The KEDA ICT Security Policy (DKICT) Version 3.0, which came into effect on 3 January 2021, was formulated to ensure that the management and use of Information and Communication Technology (ICT) assets at the Kedah Regional Development Authority (KEDA) are carried out in a secure, controlled, and effective manner, in line with the MAMPU ICT Security Policy.This policy aims to ensure the continuity of KEDA’s operations by minimising the risks and impacts of ICT security incidents, while protecting the confidentiality, integrity, availability, and authenticity of information and systems in use. The scope of the KEDA DKICT covers all ICT assets, including hardware, software, services, data, information, human resources, and premises that support KEDA’s operations.The KEDA DKICT establishes ICT security principles, governance structures, as well as the roles and responsibilities of management, ICT officers, users, and third parties. It also encompasses requirements for physical, logical, and administrative security controls, risk management, ICT security incident handling, and compliance with applicable laws and standards.Implementation and compliance with the KEDA DKICT are mandatory for all KEDA personnel and stakeholders. This policy will be reviewed periodically to ensure that it remains relevant, effective, and aligned with technological advancements and current security requirements.
Download: KEDA ICT Security Policy (DKICT) Version 3.0