Philippines Urged to Strengthen Cybersecurity Education and Infrastructure

September 9, 2024

The Filipino government faces an urgent call to enhance its cybersecurity education and infrastructure. As the digital age progresses, the need for robust cybersecurity measures becomes more critical. With increasing cyberattacks and the country’s desire to attract foreign investment, solidifying cybersecurity systems is essential. The landscape of cyber threats is growing more complex and pervasive, posing significant challenges to national security and economic stability. Therefore, building a resilient cybersecurity infrastructure is not just a technological necessity but a strategic imperative for the Philippines.

Educational Reform and Talent Development

Integrating cybersecurity into university curriculums is a pressing need. Dominic Vincent D. Ligot, founder of Cirrolytix, emphasizes that practical knowledge in cybersecurity primarily resides with industry professionals. Therefore, academic institutions must collaborate with these experts to develop comprehensive cybersecurity programs that prepare students for real-world challenges. The absence of formal education channels dedicated to cybersecurity leaves aspiring professionals without a clear pathway to gain the necessary skills and knowledge. By embedding cybersecurity in higher education, universities can create a well-rounded curriculum that bridges theoretical knowledge and practical expertise, fostering a new generation of adept cybersecurity professionals.

Most Filipino cybersecurity experts currently train outside traditional educational settings, often through corporate-sponsored programs. These privately funded initiatives, while beneficial, create disparities in accessibility and consistency. A shift toward institutionalized education is crucial for developing a standardized baseline of cybersecurity knowledge across the country. Inconsistent training programs can lead to gaps in understanding and preparedness, posing a risk to the nation’s cyber defenses. Relying on corporate-sponsored training also means that access to essential education may be restricted to a fortunate few, leaving the broader population at a disadvantage.

Compensation differences between the private and public sectors further complicate talent retention in cybersecurity. While private sector experts can earn up to PHP 200,000 per month, their government counterparts make around PHP 50,000. This significant wage gap pushes many skilled professionals toward better-paying opportunities abroad, depleting the local talent pool and weakening national cybersecurity defenses. The government must address these disparities to retain top talent. Incentives such as competitive salaries, career development opportunities, and attractive benefits could help retain skilled cybersecurity professionals, ensuring that the public sector remains a viable and rewarding career path.

Certification and Training Programs

Global certification programs offer a pathway to enhancing the credibility and skills of Filipino cybersecurity professionals. Allan S. Cabanlong, Regional Director for Southeast Asia at the Global Forum on Cyber Expertise, advocates for these certifications. Aligning qualifications with international standards can help retain talent within the country by providing globally recognized credentials. These programs not only elevate the professional standing of individuals but also ensure that they possess up-to-date knowledge and skills that meet global benchmarks. Certified professionals are better equipped to navigate the ever-evolving landscape of cyber threats, making them valuable assets in national and international cybersecurity initiatives.

Collaboration between the government and the private sector is essential for institutionalizing digital literacy from basic to secondary education levels. Ronald B. Gustilo, National Campaigner for Digital Pinoys, suggests that early education can ignite student interest in cybersecurity careers. By establishing a pipeline of future professionals, the Philippines can build a robust foundation of cybersecurity expertise. Introducing cybersecurity concepts at an early age can demystify the field and inspire students to pursue careers in this critical area. Schools can incorporate hands-on activities, competitions, and workshops to engage students and help them develop fundamental skills in cybersecurity.

Infrastructure and Enforcement

Developing robust cybersecurity infrastructure is vital for attracting foreign investments. Dominic Vincent D. Ligot points out that a lack of solid infrastructure makes other countries more attractive to investors. Therefore, enhancing enforcement mechanisms and demonstrating resilience against cyber threats are critical steps for the Philippines. An effective cybersecurity infrastructure serves as a deterrent to cybercriminals and reassures potential investors that their interests will be protected. Strong enforcement mechanisms, including regular audits, incident response protocols, and stringent penalties for cybercrimes, can help establish a secure environment conducive to economic growth and development.

There is a need for legislative support to ensure that national budgets include provisions for cybersecurity enhancements. Ronald B. Gustilo calls upon Congress to allocate adequate funds and implement strict clauses to prevent the misallocation of these resources. Continuous replenishment of the budget is necessary to maintain and upgrade the cybersecurity defenses of government agencies. Legislative measures can establish a framework for sustained investment in cybersecurity infrastructure, ensuring that government departments have the resources they need to keep up with emerging threats. Proper allocation and oversight of funds can prevent mismanagement and ensure that investments are directed toward critical areas that enhance national security.

Challenges and Risks

The cybersecurity skills gap poses a significant risk. According to the Fortinet 2024 Global Cybersecurity Skills Gap Report, 77% of organizations in the Philippines acknowledge the shortage of skills as a critical threat. Moreover, 94% have reported breaches in the past year, underscoring the urgent need to address this gap. The shortage of skilled professionals leaves organizations vulnerable to cyberattacks and compromises their ability to defend against sophisticated threats. Addressing the skills gap requires a concerted effort to enhance education, training, and professional development opportunities, ensuring a steady supply of qualified cybersecurity experts.

Board-level focus on cybersecurity has increased, with 80% of directors prioritizing security more than ever before. However, finding candidates with technology-focused certifications remains challenging. Despite the fact that 98% of decision-makers are willing to finance employee certifications, the shortage of qualified candidates hinders progress. Organizations must adopt innovative recruitment strategies, including offering internal training programs, partnerships with educational institutions, and incentives for certification attainment. By investing in the professional development of their workforce, organizations can build a robust team of cybersecurity experts capable of addressing evolving threats and safeguarding critical assets.

