4.0 IMPLEMENTATION
4.1 Critical Success Factors
The successful implementation of this strategy will broadly depend or be influenced by
the following considerations:
High-level ownership - It is essential that this strategy is endorsed by and driven
from the highest body in Botswana and that it receives the full executive support in
order to be successfully implemented. The National Executive should identify
national business priorities and provide monetary and human resources needed to
implement the strategy. In addition, the importance of this strategy needs to be
understood across all sectors.
Cybersecurity Risk Assessment - The incorporation of risk management as a
delivery area within the executive management (both public and private enterprises)
provides a strong foundation for Cybersecurity implementation—covering the areas
of people, process and technology. The security of digital infrastructure and
information must be understood as vital and incorporated within all organisational
functionality beyond technical solutions.
Resource Prioritisation - Identification and prioritization of key resources aimed
at improving the country’s security, resilience, operational capacities to effectively
manage and respond to cyber incidents as well as protect against ever persistent
threats is crucial. Embedded within this area is the need to continuously improve
operational capabilities to keep abreast with the level of sophistication of cybercrime
as well as advanced persistent threats.
Human Capital - Efficient implementation of Cybersecurity requires highly qualified
and skilled human resource across all sectors. The ability of institutions in both
Public and Private sector to attain and retain skilled human resource is therefore
important for maintaining and ensuring a strong protection approach against cyber
threats especially with operators of Critical National Infrastructure (CNI).
Multi-stakeholder Approach - Managing compliance of all key stakeholders and
actors within both the public and private sector provides assurance on improving the
nation’s Cybersecurity maturity. This requires deliberate effort and initiative from
each stakeholder to meet their obligations. A proper coordination of efforts is
required with a view to conducting cyber drills among sectors and to ensure that
national response and sector response are coordinated. Information sharing is also
28 | P a g e
National Cybersecurity Strategy