HRD20131420 13 2020142015201520167201 6 20120172018192 018 20201920202020EngEnabablinlingEnon mE nvirvironmenentt2.D2.ICTICTHRHRD3. NIINII Operation3.Operation4.dards ase 22Essentialal Inter-MinistryEssentiInter-MinistryAppl icationsApplicationsPhPhasease 33EnhancedEnhancedGov’tPortalGov’ tPortalPPhasehase 444.& Documentation4.StandardsStandards& Documentation20100111 20122010 220120121.1.ICTICTManagemenManagementtPhPhasease 113. NII Operation4 programs18 projects* not pledged yet** being requestedPhase 1EnablingEnvironmentFrameworkCitizen PortalBusinessPortalCommon on-lineapplication interfacePhase 4Enhancede-ServicesPhase 6Phase 5EnhancedGov’t PortalCloudComputingExpected NiDAProjectsPhase 7As far as coverable, PAIS Expansion andNAIS Development Projects shall includeWork for Portal Enhancement20202020PPhasehase 55PPhasehase 66PPhasehase 77Common on-lCommonon-liineneappli cation interfaceapplicationinterfaceInter -o per abili tyStan dar ds need edBusinessBusi nessPortalPortalCiCitizentiz en PortalPortalPut up s ervic es as a nd w hen r ead yEEnhancednhancede-Servicese-Services817

ICT Development Action Plan 2010e-Government Service Concept by Cloud ComputingCurrent ConceptMinistry AMinistry CMinistry try BMinistry DProposed ConceptMinistry AMinistry CMinistry ACloud Service(e.g. Queue)Cloud infrastructure(e.g. Billing VMs)Ministry CCloud Platform(e.g. Web Fronted)Cloud Storage(e.g. Database)Cloud Computing CenterMinistry BMinistry D18

ICT Development Action Plan 2010Ver.1. 0 as of Dec. 2009Action stablishment of GISMC (Government Information SecurityManagement Committee)GISMS PromotionIn performing information security initiatives at RGC level,establishment of GISMC (Government Information SecurityManagement Committee), regarded as a subset of GovernmentCIO Committee for information security, is the most importantand indispensable. It is difficult to accomplish informationsecurity strengthening at RGC level without setting up GISMC,because no information sharing among the entities can beachieved. Keeping information security of the entities at almostall the same level is the primary target of the Committee.Action to be taken immediately so that there will be no weak placein RGC in terms of information security.Strong information security can be considered one of assurancesof or guarantees on the Government for the public, businesspeople, foreign firms, foreign government, international society,etc.Information security of each entity can gradually bestrengthened as a result of activities of GISMC.Information sharing on information security, etc. at RGC levelwill contribute to not only strengthening information securityof each entity but also boost awareness of necessity of ICTdevelopment in RGC.Smooth coordination between NiDA and other entities can beexpected through strengthening information security.Expected DifficultiesNeed to convince other entities of its necessitySustainabilityN/ARelated Ministry and/ororganizationOCM and other entities19

ICT Development Action Plan 2010Action No.ConsiderationD-1Establishment of GISMC (Government Information SecurityManagement Committee)The scenario toward establishing GISMC will be:– Establishment of ISMTT at NiDA (Completed)– Assignment of at least three IT staff for informationsecurity management at each entity– Each entity will form ISMC (Information SecurityManagement Committee) at ministry level, which willcoordinate with NiDA’s ISMTT.– Each entity and NiDA will form GISMC, subject toavailability of the secretariat function to be undertakenby ISMTT of NiDA– GISC meeting: the secretariat, ISMTT of NIDA, willinvite all the entities to GISC meeting for informationsharing and talks on information security issues atcertain intervals.It is obvious that this kind of activities will increase awareness ofinformation security in RGC and NiDA can fulfill one of itsduties, and also that all the entities should have a unified idea onconstructing a strong informalities security platform at RGC level.GISMC will surely contribute to constructing such a platform.ReferenceGISMS1.0 Rev.120

ICT Development Action Plan 2010 Proposed Government InformationSecurity Strengthening InitiativesKeysIS: Information SecurityISPC: IS Policy CouncilNISC: National IS Management CenterCIP-TF: Critical Infrastructure Protection TaskforceCIC: Cyber Security Information CenterGSOC: Government Security Operation CenterGISMC: Government IS Management CommitteeGISMS: Government IS Management SystemGISSC: Government IS Standard CriteriaPhase 1 atNiDA LevelPhase 3at StateLevelIS Policy Council (ISPC)National ISManagement Center(NISC)CIP-TFCIC (as GSOC)Phase 2 atGovernmentLevelGovernment ISManagementCommittee(GISMC)Feb. 2008 - Jan. 2010ISAC of EachIndustryStaff of Each Ministry asIS Management TeamISMTTISAC: InformationSharing and AnalysisCenter, organized inprivate tems, try'sPolicy &StandardMinistry'sManuals/GuidelinesGISSCVarious ISMeasuresFirewallAnti-Virus/-MalwareApplication SoftwareInformationAssetClassificationVarious ISTechnology Manuals21

ICT Development Action Plan 2010Ver.1. 0 as of Dec. 2009Action ISMS Dissemination to Government OfficesGISMS PromotionPromotion of GISMS is extremely important to disseminate theidea on information security management at Government level. Itis obvious that RGC cannot cope with cyber attacks withoutequipping with a unified information security concept and actualtool to protect its IT systems and networks. In order to constructthe unified information security conc

List of Actions to be Taken Importance, Priority and Relevance of Each Action Actions to be Taken A-1 Sub-decree issuance on National ICT Policy A-2 Preparation of Internal ICT Policy of NiDA consisting of ICT Policy for e-Administration and ICT Policy for Information Security B-1 Preparation of Portal Enhancement Plan B-2