The Proposed Website Template Guidelines and Website Migration Plan

(1)

The Proposed Website

Template Guidelines and

Website Migration Plan

Alberto B. Salvador, Jr.

2013 National ICT Summit June 25-26, 2013

(2)

“Establish a persistent online presence with at least basic services in order to build trust in government.”

“Approved and adopted as framework and guide for the computerization of key

frontline and common services and operations of the

government to enhance overall governance and improve the efficiency and effectiveness of the bureaucracy.”

“The State recognizes the vital role of communication and information in nation-building.” - 1987 Philippine Constitution

Offline is not an option Offline is not an option

(3)

“Establish a persistent online presence with at least basic services in order to build trust in government.”

“Approved and adopted as framework and guide for the computerization of key

frontline and common services and operations of the

government to enhance overall governance and improve the efficiency and effectiveness of the bureaucracy.”

“The State recognizes the vital role of communication and information in nation-building.” - 1987 Philippine Constitution

Offline is not an option Offline is not an option

(4)

“1,285 Government Websites Hacked” “1,285 Government Websites Hacked”

1, 157

Govt Websites Defaced 2006 recorded

highest (457)

Sources: PNP - ITMS (Web Services and Cyber Security Division), ICTO, zone-h.org, pastebin, wikipedia and Idefense USA

Sulu-Sabah

Incident

(5)

The Proposed Website Template General Guidelines The Proposed Website Template General Guidelines

(6)

Masthead Banner Auxiliary Menu Content Area Agency Footer Standard Footer Top Bar

Homepage

Basic

Layout

(7)

Banner Masthead

Top Bar

(8)

(9)

Agencies shall adhere to the following main navigation specifications:

(10)

(11)

Agency Footer

(12)

(13)

(14)

The Website Migration Plan The Website Migration Plan

Objective

Aims to ensure the smooth migration of a government website to the

Integrated Government Philippines (iGovPhil) Web Hosting Service

(15)

Migration Compliance Procedures

1. Assessment of a government agency's current website 2. Prioritization (First and Second Priority)

3. Implementation of a Migration Checklist 4. Initial Security and Audit Checks

5. Actual Migration

6. Implementation of a Staging Server

7. Regular Backups, Security and Performance Monitoring 8. Implementation of a trouble-ticketing and feedback system

(16)

For the operations phase

1) Maintain a team of CMS-expert developers that will

continue to develop and produce ‘templates’ as needed to provide updates;

2) Check on potential plug-ins that agencies can adopt;

3) Continuously upgrade to enable a self-service facility in the future; and

4) Maintain a team of security experts that will proactively check on all CMS templates and plug-in’s vulnerabilities, as well as to ensure security of all hosted applications.

(17)

Sustainability of the Initiative

1) Conduct continuous capability building and knowledge exchange conference for our security experts, accredited developers and trainers, and agency web developers.

2) Involve the CMS community in the continuous

development of templates and continuous evaluation of plug-ins as well as to ensure continuous supply of

manpower for the pool.

3) Create a team of network security experts from the

private sector and the academe that will collaboratively work in case of an attack; and devise an incentive

(18)

Website Template and Migration Plan Documents Website Template and Migration Plan Documents

(19)

Maraming

salamat po.

ALBERTO B. SALVADOR, JR.

Policies and Standards Office National Computer Center DOST ICT Office NCC-ICTO Building Carlos P. Garcia Avenue U.P. Campus, Diliman, Q.C. Phone: (+632) 920-0101 E-Mail: [email protected] [email protected]