The House of Representatives on Wednesday approved on third and final reading a measure creating a National Cybersecurity Agency and imposing stronger protections on critical infrastructure amid increasingly sophisticated cyberattacks.
House Bill No. 9605, or the National Cybersecurity and Critical Information Infrastructure Protection Act of 2026, was approved with a vote of 198-3-1.
The measure establishes the National Cybersecurity Agency (NCSA) under the Office of the President as the government’s primary body for national cybersecurity policy, planning, coordination and implementation.
The proposed agency would set minimum cybersecurity standards, audit critical information infrastructure, coordinate responses to cyber incidents and strengthen the sharing of threat intelligence.
House Speaker Faustino “Bojie” Dy III said the measure is intended to protect Filipinos who increasingly depend on digital systems for essential services.
“When our digital infrastructure is safer, our people are safer, too,” Dy said in Filipino.
“The more our lives become dependent on digital systems, the greater the threats posed by cyberattacks. That is why the House recognizes the need to strengthen the government’s ability to protect our people from these threats,” he added.
The bill covers threats including fraud, identity theft, data breaches and ransomware, as well as cyberattacks that could disrupt electricity, telecommunications, banking and other essential services.
Operators of critical information infrastructure would be required to conduct regular risk assessments and continuous monitoring, submit authenticated cybersecurity audit and risk-assessment reports at least every two years, and report critical and high-risk cyber incidents.
National government agencies, government-owned and -controlled corporations and local government units would also be required to adopt minimum cybersecurity measures and create or designate chief information security officers.
The measure would further strengthen the country’s cyber incident response system through the National Computer Emergency Response Team and a National Security Operations Center.
It also calls for closer coordination among government agencies, law enforcement and intelligence agencies, critical infrastructure operators and other stakeholders.
“Cybersecurity is not only a matter of technology. It is a matter of security, services, and the welfare of every Filipino. We need clear standards, a dedicated agency, and the capacity to respond immediately when a threat arises,” Dy said.
The House’s approval of HB 9605 brings to 28 the number of the 60 priority measures passed on third and final reading.
“The New Congress is acting not only to address today’s problems but also to prepare for tomorrow’s threats. In a digital Philippines, our security must be as strong as our progress,” Dy said.
