4 4.5 The Role of the Myanmar Computer Emergency Response Team (MMCERT). Cybersecurity is currently managed by a single organisation called the Myanmar Computer Emergency Response Team (MMCERT), under the Ministry of Communications and Information Technology (MCIT). It is unclear how MMCERT will operate under the planned restructure outlined in the Telecoms Master Plan, where it is not mentioned at all. Currently, MMCERT exists to disseminate advice and best practices regarding cyber security, provide technical assistance through workshops and seminars, and to cooperate with law enforcement officials on cyber-crime or security issues. MMCERT maintains a ticketing system for case management of cyber security issues. Users can submit a case report via email. 431 MMCERT posts updates regarding known software security vulnerabilities on their home page (e.g. WordPress, Microsoft, Oracle, etc). Figure 5: Relationship between MMCERT and MCIT Source: International Telecommunications Union (ITU) MMCERT is an operational member of the Asia Pacific Computer Emergency Response Team (APCERT). 432 The purpose of APCERT is to provide coordination among regional computer emergency response teams, develop responses to large-scale security threats and facilitate research and development among APCERT members. MMCERT is also a member of International Multilateral Partnership Against Cyber Threats (IMPACT). 433 Outside of these affiliations, stakeholders in Myanmar’s ICT business community note that MMCERT lacks the “funding, sponsorship, and support” needed to adequately address cyber-security threats in Myanmar’s rapidly evolving ICT sector. Some private 431 MMCERT, “Incident Report” (last accessed September 2015). APCERT defines an operational member as a, “CSIRT [Computer Security Incident Response Team]/ [Computer Emergency Response Team] CERT in the Asia Pacific region, which performs the function of CSIRT/CERT on a full time basis as a leading or national CSIRT/CERT within its own economy.” See: AsiaPacific Computer Emergency Response Team, “Operational Framework” (2009). 433 IMPACT is a partner of the United Nation’s International Telecommunication Union (ITU). The IMPACT/ITU partnership is primarily based on implementing the ITU’s Global Cyber Security Agenda (GCA). 432 186 PAGE CHAPTER 4.5: CYBER-SECURITY