LIST: The Marcos administration’s cybersecurity efforts

The Department of Information and Communications Technology (DICT) under President Ferdinand Marcos Jr.’s administration developed the second iteration of the National Cybersecurity Plan (NCSP).

This plan aims to address the country’s growing vulnerability to cyber threats and achieve the following outcomes by the end of Marcos’ term in 2028:

• Proactive protection and security of national cyberspace
• Increased workforce capability
• Strengthened policy framework

According to the DICT, the plan aligns with the country’s Development Plan, National Security Strategy, National Cybercrime Strategy, and other cybersecurity strategies by national government agencies. On April 6, 2024, Marcos officially gave the green light to carry out the plan and adopted it through Executive Order No. 58. 

Below are the government efforts listed under the NCSP.

Protection and Programs

1. National Fiber Backbone (NFB): A high-speed, government-owned nationwide broadband network. This allows the recalibration of Government Network (GovNet) infrastructure security and unites all national and local government agencies into one Wide Area Network (WAN).

The initiative began rolling out its initial phase in 2023 and launched Phase 1 of the Mindanao Integrated Government Network last June.

2. National government cloud platform: It will be used for storing confidential government data in close coordination with the Department of National Defense (DND), Armed Forces of the Philippines (AFP), and Philippine National Police (PNP) to secure the physical internetwork of GovNet and the NFB. It also includes the landing stations and submarine cable systems.

The DICT kickstarted its Cloud First Policy in 2017 and has built on it ever since. In 2024, the e-GovCloud initiative hosted 1,277 government systems.

3. Strengthened National Computer Emergency Response Team (NCERT) and Modernized National Security Operations Center (NSOC): On April 7, 60 more agencies were onboarded as part of the national plan. This expands the operation’s coverage nationwide. 

These teams would handle incident response, investigation, government Vulnerability Assessment and Penetration Testing (VAPT) services, threat monitoring and hunting, malware analysis, and threat advisories.  A centralized system accessible by other agencies would also be in place to delegate incident tickets for monitoring.

4. National cybersecurity threat database: An accessible database that categorizes threats and is uploadable to cybersecurity defense systems. In 2024, the DICT said NSOC monitors over two million cyber threats per day. However, as of writing, the database is not yet publicly accessible.

5. Partnerships with Public Telecommunication Entities (PTEs) and Internet Service Providers (ISPs): The DICT, National Telecommunications Commission (NTC), and telecom providers would establish reporting protocols to assist in security countermeasures to detect threats and malicious activities early and combat malware outbreaks.

Major telecommunications companies, such as Globe Telecom, Smart Communications, PLDT, Converge ICT Solutions Incorporated, Infinivan, and PT&T, have begun their partnership with the DICT in 2025. This laid the groundwork for the nationwide rollout of the Protective Domain Name System (PDNS), which scans DNS queries in real time and blocks access to dangerous websites, including those used for phishing, malware, and the spread of fake news.

6. Misinformation combat: On April 14, the DICT partnered with the Presidential Communications Office and the Department of Justice to launch “Oplan Kontra Fake News,” an inter-agency framework designed to curb the spread of disinformation and AI-generated deepfakes.

7. National Cybersecurity Intelligence Fusion Center: The plan looks to establish a nationwide network of CERTs with clearly defined roles and a new incident response model. The NCSP detailed a new workflow and hierarchical model, with the DICT NCERT and the Defense CERT as top command.

As of July, the DICT partnered with the Korea International Cooperation Agency to build a physical cybersecurity center in Valenzuela. 

8. Securing submarine cable infrastructure: The DICT will coordinate with government agencies such as the Philippine Coast Guard (PCG) to develop a map of all cables and them to prevent damage due to theft, anchorage, earthquakes, and major climate disturbances.

Earlier this year, the DICT partnered with Australia’s Cable Connectivity and Resilience Centre to develop a framework to protect the country’s subsea cables and submitted the analysis to Marcos. Telco companies PLDT, Globe, and Converge also joined the agency to plan a cable system that will loop around the country, which may be completed in 24 months.

9. Bilateral and multilateral international cooperation: The plan looks to expand existing agreements with the Association of Southeast Asian Nations, the United Nations, Interpol, and other bilateral agreements with other countries.

The country has partnered with Korea to build a cybersecurity center. It also had a Cyber-Digital Policy dialogue with the United States in 2024 to strengthen both countries’ ICT, their resilience to cybersecurity threats, and the growth of the digital economy.

