Government , Industry Specific , Standards, Regulations & Compliance

The Philippines' New Cybersecurity Plan and Cloud Security

The Philippines plans to introduce a national cybersecurity plan later this year. What expectations do security practitioners have, and what changes would they like to see? Joey Fontiveros of the Philippine Army Signal Regiment shares his views on the plan and its impact on cloud security.

See Also: Making Sense of FedRAMP and StateRAMP

"As more organizations in the Philippines move their operations into the cloud, it is crucial that the new cybersecurity plan includes provisions for cloud security," Fontiveros said. "The plan should outline a cloud security framework that must include guidelines for cloud service providers and customers to ensure confidentiality and availability of data."

"We also need to ensure the implementation of more proactive risk assessment in management," he added. "We also need to see proper identity and access management in the cloud. The plan should address access control and identify the management of cloud-based systems."

In this video interview with Information Security Media Group, Fontiveros discusses:

• The issues the national cybersecurity plan will address;
• The changes he wants to see in the new plan;
• Why an emphasis on cloud security is an important part of the plan.

Fontiveros, who is well-known for his experience in cybersecurity, brings that expertise to the Philippine Army. He joined the Army Signal Regiment in April 2022 and has 28 years of service in the army.