The city government of Davao is moving to strengthen its digital defenses and protect critical government data with the approval of an ordinance creating a centralized data center designed to unify ICT systems, improve cybersecurity and ensure continuity of public services.
The measure, authored by City Councilor Bonz Andre A. Militar, chairperson of the Committee on Information Technology, establishes the Davao City Government Centralized Data Center as a critical ICT infrastructure of the local government.
The ordinance addresses rising cybersecurity threats, fragmented ICT systems, data breach risks, and the city government’s growing reliance on digital platforms.
Under the measure, the City Information Technology Center (CITC) will lead the planning, development, operation and management of the centralized data center, including protocols for cybersecurity incidents and data breaches.
The approved measure provides for the development of a Tier 3 centralized data center, designed to provide high availability, redundancy, continuous operations capability, disaster resilience and enhanced cybersecurity protection.
Militar said the initiative is aimed at addressing vulnerabilities arising from the city government’s currently decentralized ICT environment, where inconsistent security protocols, limited interoperability and duplication of ICT resources exist across offices.
The centralized system will allow the city government to integrate its ICT systems while maintaining operational continuity within individual departments. It will also provide centralized backup, secure shared storage and improved interoperability.
A major component of the ordinance is the establishment of a uniform response to cyberattacks and data breaches.
Based on the ordinance, the protocol will include assessment and containment, coordinated investigation, notification of concerned authorities and affected parties when required by law, recovery using secure backups, and post-incident review and improvement.
The ordinance also requires the city government of Davao to adopt a Cybersecurity Governance and Maturity Management Framework to ensure that cybersecurity responsibilities are clearly defined and addressed consistently across departments.
The measure further mandates compliance with the Data Privacy Act of 2012, the National Archives of the Philippines Act of 2007, applicable National Privacy Commission rules, electronic records management policies and other laws and government issuances governing the handling, storage, retention, access and protection of public records.
The CITC will also establish a data classification framework covering public data, personal data, sensitive personal information, and restricted or critical government data, with corresponding levels of access and protection.
The proposed facility is also envisioned to serve as a disaster recovery and business continuity backbone for the city government.
Under the ordinance, the CITC must establish secure backup repositories and alternative infrastructure to allow the restoration of government systems following system failures, natural disasters, emergencies or cyber incidents.
The facility’s location will be determined by the appropriate local government authority, with the committee emphasizing the need to avoid flood-prone, liquefaction-prone and tsunami-vulnerable areas.
The ordinance allows the city to adopt on-premise, cloud-based or hybrid infrastructure depending on security, scalability, cost-efficiency and operational requirements.
The measure also provides for phased migration of city government ICT systems, prioritizing critical systems while taking into account system readiness, operational impact and available resources.
The measure also seeks to institutionalize a centralized digital governance framework that will strengthen the city’s cybersecurity posture while supporting its long-term smart city and digital transformation initiatives.
The ordinance declares the centralized data center a critical government ICT infrastructure, giving priority to its security, maintenance, funding and protection against cyber threats, system failures and natural or human-induced disasters.
Militar stated that with the approval of the measure, Davao City is taking a significant step toward building a more secure and resilient digital government infrastructure as more public services and government operations shift online.
