States of Jersey Law 2005: Delegation of Functions - Minister for Economic Development, Tourism, Sport and Culture - Direct of Jersey Cyber Security Centre

Delegate:

The Director of the Jersey Cyber Security Centre (CERT.JE)

Functions including powers delegated as set out in Article 26(1)(c):  

The power to –

1. enter into agreements in respect of CERT.JE and related to cyber security in Jersey including but not limited to accepting tenders, placing and  accepting  orders,  appointing  consultants,  agreeing  and  signing formal contracts and other forms of engagement;
2. acquire,  hold  and  dispose  of  movable  property  in  respect  of CERT.JE; and
3. do anything reasonably necessary or expedient for or incidental to any of the matters delegated above and relating to CERT.JE.

Limit on scope of delegation:

Up to £500,000, but subject in all instances to the specific obligations held as Accountable Officer; as well as the general responsibilities of the postholder as a senior official, including ensuring the Minister for Economic Development, Tourism, Sport and Culture is duly informed sufficiently in advance to provide direction, on contentious matters or matters of specific political or public interest, with reference to the size of any contract and/or the extent of its direct impact on Islanders.

Functions delegated as set out in Ministerial decision reference MD-C- 2019-0092 dated 4 September 2019

Cyber security policy  was delegated to the Minister for  Economic Development, Tourism, Sport and Culture as expressed in the decision:

"Since the formation of the new Government in 2018, a number of changes have been announced to ministerial responsibilities to support the Council of Ministers in delivering on its priorities.

These changes have included the transfer of political responsibility for digital economy, communications, data protection, and related policy responsibilities including our  Island's  cyber security  policy,  to  the Minister for Economic Development, Tourism, Sport and Culture. This was done to support a focus on economic growth - recognising the increasing importance of digital technology, including safeguarding the public and organisations in relation to data, and with reference to cyber security. This is a crucial part of the overall delivery of a programme of economic improvements for the future, supporting long term economic sustainability  and  resilience  and  sitting  alongside  the internal/organisational digital focus of Assistant Chief Minister".

Within this context the following functions and powers are delegated to the Director of CERT.JE until rescinded.

The power to

1. consult and co-operate, as CERT.JE considers appropriate with relevant authorities and bodies.

2. monitor  and  analyse  all  available  information,  whether  or  not provided directly to CERT.JE, relating to internet and computer activity that may indicate a threat or risk which may affect Jersey, and take any action it considers necessary in response to those risks;

3. analyse information received by it relating to incidents affecting Jersey, and take any action it considers necessary to mitigate, or assist in the mitigation of, the effect of those incidents;

4. identify vulnerabilities in network and information systems which may affect Jersey, and take any action it considers necessary to resolve those vulnerabilities and risks arising from them;

5. understand current global cyber threats and how these may affect Jersey, and take any action it considers necessary in response to those threats;

6. raise awareness in Jersey of cyber security risks and threats, and responses and mitigations;

7. provide, and co-ordinate the delivery of, cyber security services;

8. enable and promote the sharing of cyber security information in Jersey;

9. increase the level of cyber resilience in Jersey to reduce the risk, and impact, of incidents;

10. represent  Jersey's  cyber  security  interests  within  Jersey  and internationally, including by participating in international co-operation networks including the CSIRTs network;

11. provide support to enable effective cyber security in Jersey.