“KAPAG mas ligtas ang ating digital infrastructure, mas ligtas din ang ating mamamayan.”
This was emphasized on Wednesday by House Speaker Faustino “Bojie” G. Dy III, who said House Bill No. 9605–or the National Cybersecurity and Critical Information Infrastructure Protection Act of 2026–addresses threats such as fraud, identity theft, data breaches and ransomware, as well as cyberattacks capable of disrupting essential services.
Voting 198-3-1, the House of Representatives approved on third and final reading the LEDAC priority measure that seeks to strengthen the country’s defenses against cyberattacks and protect critical systems and essential services from increasingly sophisticated digital threats.
According to the Speaker, “the more our lives become dependent on digital systems, the greater the threats posed by cyberattacks. Kaya kinikilala ng Kamara na kailangan nating palakasin ang kakayahan ng pamahalaan na protektahan ang ating mga kababayan laban sa mga bantang ito.”
“Kung magkaroon ng cyberattack sa mga kritikal na sistemang ginagamit sa kuryente, telekomunikasyon, bangko, at iba pang mahahalagang serbisyo, posibleng libu-libong Pilipino ang maperwisyo. Kaya kailangan nating maging handa bago pa mangyari ang ganitong insidente.”
A key provision of HB 9605 establishes the National Cybersecurity Agency (NCSA) under the Office of the President as the primary government body responsible for national cybersecurity policy, planning, coordination and implementation. The agency would set minimum cybersecurity standards, audit critical information infrastructure, coordinate responses to cyber incidents and strengthen threat-intelligence sharing.
“Ang cybersecurity ay hindi lamang usapin ng teknolohiya. Usapin ito ng seguridad, serbisyo, at kapakanan ng bawat Pilipino. Kailangang may malinaw na pamantayan, may nakatutok na ahensiya, at may kakayahang tumugon agad kapag may banta.” the House Chief said.
The bill requires operators of critical information infrastructure to conduct regular risk assessments and continuous monitoring, submit authenticated cybersecurity audit and risk-assessment reports at least once every two years, and report critical and high-risk cyber incidents. It also requires national government agencies, GOCCs and LGUs to adopt minimum cybersecurity measures and create or designate Chief Information Security Officers.
“Maaaring teknikal ang cybersecurity pero simple ang layunin nito. Sa likod ng bawat system, bawat account, at bawat transaction ay isang Pilipinong umaasa na ligtas ang kanyang impormasyon at serbisyo. Iyan ang dapat nating protektahan.” Dy explained.
HB 9605 also strengthens national incident-response capabilities through the National Computer Emergency Response Team and a National Security Operations Center, while providing for closer coordination among government agencies, law enforcement, intelligence agencies, critical infrastructure operators and other stakeholders.
With the approval of HB 9605, the House has now passed 28 out of the 60 LEDAC priority measures on third and final reading.
“Ang Bagong Kongreso ay kumikilos hindi lamang para tugunan ang mga problema ngayon, kundi para paghandaan ang mga banta ng bukas. Sa isang digital na Pilipinas, dapat kasing tibay ng ating pag-unlad ang ating seguridad.”
metrosundaily