My bookmarksSign up free

RA 12254 CHAPTER III

Section 8–15 · 8 provisions

Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails.Read the official text ↗

E-Government Master Plan.

Section 8

SEC. 8. E-Government Master Plan. - The DICT shall formulate and promote an E-Government Master Plan (EGMP) or its equivalent that will serve as a blueprint for the development and enhancements of all electronic govenrment service processes and workforce to achieve digital transformation in the bureaucracy, taking into consideration the Philippine Development Plan. An integrated framework shall be developed to provide the government enterprise architecture and operationalize the blueprint through programs and projects relating to E-Government, to fully realize the vision, goals, and objectives of the EGMP. The EGMP and the accompanying integrated framework shall be reviewed and upgrade every three (3) years or earlier as the need arises, in anticipation of disruptions, emergencies, crises, and new and emerging technologies. To effectively implement E-Governance across the government, a whole-of-government approach shall be adopted for the formulation and promotion of the EGMP. This approach shall facilitate engagement primarily with government agencies, instrumentalities, GOCCs, LGUs, Regional Development Councils, ICT Councils, technical and standards organizations, and other relevant stakeholders to ensure the full and effective implementation of the country's E-Governance Agenda. All E-Government Programs identified herein and, in the future, as well as in the ISSP of each government entity, shall be subject to mandatory monitoring by the DICT for alignment with the EGMP and its integrated framework.

E-Government Programs (EGP).

