Guidelines for Applying Website Security Standards to Enhance Cybersecurity in Local Government

Abstract

This academic article aims to propose guidelines for maintaining website security in Local Government in compliance with the Website Security Standards B.E. 2568 (2025) issued by the National Cyber Security Committee (NCSC). Employing documentary research, this study synthesizes data from relevant laws, international standards, and the specific context of LAOs, which often face constraints regarding budget and personnel. The findings suggest that effective implementation of the standards requires a three-phase approach: 1) Governance Phase, focusing on designating a Risk Owner and optimizing Terms of Reference (TOR) to control outsourcing quality through mandatory Vulnerability Assessments; 2) Technical Protection Phase, emphasizing fundamental secure configurations and patch management; and 3) Monitoring Phase, encouraging the use of self-assessment tools, actionable incident response plans, and inter-municipal collaboration for resource sharing. Implementing these guidelines will essentially enhance cybersecurity resilience and foster sustainable Digital Trust among citizens.