Recent cyber-attacks in South Africa have demonstrated how
vulnerable South Africa is to cybercrimes. Trends have shown that
the public sector in South Africa has experienced a large volume of
cyber incidents. This does not come as a surprise given the vast
amount of data and information processed in the public sector. The
Directive on Public Service Information
Security, which was issued in terms of the Public Service Act, 1994
under regulation 94 of the Public Service Regulations, is therefore
a much-welcomed policy for the public sector.
The directive primarily seeks to give guidance on information
security governance principles, practices, and procedures to
safeguard technology assets in the public sector. It applies to all
national and provincial departments, government components, and
employees employed in terms of the Act.
