Office of the Prime Minister Policy document CIMU P 0011:2002 Version: 1.0 Effective date: 30.07.2002 Connectivity to MAGNET (Malta Government Network) Policy 1. Policy statement i) General The MAGNET is a mission critical component, acting as an ICT Backbone, connecting together the different Information Systems across the whole of the Government of Malta (the Government). To this effect, the Government intends to utilise the MAGNET, as its ICT Backbone for networking and consequently: (i) obligates Public Sector entities to connect to the MAGNET and (ii) gives confidence and encourages Maltese registered - non Public Sector entities located in Malta, to make mandatory use of the MAGNET as the Maltese Information Highway, through which any such entity shall interconnect. Connectivity to the MAGNET shall be granted primarily in instances were an entity requires to conduct business in electronic form with the Government, primarily for the purposes of the e-government initiatives. The (CIMU) is the sole Government regulatory body empowered to issue, certify and revise e-government connectivity requests, standards and compliance mechanisms. It is Policy that any entity seeking to connect to the MAGNET and thereby utilise resources already connected to the MAGNET, must seek explicit authorisation from the business owners of such resource prior to seeking a connection with the MAGNET. At all times, the Government will retain governance on any connection in operation. Thus, (i) any connection either established or in the process of being established, must conform and operate with the Laws of Malta and any regulations and/or standards issued by relevant statutory organisations; (ii) every entity is responsible to secure it s own network and conform to security policies, standards and directives issued by the Government that are applicable to any connection and information being transmitted through such connection. Page 1
ii) Implementation The prime target population are all entities in the Public Sector. Any Maltese entity located in Malta can apply for connectivity to MAGNET on a G2B basis 1. In order to maintain governance upon connections established, every such connection must be registered with the CIMU. The following are the key principles underpinning connectivity to the MAGNET: (i) to define service levels, (ii) to secure and protect, (iii) to operate within a defined Architecture, with access anytime and anywhere, (iv) to operate in conformity with the Laws of Malta and regulations by statutory bodies. Elements of (ii) and (iii) above are subject to the respective entity s connectivity needs. iii) Policy violations Connections not operated according to this Policy shall be suspended from operation and than terminated depending on the outcome of audits. 2. Purpose This Policy primarily provides direction and subsequently defines the characteristics that will govern connectivity to the MAGNET by any entity in connection with the e- Government programme. The primary objectives of this Policy are to ensure that Connectivity to the MAGNET is provided in a secure and cost effective manner. This Policy, and supporting documents, are based on the directives of circular; OPM/463/99 Exploiting the e-government Initiative, dated 7 August 2001. 3. Who should know this Policy Knowledge of this Policy should extend up and down the organisations concerned and be wide spread within them. CIMU Head CIMU Communications Officer Ministry for Justice and Local Government Head of Agent Head of Public Sector entity Directors (Office of Review) 1 For the purpose of this Policy, all entities connected to the MAGNET will be referred to under one common name; Public Sector entities. Page 2
4. Scope of applicability This Policy applies to all new connection requests by Public Sector entities as from the date this Policy comes into force. Current connections in operation will be required to comply with the provisions of this Policy within 1 year as from the date this Policy comes into force. The Policy and supporting documents issued prior to this release, governing Connections to the MAGNET by Public Sector Public Sector entities alone are now superseded by this Policy and supporting documents. 5. Definitions Agent the entity that has a mandate to provide a service to the Government of Malta. Connectivity - the provision of data communication technologies and systems to satisfy the transmission of data between two networks. Entity - any Maltese registered - non Public Service - organisation, formally established to achieve a mission. G2B - (Government to Business) is defined as one form of relationship within the e- Government context. Head of Public Sector entity - the person responsible with the headship of the department or entity in scope of the connection to the MAGNET. Internet - a global network connecting millions of computers. MAGNET - the Government of Malta network connecting all computers and networking systems together for the conduct of the Government of Malta business operations. Network - a group of two or more computer systems linked together. Service Level Agreement (SLA) - is a contractual obligation between CIMU and Agent, which stipulates and commits the Agent to a required level of service. An SLA should contain a numerically quantified level of service, support options, enforcement or penalty provisions for services not provided, a guaranteed level of system performance as relates to downtime or uptime, what software or hardware will be provided and for what fee, if applicable. Page 3
6. Roles and responsibilities For the purpose of this Policy, the following roles and succinct responsibilities have been identified. 1. CIMU 1. to promote the MAGNET as an Information Highway, 2. to maintain this Policy, 3. to accept and subsequent vet connection requests, 4. to define service level agreements, numerically quantified and publicly available, 5. to audit for compliance. 2. CIMU Communications Officer 6. to publish this Policy 3. Head of Agent 7. to instigate documented internal procedures that fully implement this Policy, 8. to establish authorised connections and subsequently operate them according to this Policy. 4. Head of Public Sector entity 1. to accept and subsequently consider requests for access to resources under direct responsibility. 2. to comply with the provisions found in this document. 7. Supporting Documents In support to this Policy, the following Standard and Directive will be issued: 1. Connectivity to MAGNET Standard. 2. Connectivity to MAGNET Directive. 8. References 1. Acts and Regulation a. Telecommunications Act http://www.justice.gov.mt b. Communications Authority Act http://www.justice.gov.mt c. Code of Practice for Internet Service Providers http://www.mca.org.mt Page 4
9. Modification history Version Date Changes 1.0 30.07.2002 Initial Release 10. Maintenance and review timetable Maintenance of this Policy is set for six months after the initial release as indicated in the effective date. Subsequent maintenance to this Policy will be based on a twelve month cycle. <Signature and stamp> Joseph R Grima Permanent Secretary, Office of the Prime Minister Page 5