If you want to learn more on the Government IT Security Policy and Guidelines

Baseline IT Security Policy (S17)

This document outlines the mandatory minimum security requirements for the protection of government’s information systems and data assets.
PDF version[PDF version] HTML version[HTML version]
(Note: If there is any inconsistency or ambiguity between the PDF version and the HTML version, the PDF version shall prevail.)

IT Security Guidelines (G3)

This document elaborates on the policy requirements and sets the implementation standard on the security requirements specified in the Baseline IT Security Policy.
PDF version[PDF version] HTML version[HTML version]
(Note: If there is any inconsistency or ambiguity between the PDF version and the HTML version, the PDF version shall prevail.)

Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)

This document provides the practical guidance and reference for security risk assessment & audit in the Government.
PDF version[PDF version]

Practice Guide for Information Security Incident Handling (ISPG-SM02)

This document provides the practical guidance and reference for handling information security incidents in the Government.
PDF version[PDF version]

Practice Guide for Mobile Security (ISPG-SM03)

This document provides the practical guidance and reference for the secure use of mobile devices and development of mobile apps in the Government.
PDF version[PDF version]

Practice Guide for Cloud Computing Security (ISPG-SM04)

This document provides the practical guidance and reference for the secure adoption of cloud computing technology in the Government.
PDF version[PDF version]




If you are a service provider for the Government

Baseline IT Security Policy (S17)

This document outlines the mandatory minimum security requirements for the protection of government’s information systems and data assets.
PDF version[PDF version] HTML version[HTML version]
(Note: If there is any inconsistency or ambiguity between the PDF version and the HTML version, the PDF version shall prevail.)

IT Security Guidelines (G3)

This document elaborates on the policy requirements and sets the implementation standard on the security requirements specified in the Baseline IT Security Policy.
PDF version[PDF version] HTML version[HTML version]
(Note: If there is any inconsistency or ambiguity between the PDF version and the HTML version, the PDF version shall prevail.)

Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)

This document provides the practical guidance and reference for security risk assessment & audit in the Government.
PDF version[PDF version]

Practice Guide for Information Security Incident Handling (ISPG-SM02)

This document provides the practical guidance and reference for handling information security incidents in the Government.
PDF version[PDF version]

Practice Guide for Mobile Security (ISPG-SM03)

This document provides the practical guidance and reference for the secure use of mobile devices and development of mobile apps in the Government.
PDF version[PDF version]

Practice Guide for Cloud Computing Security (ISPG-SM04)

This document provides the practical guidance and reference for the secure adoption of cloud computing technology in the Government.
PDF version[PDF version]

The HKSARG Interoperability Framework

PDF version[PDF version]

ICT Solution List – Registration / Information Update Form

HTML version[HTML version]




If you want to learn how to protect your computers at home, at school, or at office



If you want to explore further on information and cyber security



If you want to protect your computers from malware infection and ransomware attacks



If you want to report an information security incident


Seek assistance or report an information security incident to the Hong Kong Computer Emergency Response Team Coordination Centre
Tel: 8105 6060, Fax: 8105 9760
Email address: hkcert@hkcert.org
Contact through website: https://www.hkcert.org/contact-us


Report a cyber crime to the Cyber Security and Technology Crime Bureau of the Hong Kong Police
Tel: 2860 5012
e-Report Centre: https://secure1.info.gov.hk/police/eforms/report_cyber_crime_en.php






 

Government Website



CERT Community