Section 9

SEC. 9. E-Government Programs (EGP). - The DICT, in coordination with relevant government agencies, shall develop the following programs and systems that will be regularly updated in consultation with stakeholders; and ensure that such programs and systems are compliant with standards imposed by relevant laws, rules, and regulations relating to data privacy and security, including, but not limited to, Republic Act No. 10173 or the "Data Privacy Act of 2012": (a) Citizen Frontline Delivery Service Platforms (CFDSP). - Services that are need to facilitate business and non-business transactions on permitting, licensing, and the issuance of any privilege, right, reward, clearance, authorization, or concession, including frontline services enrolled in the existing citizens' charter, corresponding back-end support services, and regulatory functions shall be made efficient by integrating all agencies involved, such as the Philippine Statistics Authority (PSA), Department of Foreign Affairs (DFA), Land Transportation Office (LTO), Land Transportation Franchising and Regulatory Board (LTFRB), National Bureau of Investigation (NBI), Professional Regulation Commission (PRC), Department of Trade and Industry (DTI), Securities and Exchange Commission (SEC), Bangko Sentral ng Pilipinas (BSP), Cooperative Development Authority (CDA), Bureau of Internal Revenue (BIR), Government Service Insurance System (GSIS), Social Security System (SSS), Home Development Mutual Fund (HMDF) or the PAG-IBIG Fund, and Philippine Health Insurance Corporation (PhilHealth), into one platform, made available in the form of a portal, mobile application, and/or other applicable variations thereof. All other government agencies, offices, and instrumentalities, including LGUs which provide frontline services, as defined under Republic Act No. 9485 or the "Anti-Red Tape Act of 2007", as amended, shall file an application for integration with the DICT. All agencies, offices, and instrumentalities that will be integrated shall establish and maintain measures to ensure that such services re accessible and capable of delivery to the public through the platform; (b) Electronic Local Government Unit (eLGU) System. - In compliance with Section 9(g), LGU shall establish their own portal or utilize the eLGU system developed by the DICT and its equivalent programs and systems: Provided, That LGUs unable to establish their own systems within one (1) year from the effectivity of this Act are mandated to utilized the eLGU or equivalent programs and systems: Provided, further, That LGUs establishing their own portal or those with exiting portals shall immediately be connected by the DICT: Provided, finally, That the eLGU software or equivalent, including its necessary infrastructure, shall likewise be provided by the DICT for the effective use of the eLGU to the unserved and underserved municipalities; (c) Government Digital Payment Systems for Collection and Disbursement. - An electronic payment facility and gateway that will enable citizens and businesses to remit and receive payments electronically to or from govenrment agencies shall be created. It shall render services through various delivery channels, which include debit instructions (ATM account), credit instructions (credit cards), and mobile wallets (mobile application/SMS). For this purpose, the government may, in accordance wit applicable laws and rules, engage the services of, and interconnect with, public and private payment systems and facilities, among others, consistent with the National Retail Payment System Framework of the BSP. These systems should interface smoothly with the current monitoring and accounting systems of the National Treasury; (d) Government Public Key Infrastructure (PKI) Program. - The DICT shall encourage and promote the use of Government PKI digital certificates that allow paperless transactions and remote approval by signatories in the govenrment to reduce red tape and enforce ease of doing business. The adoption of PKI aims to strengthen E-Government security through the implementation in all government offices and supply of digital certificates to the citizens. The PKI digital certificates shall ensure the security of digital data and transactions by providing: (1) Authentication to prevent unauthorized disclosure of information; (2) Confidentiality to ensure that a message remains unmodified during transmission; (3) Integrity to validate the identity or senders; and (4) Non-repudiation to ensure non-deniability of actions by any party. (e) Human Capital Management Information System (HCMIS). - An HCMIS shall be developed to eliminate paper-based and manual human resource (HR)-related processes. Consistent with applicable civil service laws and rules, the HCMIS shall automate the following HR-related functions in government: recruitment and selection, appointment preparation and submission, personnel records keeping, salary, benefits and payroll administration, leave management, learning and development, rewards, recognition, and performance management, among others. This system shall utilize analytics to provide insights necessary for strategic HR functions such as performance management, forecasting, promotion, succession planning, among others: Provided, That government agencies, offices, and instrumentalities granted by law and their respective charters with fiscal and administrative autonomy in the performance of their constitutional and statutory mandates, including those that have been exempted from the Salary Standardization Law and have been granted authority to formulate their own classification systems, shall be allowed to independently develop, maintain, undertake, supervise, and regulate their own HCMIS and shall only be required to coordinate and report to the DICT for alignment of policy objectives; (f) Integrated Financial Management Information System (IFMIS). - To ensure fiscal discipline, fund allocation efficiency, and operational efficiency in the delivery of public services, an IFMIS shall be jointly developed by the DBM, Department of Finance, Commission on Audit, and DICT. This shall harmonize all existing financial systems in govenrment to enable real-time, online accounting monitoring, and control of obligations and disbursements and directly link these to cash management for a more effective financial control and accountability. This shall facilitate the generation and monitoring of vital information on all aspects of government financial transaction to support timely and informed decisions across the bureaucracy; (g) Integrated Government Network ((IGN). - An integrated, dedicated, interconnected, interoperable, secure, and resilient government network shall be established as the primary means for the sharing and communication of resources, information, and data through digital and electronic platforms across all agencies of government, covering all branches, agencies, instrumentalities, and offices of the national and local governments, including GOCCs. Such network shall also be the government's primary and focal information management tool and communications network and the data traffic that will coursed by the government agencies and key stakeholders through this network will be exchanged through a designated Government Internet Protocol Exchange (G/IPX) facility. Interconnectivity and interoperability measures shall be established and maintained between all existing internal networks and the IGN. This programs shall also cover the acquisition and management of internet resources of the government, such as internet protocol (IP) addresses and domain names, among others; (h) Online Public Service Portal. - Complementing the CFDSP, an Online Public Service Portal shall be made accessible through digital platforms such as the internet and other ICTs to citizens of the Philippines; foreign nationals who have been lawfully admitted to the country; and businesses organized and existing or operating under the laws and rules of the Philippines for purposes consistent with the efficient delivery of public services. The Online Public Service Portal shall serve as a help desk where citizen can request for information and assistance on govenrment frontline services, service procedures, and report recommendations, appreciation, complaints, and feedback. For purposes of interoperability, interconnection, and harmonization, all existing systems or mechanisms, such as the 8888 Citizens' Complaint Center and govenrment social media channels, established and/or maintained by government agencies, offices, and instrumentalities, and LGUs shall be integrated to the Online Public Service Portal. Likewise, the Online Public Service Portal shall be fully integrated with the IGN and Records and Knowledge Management Information System for real-time updating of data and information. To ensure that the public is served efficiently and expeditiously in accordance with the objectives of this Act, all national government agencies, offices, and instrumentalities, GOCCs, government financial institutions, as well as the LGUs, are hereby mandated to cooperate and coordinate with each other and with the Presidential Management Staff to ensure prompt action on the concerns received through the Online Public Service Portal and associated communication channels. Notwithstanding the provisions of this Act, access to and use of resources, information, and data through the portal shall be in accordance with Republic Act No. 11032 and all relevant laws, rules, and regulations on data and information privacy and pertinent rules on confidentiality of government information; (i) Philippine Digital Health System. - A comprehensive, integrated, interoperable, progressive, secure, and sustainable ICT system and framework shall be established to provide wide access to quality health information and services that promotes and ensures streamlined and safety-regulated delivery of digital health services to reduce inequalities and achieve universal healthcare and better health outcomes for every Filipino; (j) Philippine Government Interoperability Framework. - A Philippine govenrment interoperability framework shall guide and govern the basic technical and informational interoperability of government ICT systems necessary for the effective and efficient delivery of government services. Such a framework shall provide shared operations and services of the Philippine government, between and among its various agencies, as well as for these agencies in dealing with their various constituencies. This shall be reviewed and updated regularly, to ensure responsiveness to the current needs of the government and alignment with the newly adopted standards; (k) Procurement System. - A modernized Philippine Government Procurement System shall be developed and implemented to provide auditable online system that encompasses all procurement and supply chain management processes involving bidding, contract management, delivery, acceptance, and payment for services or supplies: Provided, That government agencies, offices, and instrumentalities granted by law and their respective Charters with fiscal and administrative autonomy in the performance of their constitutional and statutory mandates shall independently develop, maintain, undertake, supervise, and regulate their own procurement systems and shall only be required to coordinate and report to the DICT for alignment of policy objectives: Provided, further, That such system shall comply with Republic Act No. 12009 or the "New Government Procurement Act"; and (l) Records and Knowledge Management Information System. - A records and knowledge management information system shall be designed to systematically and efficiently manage government documents, records, and knowledge products and services. This includes the digitization of paper-based documents, records, and knowledge products and services, as well as the re-engineering and digitalization of paper-based workflows, from creation, dissemination, processing, analysis, tracking, storing, verification, and authentication, and archiving or disposal, while adhering to existing policies, laws, and internationally recognized standards and best practices. A repository and corresponding secure API shall be created for the common data sets, which include pricing, demographic and geospatial data to improve publication, sharing, and utilization of data across the government. The DICT shall ensure that such repository shall be compliant with applicable data privacy laws and information security standards, in coordination with the National Privacy Commission (NPC). The DICT shall also establish a platform or its equivalent for government data storage and interoperability. Subject to the provision of Section 4 of this Act, the President of the Philippines may require an existing office, agency, or instrumentality of the government to utilize the platform herein established by the DICT.

