Who we are

SzCIRT is the Computer Incident Response Team (CIRT) for Eswatini and acts as a focal point in coordinating cybersecurity incidents for the Government Departments, Internet Service Providers, and other relevant entities within the country. SzCIRT monitors incidents, provides early warnings, disseminates information and enforces cybersecurity standards and minimum specifications for Eswatini.

Mission

To provide information and assistance to the constituents of Eswatini in implementing proactive measures to reduce the risks of information security incidents, as well as responding to such incidents as and when they occur.

Vision

To be the trusted national focal point that safeguards the Kingdom of Eswatini’s cyberspace and strengthens cyber resilience across all sectors.

Mandate

The SzCIRT shall

Establish and maintain trust with its stakeholders, including national and international entities that are involved in management of cyber security incidents
Maintain a trusted National focal Point of Contact (PoC) within and beyond the national borders that responds to cyber security incidents
Develop, maintain, adopt, communicate and enforce cyber security standards, minimum security specifications and security requirements to its stakeholders
Enforce telecommunications providers to take corrective action to support incident response
Define and communicate SzCIRT services to its stakeholders
Devise, define and develop communication approaches and mechanisms to share and disseminate information to service providers and stakeholders
Develop and deliver a set of crucial reactive and proactive services to the stakeholders
Forecast and broadcast alerts on cyber security incidents
Issue guidelines, advisories and vulnerability notes relating to information on security practices, procedures, prevention, response and reporting of cyber threats
Coordinate the response of cyber security incidents at national level, and collaborate with other relevant organizations

Raise awareness and enhance technical capacity in the area of cyber security
Escalate security and other related incidents to national security and law enforcement agencies for further action, including prosecution
Perform on-demand and scheduled security assessments on critical ICT infrastructure and services
Provide second opinion for forensic investigations requested by law enforcement agencies
Carry out such other functions related to cybercrime as may be prescribed by the National Cybersecurity Agency and the Commission
Handle and monitor cybersecurity incidents
Strengthen stakeholders’ defence capability against existing cyber security threats
Proactively provide early warning on imminent cybersecurity incidents
Participate in the development and implementation of cyber security incident simulation scenarios and programmes
Encourage and facilitate the establishment of sector SZCIRTs