Diversifying recruitment pools is an emerging strategy for filling cybersecurity roles. Organizations are beginning to hire candidates without traditional cybersecurity backgrounds, offering certifications and training to bridge knowledge gaps. This approach hopes to attract new talent and effectively address open positions. By recognizing the transferable skills and potential of candidates from diverse fields, organizations can tap into a broader talent pool. Providing targeted training and certification programs can equip these candidates with the necessary skills to thrive in cybersecurity roles, fostering a dynamic and inclusive workforce capable of tackling complex challenges.

International Partnerships and Best Practices

Collaborations with countries like Israel can significantly enhance the Philippines’ cybersecurity capabilities. Israel’s Ambassador to the Philippines, Ilan Fluss, and Tomer Heyvi, head of Israel’s economic mission, highlight their country’s strong expertise in cybersecurity. Leveraging Israel’s military-grade cybersecurity knowledge can provide valuable insights and support to the Philippines. Israel’s experience in dealing with advanced cyber threats and its focus on innovation and research can offer the Philippines effective strategies and technologies to bolster its defenses. Joint initiatives, knowledge-sharing sessions, and collaborative projects can help the Philippines elevate its cybersecurity posture.

Investing in tech accelerators can nurture local talent and innovation. Dotan Sagi, CEO of Israeli software development company Cinten, recommends that the Philippines invest in such hubs. These accelerators can provide essential coding, innovation, and “tech way of thinking” skills, fostering a vibrant ecosystem of cybersecurity professionals and startups. Tech accelerators play a crucial role in fostering innovation, offering mentorship, funding, and resources to budding entrepreneurs and tech enthusiasts. By creating an environment that encourages creativity and experimentation, these hubs can produce innovative solutions and startups that contribute to the nation’s cybersecurity landscape.

Policy and Strategic Measures

The National Cybersecurity Plan (NCSP) 2023-2028, adopted by President Ferdinand R. Marcos Jr., provides a strategic roadmap for securing cyberspace. This comprehensive plan outlines operational guidelines and policy directions, including amendments to the Cloud First Policy, emphasizing data security and prioritizing cloud solutions for government entities. The NCSP aims to create a holistic approach to cybersecurity, addressing the needs of various sectors and promoting a culture of security awareness and best practices. By setting clear objectives and measurable goals, the plan seeks to enhance the country’s cybersecurity resilience and readiness.

Project SONAR, an initiative by the Department of Information and Communications Technology (DICT), actively scans online assets for vulnerabilities. By identifying and addressing over 30,000 vulnerabilities so far, this proactive approach aims to mitigate risks before they can be exploited by malicious actors. Regular and comprehensive security assessments, threat intelligence sharing, and timely remediation efforts are essential components of an effective cybersecurity strategy. Project SONAR represents a critical step toward a more secure digital environment, showcasing the government’s commitment to safeguarding national assets and critical infrastructure.

Rising Cyber Threats

The frequency of cyberattacks in the Philippines is escalating. In the first quarter of 2024 alone, there were 282 cyberattacks against government organizations, with a commendable 90% resolution rate. Additionally, 811 early-stage hacking attempts were detected and neutralized, highlighting the persistent threat landscape. The increasing sophistication and volume of cyber threats emphasize the need for continuous vigilance, advanced detection mechanisms, and swift incident response capabilities. Ensuring that government agencies are well-prepared to handle cyber incidents is crucial for maintaining public trust and national security.

Critical infrastructure remains a prime target for cybercriminals. Agencies such as the Department of Transportation, the National Economic Development Authority, and the Philippine National Police-Information Technology Management Service are frequently targeted. Protecting these vital sectors requires a comprehensive approach that includes robust defenses, regular testing, and collaboration between public and private entities. Strengthening the cybersecurity posture of critical infrastructure is essential for ensuring the continuity of essential services and protecting the nation’s economic and social well-being.

Economic Implications

The Filipino government is under growing pressure to bolster its cybersecurity education and infrastructure. In today’s digital era, the importance of strong cybersecurity measures cannot be overstated. With cyberattacks on the rise and the Philippines aiming to attract more foreign investment, reinforcing cybersecurity systems is crucial. The landscape of cyber threats is becoming increasingly intricate and widespread, bringing significant risks to both national security and economic stability.

In the face of these challenges, the establishment of a resilient cybersecurity infrastructure transcends being a mere technological requirement; it becomes a strategic necessity for the nation’s future. As cyber threats evolve, the country’s defenses must keep pace to protect sensitive information and maintain public trust. Investing in comprehensive cybersecurity education will help cultivate a workforce capable of combating these threats effectively.

Moreover, solid cybersecurity is essential for fostering a secure business environment, encouraging international investments, and ensuring sustained economic growth. The government’s commitment to enhancing its cybersecurity framework will not only safeguard its digital landscape but also empower its citizens and businesses to operate securely in an increasingly interconnected world. This proactive approach will position the Philippines as a leader in cybersecurity readiness, supporting both national interests and global partnerships.

Subscribe to our weekly news digest.

Join now and become a part of our fast-growing community.

Invalid Email Address
Thanks for Subscribing!
We'll be sending you our best soon!
Something went wrong, please try again later