NATIONAL CYBER PROTECTION STRATEGY

1. Establish a National Cybersecurity Center (CIRT / CSIRT)

• Purpose: Central coordination for detecting, analyzing, and responding to malware and cyberattacks.

• Actions:

  • Partner with ITU, ASEAN-CERT, and FIRST for technical training and shared intelligence.

  • Build local capacity in malware analysis, digital forensics, and incident response.

  • Deploy national early warning systems (EWS) for malware and phishing campaigns.

2. Develop a National Cybersecurity Policy & Law

• Align with Personal Data Protection Law (UU PDP) and international standards (ISO 27001, NIST CSF).

• Include mandatory:

  • Breach notification (within 72 hours).

  • Minimum security standards for telecoms, banks, and critical infrastructure.

  • Data sovereignty and cloud-security rules.

3. Public Awareness & Education

• Launch a “Safe Digital Timor” campaign: teaching citizens and small businesses how to identify phishing, malware, and scams.

• Include cybersecurity modules in school and university curricula (e.g., with UNTL, UNPAZ, DIT).