Resources

If you want to learn more on the Government IT Security Policy and Guidelines

Baseline IT Security Policy (S17)

This document outlines the mandatory minimum security requirements for the protection of government’s information systems and data assets.
[PDF version]

IT Security Guidelines (G3)

This document elaborates on the policy requirements and sets the implementation standard on the security requirements specified in the Baseline IT Security Policy.
[PDF version]

Practice Guide for Information Security Incident Handling (ISPG-SM02)

This document provides the practical guidance and reference for handling information security incidents in the Government.
[PDF version]

Practice Guide for IT Security Risk Management

This document provides the practical guidance and reference for IT security risk management in the Government.
[PDF version]

Practice Guide for IT Security Threat Management

This document provides the practical guidance and reference for IT security threat management in the Government.
[PDF version]

Practice Guide for Security by Design

This document provides the practical guidance and reference for the adoption of Security by Design in the Government.
[PDF version]

Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)

This document provides the practical guidance and reference for security risk assessment & audit in the Government.
[PDF version]

Practice Guide for Penetration Testing

This document provides the practical guidance and reference for the secure adoption of penetration testing in the Government.
[PDF version]

Practice Guide for Internet Gateway Security

This document provides the practical guidance and reference for the secure adoption of Internet gateway in the Government.
[PDF version]

Practice Guide for Mobile Security (ISPG-SM03)

This document provides the practical guidance and reference for the secure use of mobile devices and development of mobile apps in the Government.
[PDF version]

Practice Guide for Cloud Computing Security (ISPG-SM04)

This document provides the practical guidance and reference for the secure adoption of cloud computing technology in the Government.
[PDF version]

Practice Guide for Internet of Things Security

This document provides the practical guidance and reference for the secure adoption of Internet of Things (“IoT”) technology in the Government.
[PDF version]

Practice Guide for Social Media Security

This document provides the practical guidance and reference for secure management and use of social media in the Government.
[PDF version]

Practice Guide for Wi-Fi Security

This document provides the practical guidance and reference for secure design, management and operation of Wi-Fi network in the Government.
[PDF version]

If you are a service provider for the Government

Baseline IT Security Policy (S17)

This document outlines the mandatory minimum security requirements for the protection of government’s information systems and data assets.
[PDF version]

IT Security Guidelines (G3)

This document elaborates on the policy requirements and sets the implementation standard on the security requirements specified in the Baseline IT Security Policy.
[PDF version]

Practice Guide for Information Security Incident Handling (ISPG-SM02)

This document provides the practical guidance and reference for handling information security incidents in the Government.
[PDF version]

Practice Guide for IT Security Risk Management

This document provides the practical guidance and reference for IT security risk management in the Government.
[PDF version]

Practice Guide for IT Security Threat Management

This document provides the practical guidance and reference for IT security threat management in the Government.
[PDF version]

Practice Guide for Security by Design

This document provides the practical guidance and reference for the adoption of Security by Design in the Government.
[PDF version]

Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)

This document provides the practical guidance and reference for security risk assessment & audit in the Government.
[PDF version]

Practice Guide for Penetration Testing

This document provides the practical guidance and reference for the secure adoption of penetration testing in the Government.
[PDF version]

Practice Guide for Internet Gateway Security

This document provides the practical guidance and reference for the secure adoption of Internet gateway in the Government.
[PDF version]

Practice Guide for Mobile Security (ISPG-SM03)

This document provides the practical guidance and reference for the secure use of mobile devices and development of mobile apps in the Government.
[PDF version]

Practice Guide for Cloud Computing Security (ISPG-SM04)

This document provides the practical guidance and reference for the secure adoption of cloud computing technology in the Government.
[PDF version]

Practice Guide for Internet of Things Security

This document provides the practical guidance and reference for the secure adoption of Internet of Things (“IoT”) technology in the Government.
[PDF version]

Practice Guide for Social Media Security

This document provides the practical guidance and reference for secure management and use of social media in the Government.
[PDF version]

Practice Guide for Wi-Fi Security

This document provides the practical guidance and reference for secure design, management and operation of Wi-Fi network in the Government.
[PDF version]

The HKSARG Interoperability Framework

[PDF version]

If you want to learn how to protect your computers at home, at school, or at office

If you want to explore further on information and cyber security

If you want to protect your computers from malware infection and ransomware attacks

If you want to report an information security incident

Seek assistance or report an information security incident to the Hong Kong Computer Emergency Response Team Coordination Centre
Tel: 8105 6060, Fax: 8105 9760
Email address: hkcert@hkcert.org
Online form: https://www.hkcert.org/form/incident-report-end-user-sme/entry

Report a cyber crime to the Cyber Security and Technology Crime Bureau of the Hong Kong Police
Tel: 2860 5012
e-Report Centre: https://www.police.gov.hk/ppp_en/contact_us.html

If you want to learn more on the Government IT Security Policy and Guidelines

Baseline IT Security Policy (S17)

IT Security Guidelines (G3)

Practice Guide for Information Security Incident Handling (ISPG-SM02)

Practice Guide for IT Security Risk Management

Practice Guide for IT Security Threat Management

Practice Guide for Security by Design

Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)

Practice Guide for Penetration Testing

Practice Guide for Internet Gateway Security

Practice Guide for Mobile Security (ISPG-SM03)

Practice Guide for Cloud Computing Security (ISPG-SM04)

Practice Guide for Internet of Things Security

Practice Guide for Social Media Security

Practice Guide for Wi-Fi Security

If you are a service provider for the Government

Baseline IT Security Policy (S17)

IT Security Guidelines (G3)

Practice Guide for Information Security Incident Handling (ISPG-SM02)

Practice Guide for IT Security Risk Management

Practice Guide for IT Security Threat Management

Practice Guide for Security by Design

Practice Guide for Security Risk Assessment & Audit (ISPG-SM01)

Practice Guide for Penetration Testing

Practice Guide for Internet Gateway Security

Practice Guide for Mobile Security (ISPG-SM03)

Practice Guide for Cloud Computing Security (ISPG-SM04)

Practice Guide for Internet of Things Security

Practice Guide for Social Media Security

Practice Guide for Wi-Fi Security

The HKSARG Interoperability Framework

If you want to learn how to protect your computers at home, at school, or at office

- I want to secure my website

- I want to protect my Windows computer

- I want to protect my Mac computer

- I want to protect my Android device

- I want to protect my iOS device

If you want to explore further on information and cyber security

- Learning Centre of Cyber Security Information Portal

- Expert Corner of Cyber Security Information Portal

- Infographics of Cyber Security Information Portal

- Leaflets of Cyber Security Information Portal

If you want to protect your computers from malware infection and ransomware attacks

- Beware of Malware Infection

- Protect Yourself against Ransomware

- Hong Kong Computer Emergency Response Team Coordination Centre

- No More Ransomware Website

If you want to report an information security incident

Government Website

CERT Community