As cyber threats targeting digital platforms of public institutions intensify, Morocco’s Ministry of Digital Transition and Administration Reform has announced the adoption of a “comprehensive approach” to bolster the security of its information systems.
This strategy includes multiple initiatives, such as addressing and correcting platform vulnerabilities, deploying next-generation firewalls, and conducting penetration testing, according to a statement by Minister Amal El Fallah Seghrouchni.
The minister made the remarks in a written response to a parliamentary question regarding the ministry’s compliance with Law 05.20 on cybersecurity. She said the ministry attaches “great importance” to enhancing the security of its systems in line with national guidelines and has developed a strategy based on three core pillars.
The first pillar focuses on preventive and protective measures. These include fixing software and platform vulnerabilities with support from a specialized national consultancy, ensuring all infrastructure components comply with national cybersecurity directives, and enforcing security standards in the procurement or development of new information systems.
Seghrouchni added that her ministry has implemented a digital risk management policy and conducts regular audits and security assessments. A next-generation firewall has been deployed to segment internal trusted networks from external ones, monitoring traffic based on predefined security rules. In addition, intrusion detection (IDS) and prevention systems (IPS) have been installed, and penetration testing is routinely carried out to evaluate system resilience.
The second pillar centers on establishing effective digital governance. This involves activating the role of information systems security officers (RSSI) across public institutions, in accordance with national regulations, and coordinating with relevant authorities in the event of a cyberattack or attempted intrusion.
The third component of the ministry’s approach involves awareness and capacity-building for public employees. The ministry organizes regular cybersecurity awareness sessions in cooperation with the General Directorate for Information Systems Security (DGSSI) and other specialized centers. Cybersecurity has also been integrated into ongoing professional training programs for ministry staff. To complement these efforts, simplified guides on best practices for the safe use of digital tools and email systems have been distributed to civil servants.
Minister Seghrouchni emphasized that the ministry is taking proactive measures to secure its information systems and to enhance cybersecurity awareness among its personnel, as digital threats become increasingly sophisticated and widespread.
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.