9708 evsjv‡`k †M‡RU, AwZwi³, gvP© 11, 2014 • Information Security and Assurance • Protective Marking and Asset Management • Staff Vetting and Clearance • Physical and Environmental Security Action 2: Secure Government Infrastructure This Action deals with spreading awareness of relevant risks, preventive measures and effective responses to government Departments and Agencies. The Government of Bangladesh owns and operates only a minority of critical information infrastructure. However, Bangladesh attributes considerable importance to the protection of critical information infrastructure. Therefore, the Government will lead the cyberspace security. For example, the Government’s procurement process will mandate the inclusion of security clauses in service contracts to encourage development of secure cyberspace technologies. The National Cybersecurity Strategy identifies the following actions as vital for securing cyberspace: • Create and enforce a staff vetting and clearance scheme; • Create and enforce a formal information or data classification for sensitive data; • Create and enforce a cybersecurity risk management process across government ministries and agencies; • Define and enforce a robust government Authentication Framework; • Improve security in government outsourcing and procurement through vetting of suppliers, incorporation and enforcement of security clauses in contracts; • Create a vulnerability management process for all government cyber systems; • Secure government local area networks;