ACKNOWLEDGING that legislation alone will not be enough to protect against cyberattacks, minister with responsibility for science, technology and special projects Dr Andrew Wheatley is urging Jamaicans to become more technologically savvy, arguing that individual vigilance remains one of the strongest defences against transnational threats.

While defending the Government’s efforts to strengthen the country’s cybersecurity framework, Wheatley said many cyber attacks originate outside the jurisdiction, making enforcement challenging even where legal protections exist.

“We have to encourage our citizens to be very careful and aware of these scams, these attacks that are originating from outside of our jurisdiction, and so that is a responsibility that we all have as citizens to safeguard ourselves from these attacks,” Wheatley told the Jamaica Observer, in response to questions about the effectiveness of cybercrime legislation against transnational offenders.

He was speaking at a post-Cabinet press briefing at Jamaica House in St Andrew on Wednesday.

The minister said that while the proposed legislation will facilitate international cooperation in investigating cyber criminals operating abroad, personal vigilance remains a crucial defence against threats such as phishing scams, account takeovers and ransomware attacks.

“We have agreements in place that will support that. But again, as I said before, we always have scammers trying to hack us, hack into your e-mail [among other things], and so you have a responsibility, if you do not recognise an e-mail, you have to take necessary precautions. I experience it every day, people saying that invoices aren’t paid or your account is locked, and all kinds of stuff like that. So we have to be very vigilant as individuals,” he said.

Wheatley’s comments come as the Government moves to strengthen its cybersecurity architecture, including plans to establish the National Cyber Security Coordination and Assurance Council (NCCAC), a body intended to unify the country’s cyber security assets under a single national framework in anticipation of the national cybersecurity legislation.

In his contribution to the parliamentary sectoral debate on Tuesday, Wheatley argued that the need for policy was urgent, pointing out that more than 49 million cyberattack attempts were made in Jamaica last year, up from the 12 million recorded in 2022.

During the presentation, he disclosed that the new law will establish the national cybersecurity directorate in statute, giving Jamaica’s permanent cybersecurity authority a legal foundation.

Furthermore, he noted that it will create a formal framework for designating and protecting critical information infrastructure in sectors such as national life, energy, banking, telecommunications, health, and Government.

At the time, the technology minister said “it will mandate minimum cybersecurity standards across regulated sectors, with the authority to enforce compliance. It will create clear obligations for incident reporting, responsible disclosure of vulnerabilities, and the regulation of cybersecurity service providers operating in Jamaica,” he said.

However, on Wednesday, the minister stressed that cyber security extends beyond legislation and law enforcement. He noted that many of the most common cyber attacks rely on individuals being tricked into disclosing sensitive information or clicking malicious links.

According to the minister, scammers use deceptive e-mails claiming unpaid invoices, locked accounts or other urgent matters to entice users into revealing personal information. He also highlighted the threat of ransomware attacks, in which criminals lock victims out of their accounts or systems and demand payment for access to be restored.

While agencies such as the Major Organised Crime and Anti-Corruption Agency are responsible for investigating and prosecuting cybercrime, Wheatley said protecting Jamaicans from online threats will require both robust legislation and greater public awareness.

The minister described cybersecurity as a “very dynamic space” and said the Government will continue exploring additional measures to safeguard citizens and critical national infrastructure as cyber threats evolve.

“They will send things to you that will capture your imagination and pique your interest that will make you say, ‘I want to look’. But if you’re not sure, don’t click. I think that is the message. If you’re not sure, don’t click.“