National Computer Incident Response Team (BGD e-Gov CIRT) establishment

Bangladesh

Challenge

Digitisation is progressing fast in Bangladesh and Bangladesh is now one of the emerging Asian destinations for sourcing software, information-technology enabled services and business outsourcing.

Bangladesh’s new economy, largely based on the development of IT industry, is expected to improve the socio-economic condition and livelihood of people. Therefore, the government is working to create the conditions for the businesses and citizens to act in a secure and non-toxic digital environment.

Solution

Bangladesh Computer Council (BCC) is taking necessary measures to improve Bangladesh’s capacity to manage the risks related to digital revolution and deal with fast growing cybercrime. Bangladesh Computer Council is assisted by international consultants from NRD Cyber Security and Norway Registers Development in the establishment of a National Computer Incident Response Team (CIRT) for Bangladesh.

Bangladesh e-Government Computer Incident Response Team (BGD e-Gov CIRT) was established at BCC under the project “Leveraging ICT for Growth, Employment and Governance Project (LICT)”, financed by the World Bank.

Certified BGD e-Gov CIRT establishment is the first stage of the National CIRT development process

BGD e-GOV CIRT mission is to support government efforts to develop and amplify ICT programs by establishing incident management capabilities within Bangladesh, which will make these programs more efficient and reliable.

Main objective of the BGD e-Gov CIRT is to manage cyber security incidents in Bangladesh government’s e-Government network and related infrastructure. BGD e-Gov CIRT will monitor the network for the events that affect security of the National Data Centre (NDC) or services deployed in the NDC facilities, carry out preventive measures to minimize disruptions and coordinate incident response.

Websites of around 200 government agencies are hosted in the NDC. Major e-Government applications such as National E-Service System, Online Birth and Death Registration, Online Services of Department of Printing and Publications, are also hosted in the National Data Centre. NDC also provides e-mail services to around 60 government agencies and internet services to 9 government agencies.

Constituency of BGD e-Gov CIRT includes all Bangladesh governmental institutions using the NDC infrastructure to host their IT resources and services. It is expected that once the capabilities of the BGD e-Gov CIRT mature, the mandate of the BGD e-Gov CIRT will be extended to the de facto National CIRT.

Furthermore, it is expected that BGD e-Gov CIRT will play an active role in building national cyber defence capabilities. It will organize national awareness campaigns and cybersecurity resilience initiatives, cooperate with national and international organizations. At the moment, BGD e-Gov CIRT has a Memorandum of Co-operation with a global cybersecurity awareness campaign STOP. THINK. CONNECT. Messaging Convention, Inc. as well as a Non-Disclosure Agreement with an Illinois non-profit and a US Federal 501(c)3 organization – Team Cymru Research NFP.

Other stories

CyberSOC managed SOC services in the Bank of Botswana
CyberSOC managed SOC services in the Bank of Botswana
Natrix and CyberSet deployed for CSIRTMalta
Natrix and CyberSet deployed for CSIRTMalta
Natrix threat monitoring platform for Egypt's financial sector
Natrix threat monitoring platform for Egypt's financial sector
Assessment of the technical and organisational security defences for the Central Bank of Botswana's infrastructure
Assessment of the technical and organisational security defences for the Central Bank of Botswana's infrastructure
Assessment of the technical and organisational security defences for the Bank of Guyana's infrastructure
Assessment of the technical and organisational security defences for the Bank of Guyana's infrastructure
Sectorial CSIRT for energy sector in Kosovo
Sectorial CSIRT for energy sector in Kosovo
Cybersecurity Fusion Centre Capacity Building  for the Central Bank of Nigeria
Cybersecurity Fusion Centre Capacity Building for the Central Bank of Nigeria
European Investment Bank: The Creation of a Methodology  to Identify Cyber Security Related Investments
European Investment Bank: The Creation of a Methodology to Identify Cyber Security Related Investments