the proposed website template guidelines and website ... · information and communications...

Information and Communications Technology OfficeDEPARTMENT OF SCIENCE AND TECHNOLOGY

The Proposed Website Template Guidelines and Website Migration Plan

Alberto B. Salvador, Jr.2013 National ICT Summit

June 25-26, 2013


“Establish a persistent online presence with at least basic services in order to build trust in government.”

“Approved and adopted as framework and guide for the computerization of key frontline and common services and operations of the government to enhance overall governance and improve the efficiency and effectiveness of the bureaucracy.”

“The State recognizes the vital role of communication and information in nation-building.” - 1987 Philippine Constitution

Offline is not an optionOffline is not an option


“1,285 Government Websites Hacked”“1,285 Government Websites Hacked”

1, 157Govt Websites

Defaced

2006 recorded highest (457)

Sources: PNP - ITMS (Web Services and Cyber Security Division), ICTO, zone-h.org, pastebin, wikipedia and Idefense USA

Sulu-Sabah Sulu-Sabah IncidentIncident


The Proposed Website Template General GuidelinesThe Proposed Website Template General Guidelines

General Policy Statement



Masthead

Banner

Auxiliary Menu

Content Area

Agency Footer

Standard Footer

Top Bar

Homepage Basic Layout



Banner

Masthead

Top Bar

Auxiliary Menu



Agencies shall adhere to the following main navigation specifications:



Content Area



Agency Footer



Standard Footer


The Website Migration PlanThe Website Migration Plan

Objective

Aims to ensure the smooth migration of a government website to the Integrated Government Philippines (iGovPhil) Web Hosting Service



Migration Compliance Procedures

1. Assessment of a government agency's current website2. Prioritization (First and Second Priority)3. Implementation of a Migration Checklist4. Initial Security and Audit Checks5. Actual Migration6. Implementation of a Staging Server7. Regular Backups, Security and Performance Monitoring8. Implementation of a trouble-ticketing and feedback system



For the operations phase

1) Maintain a team of CMS-expert developers that will continue to develop and produce ‘templates’ as needed to provide updates;

2) Check on potential plug-ins that agencies can adopt;

3) Continuously upgrade to enable a self-service facility in the future; and

4) Maintain a team of security experts that will proactively check on all CMS templates and plug-in’s vulnerabilities, as well as to ensure security of all hosted applications.



Sustainability of the Initiative

1) Conduct continuous capability building and knowledge exchange conference for our security experts, accredited developers and trainers, and agency web developers.

2) Involve the CMS community in the continuous development of templates and continuous evaluation of plug-ins as well as to ensure continuous supply of manpower for the pool.

3) Create a team of network security experts from the private sector and the academe that will collaboratively work in case of an attack; and devise an incentive mechanism for this.


Website Template and Migration Plan DocumentsWebsite Template and Migration Plan Documents

Maraming Maraming salamat po.salamat po.

ALBERTO B. SALVADOR, JR.

Policies and Standards OfficeNational Computer Center

DOST ICT OfficeNCC-ICTO Building

Carlos P. Garcia AvenueU.P. Campus, Diliman, Q.C.

Phone: (+632) 920-0101E-Mail: [email protected]

[email protected]

mailto:[email protected]

mailto:[email protected]