List of Figures Figure 1 – Elements of a National Cybersecurity Programme............................................................... 6 Figure 2 – Common Cyber Threat Sources ......................................................................................... 16 Figure 3 – Pillars of the Global Cybersecurity Agenda (GCA) ............................................................. 20 Figure 4 – Critical Infrastructure Protection and Cybersecurity ........................................................... 26 Figure 5 – National Cybersecurity Strategy Process Flowchart .......................................................... 31 Figure 6 – National Cybersecurity Strategy Model .............................................................................. 35 Figure 7 – National Interest Matrix ....................................................................................................... 39 Figure 8 – Considerations under Strategic Context ............................................................................. 40 Figure 9 – National Security Ends in Cybersecurity Strategies ........................................................... 42 Figure 10 – Economic Ends in National Cybersecurity Strategies ...................................................... 43 Figure 11 – Promotion of Values in National Cybersecurity Strategies ............................................... 44 Figure 12 – Favourable World Order in Cybersecurity Strategies ....................................................... 45 Figure 13 – Governance End in National Cybersecurity Strategies .................................................... 45 Figure 14 – Cybersecurity Ends Considerations.................................................................................. 46 Figure 15 – Legal Measures Pillar and related GCA goal ................................................................... 48 Figure 16 – Procedural Measures and related GCA goals .................................................................. 51 Figure 17 – National Cybersecurity Framework................................................................................... 53 Figure 18 – Technical Measures and related GCA goals .................................................................... 55 Figure 19 – Secure Authentication and Authorisation reference model .............................................. 56 Figure 20 – Organisational Structures Pillar and related GCA goals................................................... 60 Figure 21 – National Cybersecurity Focal Point................................................................................... 62 Figure 22 – Protection principles ......................................................................................................... 65 Figure 23 – Typical Cybersecurity skills ............................................................................................... 68 Figure 24 – Legal Measures Action Items ........................................................................................... 74 Figure 25 – Risk Assessment Model ................................................................................................... 77 Figure 26 – ISO/IEC Risk Management Process ................................................................................ 78 Figure 27 – Procedural Measures Action Items ................................................................................... 79 Figure 28 – Technical Measures Action Items ..................................................................................... 81 Figure 29 – National Cybersecurity Leadership Action Items .............................................................. 84 Figure 30 – CIRT Leadership Action Items .......................................................................................... 86 Figure 31 – PDCA Model applied to National Cybersecurity Framework ............................................ 93 Figure 32 – Cybersecurity Technologies and their roles ................................................................... 112 11

Select target paragraph3