DANISH CYBER AND INFORMATION SECURITY STRATEGY 2022-2024 An ambitious effort targeting government and vital societal functions Vital societal functions that are robust and resilient require a high level of cyber and information security in the critical ICT infrastructure that support these functions. This requires ambitious efforts from both public and private actors. The strategy is expanded from covering the six current sectors critical to society to include a wider range of ministries with responsibility for IT-supported vital societal functions. 13 All government agencies must continue to comply with a number of technical minimum requirements, which will be expanded during the strategy period. The same applies to ministries responsible for ICT systems critical to society or vital societal functions for which a number of additional security requirements also apply. Overall, this will contribute to ensuring that ministries with a particular responsibility for vital societal functions is able to act quickly and efficiently in the event of a serious cyber incident. Cyber and information security in the central government: New requirements for government agencies Ministries (or parts thereof) responsible for vital societal functions Must comply with a number of new requirements for organising security work around the vital societal functions, including requirements to set up a DCIS and develop its own cyber and information security strategy for the vital societal functions Government agencies responsible for ICT systems critical for society Must comply with a number of new regulatory requirements related to the systems, including new requirements for contract and supplier management, and enhanced requirements for the preparation of contingency plans All government agencies Must comply with a set of minimum requirements, including the organisation of security work, compliance with ISO 27001 and technical minimum requirements