About the client
Bangladesh Computer Council
Challenge
Digitization is progressing fast in Bangladesh and Bangladesh is now one of the emerging Asian destinations for sourcing software, information-technology enabled services and business outsourcing.
Bangladesh’s new economy, largely based on the development of IT industry, is expected to improve the socio-economic condition and livelihood of people. Therefore, the government is working to create the conditions for the businesses and citizens to act in a secure and non-toxic digital environment.
Solution
Bangladesh Computer Council (BCC) is taking necessary measures to improve Bangladesh’s capacity to manage the risks related to digital revolution and deal with fast growing cybercrime. Bangladesh Computer Council is assisted by international consultants from NRD Cyber Security and Norway Registers Development in the establishment of a National Computer Incident Response Team (CIRT) for Bangladesh.
Bangladesh e-Government Computer Incident Response Team (BGD e-Gov CIRT) was established at BCC under the project “Leveraging ICT for Growth, Employment and Governance Project (LICT)”, financed by the World Bank.
Certified BGD e-Gov CIRT establishment is the first stage of the National CIRT development process.
BGD e-GOV CIRT mission is to support government efforts to develop and amplify ICT programs by establishing incident management capabilities within Bangladesh, which will make these programs more efficient and reliable.
Main objective of the BGD e-Gov CIRT is to manage cyber security incidents in Bangladesh government’s e-Government network and related infrastructure. BGD e-Gov CIRT will monitor the network for the events that affect security of the National Data Center (NDC) or services deployed in the NDC facilities, carry out preventive measures to minimize disruptions and coordinate incident response.
Websites of around 200 government agencies are hosted in the NDC. Major e-Government applications such as National E-Service System, Online Birth and Death Registration, Online Services of Department of Printing and Publications, are also hosted in the National Data Center. NDC also provides e-mail services to around 60 government agencies and internet services to 9 government agencies.
Constituency of BGD e-Gov CIRT includes all Bangladesh governmental institutions using the NDC infrastructure to host their IT resources and services. It is expected that once the capabilities of the BGD e-Gov CIRT mature, the mandate of the BGD e-Gov CIRT will be extended to the de facto National CIRT.
Furthermore, it is expected that BGD e-Gov CIRT will play an active role in building national cyber defense capabilities. It will organize national awareness campaigns and cybersecurity resilience initiatives, cooperate with national and international organizations. At the moment, BGD e-Gov CIRT has a Memorandum of Co-operation with a global cybersecurity awareness campaign STOP. THINK. CONNECT. Messaging Convention, Inc. as well as a Non-Disclosure Agreement with an Illinois non-profit and a US Federal 501(c)3 organization – Team Cymru Research NFP.
Services provided
NRD team is consulting and providing technical assistance which will result in drafting mandates, regulations, applications and launching CIRT information systems while following ENISA, ISACA, Critical Security Controls and other methodologies.
The supporting activities and deliverables include preparation of the government of Bangladesh Information Security Manual, report on Bangladesh Information Security Classification and Information Protection Tools, Telecommunication and ISPs Information Security Manual, Cybercrime Legislation, Cyber security awareness campaign and consensus building as well as CIRT trainings.
