1 Robust protection of vital societal functions We need to be able to maintain vital societal functions and economic activity in a crisis where critical ICT infrastructure is non-functional for a short or longer period. Government agencies and businesses must have a certain level of security to be able to act on a short notice in the event of serious cyber incidents.