Governance & Leadership

The ICT Authority’s governance and organizational structure is designed to ensure effective mandate execution and strong engagement with government and private-sector stakeholders. It comprises a Board of Directors for strategic oversight, an Executive Management Team for policy and operational leadership, and both standing and ad hoc committees for specialized areas such as finance, audit, and research. Operational divisions and strategic units deliver ICT services, foster innovation, and ensure regulatory compliance, promoting agility, collaboration, and accountability

The ICT Authority operates within a comprehensive legal and regulatory framework governing public bodies in Jamaica. This includes the Access to Information Act, Cybercrimes Act, Data Protection Act, Electronic Transaction Act, Financial Administration and Audit Act, GOJ ICT Policies and Standards, ICT Authority Act, Local Governance Act, PBMA Act, Public Procurement Act and Guidelines, and the Telecommunications Act. We consistently monitor the regulatory landscape to maintain full compliance and align with emerging legislation.

The ICT Authority is committed to upholding the highest standards of integrity, professionalism and accountability in the execution of its mandate. Our approach to ethical conduct is guided by respect for colleagues, stakeholders and the public; the responsible handling of confidential information; fairness in decision-making; and impartiality in all professional engagements. These principles reinforce our commitment to transparency, responsible governance and a professional working environment that does not tolerate corruption, discrimination or unethical conduct. Through the promotion of these standards, the ICT Authority seeks to maintain public confidence and strengthen trust in its operations and leadership.

The ICT Authority recognises risk management as an important component of effective governance and organisational resilience. Our approach focuses on identifying and assessing potential risks, developing appropriate mitigation measures, and monitoring risk exposures to support informed decision-making and the continuity of operations. Through ongoing risk assessment, review and oversight, the Authority seeks to strengthen accountability, safeguard its assets and resources, and support the effective delivery of its mandate. These efforts contribute to organisational resilience and the responsible management of risks that may affect our operations and strategic objectives.

The Business Continuity Plan (BCP) ensures that essential operations continue during and after disruptions such as natural disasters, cyberattacks, or technical failures. Key components include: Disaster Recovery Procedures Data and Infrastructure Redundancy Remote Work and Service Protocols Crisis and Emergency Communication Periodic Testing and Simulation The BCP is continuously refined to reflect emerging threats and to align with national emergency preparedness frameworks.