Cloudfare outage highlights urgent need for Philippine cybersecurity structure, says Villafuertes
At A Glance
- Camarines Sur 5th district Rep. Migz Villafuerte and 2nd district Rep. Luigi Villafuerte pointed to the recent, crippling Cloudflare service outage as potential impetus for the Philippines to come up with its own national cybersecurity structure.
(Unsplash)
Camarines Sur 5th district Rep. Migz Villafuerte and 2nd district Rep. Luigi Villafuerte pointed to the recent, crippling Cloudflare service outage as potential impetus for the Philippines to come up with its own national cybersecurity structure.
The Villafuertes said everyone appears vulnerable to cyber risks, if such disruptions could happen to the likes of Cloudflare, which specializes in online security and claims to manage a hefty 20 percent of global internet traffic.
They gave this warning following a recent hearing of the House Committee on Information and Communications Technology (ICT), wherein the panel tasked a technical working group (TWG) to combine into one comprehensive bill over a dozen cybersecurity and critical information infrastructure protection (CIIP) measures meant to combat the increasingly insidious attacks on cyberspace across the globe.
Reps. Luigi and Migz--who chairs the committee--said the Nov. 18 Cloudflare outage showed the urgent need for action on the matter as far aa the Philippines is concerned. Major websites like social network X (formerly Twitter), Google, and OpenAI (the creator of ChatGPT) were affected by this.
Cloudfare had publicly admitted “a spike in unusual traffic” in one if its services after “a latent bug in a service underpinning our bot mitigation capability started to crash after a routine configuration change we made."
Previously, similar disruptions in online services affected Amazon and Microsoft cloud services.
Migz Villafuerte said that the TWG will draft a consolidated bill: (1) protecting institutions and digital systems from cyberattacks by beefing up the country’s capability to prevent, detect and respond to cyber threats; and (2) safeguard against cyber risks the country’s essential systems, including those in banking and finance, emergency services and disaster response, broadcast media, energy, health, telecommunications and transportation.
“Our committee expects the TWG to hammer out a consolidated bill on a national framework anchored on the adoption of minimum information security standards, to keep our vital sectors secure and resilient against disruptions that could undermine public safety and national stability," he said.
"The task at hand is to preserve data privacy, strengthen digital defenses and ensure safety in our online environment,” he added.
Among the bill up for consolidation is the Villafuertes' very own HB No.2826, which seeks the creation of the National Cybersecurity Agency (NCSA). It will be tasked to craft and carry out a masterplan for building a robust defense infrastructure against cyberattacks.
The proposed NCSA--which shall be under the Department of Information and Communications Technology (DICT)--will also standardize protocols for threat detection, information sharing and incident response, as well as CIIP.
Rep. Luigi said that under HB No.2826, the DICT shall put up a National Computer Emergency Response Team (NCERT). Composed of cybersecurity experts, the NCERT shall respond quickly to cybersecurity incidents of threatened organizations, with the aim of minimizing the damage and ensuring recovery of affected systems.
This NCERT shall establish a liaison network of CERTs or computer emergency response teams among government agencies to support the implementation of the NCERT’s mandate, the deputy majority leader said.