Delgado, A. D. (2017). Development of an information security awareness evaluation and certification system for the Philippine National Police (Unpublished master's thesis). Public Management Development Program, Development Academy of the Philippines.

Public Management Development Program Middle Managers Class Batch 11 Thesis (MMC)--Development Academy of the Philippines.

In conformance to existing laws, particularly the Republic Act No. 10173 or the Data Privacy Act of 2012 and other initiatives of the government that aim to protect the national cyber space, the PNP has crafted PNP Memorandum Circular 2016-013 entitled "PNP Information Assurance (IA) Policy". It establishes governance and guidelines that ensure to protect the confidentiality, integrity, and availability of PNP data and information resources. It also defines the need for guidelines that would ensure the authenticity and non-repudiation of information, as well as the non-disruption of critical services that are vital in achieving the mandate of the PNP organization and its subordinate offices or units. Section 6.d of the PNP IA Policy recognizes that "humans are the weakest link in Information Security". It is therefore important that "all PNP personnel are required to undergo the Information Security Awareness Evaluation and Certification (ISAEC) Program". As a component of the IA Policy, the ISAEC Program will ensure that all PNP personnel are properly assessed prior designation to important position that requires holding of or access to vital information which may concern national interest, sensitive operations of the PNP, or individuals whose privacy should be protected as required by existing laws. To realize the vision of the PNP IA Policy, this project has produced a web-based software application that can be used to conduct nationwide assessments particularly in determining the level of information security awareness of all PNP personnel. Through this web-based Online Testing Platform (OTP), the requirement of the ISAEC Program, as stated in the PNP IA Policy, can be conducted without requiring massive manpower deployment to regional and/or provincial areas, and the results can be achieved in a short period of time. As an added value, the ISAEC's OTP was also designed as a generic platform that can cater other online examination requirements of other PNP offices/units. Being an internal system for the PNP, the ISAEC System is not expected to bring direct and immediate benefits to the citizens. However, it is intended as a support tool in ensuring the effectiveness of the PNP organization particularly in the handling and management of information assets and infrastructure that are essential in the delivery of police services to the citizenry. Indeed, the ISAEC System is the embodiment of the PNP's motto, "TO SERVE AND PROTECT", because it will pave the way for the institutionalization of the actual practice of providing protection to information that are vital to the delivery of public safety and law enforcement service to the citizenry.