Privacy Impact Assessment (PIA).

Section 10

SEC. 10. Privacy Impact Assessment (PIA). - The DICT shall conduct a mandatory PIA, according to relevant NPC guidelines, on the proposed systems for processing personal data included in the EQMP before its publication, to identify privacy risks and establish the appropriate control framework in line with existing data privacy and cybersecurity standards.

Minimum Information Security Standards Compliance.

Section 11

SEC. 11. Minimum Information Security Standards Compliance. - The DICT shall prescribe and implement minimum information security standards for E-Government, aligned with internationally accepted standards, relevant laws, rules, and regulations, including its own policies, to ensure the security of all ICT systems utilized. The DICT is mandated to provide the proper guidance, assistance, and training on cybersecurity standards to all government agencies, offices, and instrumentalities that are part of the E-Government system. Nothing in this Act prevents a government agency, offices, or instrumentality from implementing additional standards, or other standards higher than the minimum set by the DICT as it deems necessary.

Protection of Government Critical Information Infrastructure (CII).

Section 12

SEC. 12. Protection of Government Critical Information Infrastructure (CII). - The DICT, in coordination with relevant government agencies and stakeholders, shall issue guidelines for the protection of government CII identified in the EGMP. All government CIIs shall undergo Vulnerability Assessment and Penetration Testing (VAPT) before deployment and an annual risk and security assessment. All government CII shall create an organizational Computer Emergency Response Team (CERT) or Computer Security Incident Response Team (CSIRT) and immediately notify major information security incidents affecting their institution to the DICT's National Computer Emergency Response Team (NCERT), which shall be the central authority for all the sectoral and organizational CERTs in the country, subject to rules and regulations, protocols, guidelines and standards in cybersecurity.

Public Service Continuity Plan.

Section 13

SEC. 13. Public Service Continuity Plan. - Consistent with the existing issuances of the National Disaster Risk Reduction and Management Council (NDRRMC) and the CSC, all ICT systems and infrastructure covered in the priority programs of the EGMP and ISSPs shall be included as part of the Public Service Continuity Plan (PSCP) of all government agencies and instrumentalities, to ensure the continuous delivery of essential agency functions, notwithstanding any emergency or disruption.

National E-Government Development Index (EGDI) and E-Government Maturity Survey.

Section 14

SEC. 14. National E-Government Development Index (EGDI) and E-Government Maturity Survey. - The DICT shall, in coordination with other govenrment agencies, establish a national EGDI, which provides globally competitive indicators, definitions, and statistical standards. They shall develop a manual for measuring E-Government indicators to institutionalize the measurement framework and conduct an annual E-Government maturity survey to assess the ICT readiness and maturity of agencies, with the survey results primarily used for formulating and updating EGMP.

Free Access to the Internet for the Public.

Section 15

SEC. 15. Free Access to the Internet for the Public. - Subject to compliance with existing laws, rules and regulations, the free public internet access program shall utilize the Free Public Internet Access Fund (FPIAF) to provide necessary computer systems, programs, databases, management and information systems, and core transmission and distribution networks to facilitate knowledge-building among citizens and empower them to participate in the evolving digital age.

Back to RA 12254 — full text

Provisions on this page are reproduced verbatim from official open data. See the attribution line.

Source: Supreme Court E-Library, Republic of the Philippines. Philippine laws are public documents (works of the government).