Workforce and Education

1. October as Cybersecurity Awareness Month: On October 2, 2023, Marcos signed Proclamation No. 353, changing the commemoration of Cybersecurity Awareness Month from September to October. This coincides with the international cybersecurity month celebrations.

2. ICT Academy: The ICT Literacy and Competency Development Bureau (ILCDB) was upgraded to ICT Academy on October 1 to develop a highly skilled workforce capable of addressing cybersecurity challenges. It would also engage with research initiatives and collaborate with industry partners, government agencies, and international bodies to ensure a globally accepted approach.

3. Cybersecurity jobs in government: The DICT would collaborate with the Department of Budget and Management (DBM) and the Civil Service Commission (CSC) to create official job titles, hiring qualifications, and specialized exams for cybersecurity career service positions in the government.

Under the Implementing Rules and Regulations (IRR) of Republic Act No. 12254, signed on March 24, the three agencies were required to develop guidelines establishing specialized cybersecurity positions across all national agencies, including local governments, state universities and colleges (SUCs), and government-owned or controlled corporations.

4. Partnerships with local and international training providers: The department would work with private industry leaders to create online short courses that would be internationally recognized and certified.

It has already secured a multi-year deal with Google to enhance the country’s cybersecurity defense. The partnership would train public servants to use Gemini Enterprise and Google Workspace, with the end goal of training 200,000 people nationwide over the next 18 months.

5. Cybersecurity programs and scholarships: The Commission on Higher Education  (CHED) and SUCs are encouraged to develop cybersecurity degree programs. The DICT would also partner with TESDA in creating National Certification in various cybersecurity skills. These programs would also be included in partial and full scholarships.

In 2019, CHED has already listed cybersecurity as one of the priority courses for scholarship programs under Memorandum Order No. 5, s. 2019. As of writing, some universities offer cybersecurity programs, including Mapúa University, De La Salle-College of Saint Benilde, and Lyceum of the Philippines University.

6. National and international hacking competitions: The DICT would organize regional and national hacking competitions where winners would take part in international competitions. The agency would also build a network of experts, resource persons, and trainers.

The DICT kicked off HackForGov in 2019, an annual nationwide cybersecurity competition. It has become an annual competition since then, with different regions hosting the event. Winners would eventually represent the country in the annual Cyber SEA Game.

Policies

1. Strengthening National Cybersecurity Inter-Agency Committee: Marcos has reinforced the established committee, created under E.O. 189, s. 2015. The committee would serve as a convergence hub of different government agencies and the main forum for information sharing, planning, and ensuring policies don’t conflict with other interests.

The President has then mandated the DICT to submit biannual implementation reports on national cyber policies.

2. Executive Order on Critical Infrastructure and Critical Information Infrastructure: E.O. 119, s. 2026 updated government data classification, and the framework for data security. This covers all digital or hybrid government-owned data, including private service providers that handle government data.

3. Mandatory security labelling of devices: The plan looks to require routers and switches sold in the market to be labeled to inform the public about the security of the products.

4. Revision on VAPT service providers’ accreditation: The DICT revised the existing accreditation of VAPT service providers last January under Department Circular No. HRA-001, s. 2026. The revisions would add customer feedback through complaint mechanisms and train service providers on managing them.

5. Establish policies, guidelines, and procedures on network security systems: The DICT would partner with the Department of Trade and Industry (DTI), Department of Science and Technology, the academe, and industry partners to develop network security system protocols.

The agency has already released Department Circular No. 003, s. 2024, mandating all government agencies to adhere to security measures and response protocols. This also includes rerouting internet traffic to DICT-managed PDNS, automated vulnerability scans, and sharing information with the NSOC.

6. Minimum cybersecurity standards: Under Republic Act NO. 12254, the DICT was prescribed to implement minimum information security standards for government systems. In March 2026, an IRR was issued requiring all government agencies to comply.

7. Legislative Agenda and Enactments: The DICT would endorse key legislative measures to Congress to resolve economic challenges, information asymmetry, and establish legal cybersecurity protections. In 2026, the House of Representatives approved on third and final reading House Bill No. 9605, or the proposed “National Cybersecurity and Critical Information Infrastructure Protection Act of 2026.”

The bill is aligned with the administration’s Digital Transformation Framework and seeks to establish mandatory cybersecurity standards and certification systems, ensuring consistent defense protocols for public and private sectors. – Rappler.com