Oct 15, 2026
October is Cybersecurity Awareness Month in the Philippines. The DICT’s campaign theme, “HABI: Salig sa Gawa, Tibay sa Banta,” promotes a people-centered approach to a resilient Philippine cyberspace. The past year has shown why it matters: the country is under sustained cyber pressure, and its readiness is being tested in real time.
A Year of Escalating Threats
Ransomware is surging. The 31 public ransomware claims recorded in the first eight months of 2026 already exceed the combined total of 2024 and 2025, and 15 ransomware groups have targeted Philippine organizations, compared with 12 in all of 2025. Check Point recorded 264 cyber incidents in the same period, with government agencies seeing the highest volume and Financial Services the most ransomware and data-leak activity.
Scams are just as widespread. According to the Global Anti-Scam Alliance, 84% of Filipino adults encountered a scam attempt in the past year, with nearly ₱122 billion stolen. More than 19.2 million account credentials were also compromised in the first half of 2026.
Fortinet warns that AI is making things worse. As Fortinet Philippines country head Bambi Escalante put it, “almost all organizations are vulnerable” to AI-driven attacks that scan for weaknesses indiscriminately.
A Landmark Bill Awaits the Senate
On August 12, 2026, the House approved House Bill No. 9605, the National Cybersecurity and Critical Information Infrastructure Protection Act of 2026, by a vote of 198-3. The bill would create a National Cybersecurity Agency (NCSA) under the Office of the President to set minimum standards, audit critical infrastructure, and coordinate incident response.
Operators of critical infrastructure would have to run regular risk assessments, submit audit reports at least every two years, and report critical and high-risk incidents. National government agencies and local government units would also need to adopt minimum cybersecurity measures and appoint Chief Information Security Officers.
The bill is now pending in the Senate, and the CICC has urged Congress to fast-track it. In the words of Rep. Migz Villafuerte, who chairs the House Committee on ICT, “The question is no longer whether our country will experience another major cyberattack; the question is whether we are prepared for it when that happens.”
What the Government Is Already Doing
The most significant change for organizations is mandatory annual testing. DICT Department Circular No. HRA-008, issued in September 2026, requires every government agency to undergo Vulnerability Assessment and Penetration Testing (VAPT) at least once a year, and again after major system changes or incidents. Critical vulnerabilities must be fixed within five business days.
Other measures are also underway. Executive Order No. 119 sets unified rules on data classification, data residency, and cross-border data transfers for government agencies. In February, the DICT launched a Bug Bounty Program, the DICT Trusted Assessment Provider (D-TAP) framework for accredited security audits, and the Cybersecurity Posture Assessment Laboratory (CPAL).
The country is also building shared defenses. A new National Cyber Security Center (NCSC), backed by a USD 25.60 million grant from Korea’s KOICA, will serve as the national hub for threat monitoring and incident response. Meanwhile, a cross-agency defense alliance with Google Cloud has already onboarded 56 government agencies.
Cybersecurity Awareness Month: Four Pillars
This year’s campaign rests on four pillars. Cyber Tanaw focuses on understanding emerging threats such as AI and deepfakes, and Cyber Salig on building digital trust through cyber hygiene and data protection. Cyber Balangay promotes public-private cooperation, and Cyber Tibay centers on long-term resilience.
The Challenges Behind the Headlines
Scams and Phishing Are at Epidemic Levels
84% of Filipino adults encountered a scam attempt in the past year, with nearly ₱122 billion stolen. More than 19.2 million credentials were compromised in the first half of 2026.
How Cosaint Helps: Cosaint's Data Privacy Compliance and Cybersecurity services help organizations protect customer data and credentials through proper data handling policies, access controls, and employee awareness measures. Their Compliance Managed Services ensure that these protections remain effective over time.
Ransomware Attacks Are Surging
The article reported 31 public ransomware claims in the first eight months of 2026 alone, already exceeding the combined total for 2024 and 2025. Fifteen distinct ransomware groups posted claims involving Philippine organizations.
How Cosaint Helps: Cosaint's Cybersecurity and Information Security practice helps organizations assess their exposure to ransomware, implement preventive controls, and build incident response capabilities. Their GRC Advisory service ensures that ransomware risk is formally managed within your governance framework rather than treated as an afterthought.
The Cybersecurity Skills Gap Persists
The DICT has launched training programs to bridge the growing demand for skilled cybersecurity defense analysts, highlighting a persistent talent shortage in the country.
How Cosaint Helps: Cosaint's Compliance Managed Services and Tailored Solutions provide organizations with access to experienced consultants who can fill capability gaps without the cost and delay of building an in-house team from scratch.
Cybersecurity Is Still Reactive, Not Proactive
Advocacy group BetterGov.ph raised an alarm over what it described as a reactive approach to cybersecurity, where weaknesses are addressed only after an attack has occurred.
How Cosaint Helps: Cosaint's GRC Advisory and Compliance Managed Services are fundamentally proactive in nature. They help organizations move from incident-driven responses to continuous, risk-based security management — regular assessments, faster remediation, and clear accountability.
Is Your Organization Ready?
Regulators, clients, and attackers are all raising the bar. Cosaint Consulting helps organizations go beyond compliance, with Governance, Risk, and Compliance support across cybersecurity, data protection, and VAPT.
Sources
DICT Trusted Assessment Provider (D-TAP), Circular HRA-001
House Bill No. 9605 (National Cybersecurity Act)
Check Point, 2026 Philippines Threat Landscape Report
Get in touch with Cosaint Consulting Inc. at info@cosaintconsulting.com or visit the other sections of our website cosaintconsulting.com, to find out how we can support your Compliance and IT Governance journey.