Information Technology and Digital Governance: Systems and Risks
Digital Governance
Understand e-government stages (information, interaction, transaction, transformation) and the role of ICT in service delivery. Review RA 8792 (E-Commerce Act), RA 10173 (Data Privacy Act), RA 10175 (Cybercrime Prevention Act), and the DICT mandate. Know data protection principles: consent, purpose limitation, proportionality, transparency, and security.
IT Fundamentals
Review hardware/software, networks (LAN, WAN, internet), databases, cloud computing (IaaS, PaaS, SaaS), and information security (confidentiality, integrity, availability). Understand authentication, encryption, firewalls, phishing, malware, and backup and recovery. Know business continuity and disaster recovery concepts.
Traps
Questions confuse confidentiality (secrecy) with integrity (accuracy) or availability (access). They also mislabel phishing (social engineering) as a technical exploit. Watch for options treating data privacy as optional or confusing IaaS with SaaS.
Rule of Thumb
Use the CIA triad: does the control protect confidentiality, integrity, or availability? Name the specific asset and threat.
Worked example: Encrypting a database protects confidentiality; hashing verifies integrity; redundant servers support availability.