5.3.7 Vendors Vendors should participate in the strategy elaboration process because they design the technical measures required to prevent, detect, deter and recover from cyber attacks. Leaving the vendors out of the process would deprive a nation of opinions of parties that could be a source or solution to cyber threats and vulnerabilities. Vendor roles include: 5.3.8  Providing information on how vulnerabilities affect their systems and software;  Offering insights into capacity to design, administer and maintain secure products;  Shaping national cyber threat and vulnerability diagnostics capacity;  Sharing experience on incident response activities;  Defining information sharing processes with customers on major threats; and  Building capacity to produce next generation cybersecurity solutions. Academia Academic institutions should play an active role in the elaboration of the strategy for the following reasons. First, academic institutions educate the technical, management and information assurance experts required to devise and execute cybersecurity strategies. Second, academia hosts Computer Incident Response Teams. Third, academia leads the research and development of secure cybersecurity solutions. 5.3.9 International Partners As we illustrate in section 5.4, we propose that you consider asking your allies and other international partners to contribute to your national cybersecurity strategy. Collaboration is vital because we all rely on one cyberspace. Therefore, vulnerabilities in one country may affect other nations with established economic and national security links. However, there are obvious economic, political and national security concerns about collaborating with foreign governments in this strategic domain. The concerns may not be that allies may turn into adversaries. It may be that a country may not be sure about the adequacy of controls in place to protect the sensitive data shared with allies. States may assuage 33 concerns by signing Memorandums of Understanding to collaborate on specific areas such as legal measures, incident response, research and development. 5.3.10 Citizens Last, but not least by any means, the national cybersecurity strategy must accommodate the voice of its citizens. Cyberspace is essential to modern life. Individuals communicate, socialise, shop, pay bills and study over the Internet. Therefore, the citizens have a stake in a reliably functioning cyberspace that is free from fraud, child abuse material and other risks. However, citizens may not support the national cybersecurity strategy if it prizes security over fundamental rights such as privacy. It may not be possible to obtain input from citizens directly. Thus, Parliament and civil society may offer the views of citizens. 33 Example - US-UK Communiqué: https://update.cabinetoffice.gov.uk/sites/default/files/resources/CyberCommunique-Final.pdf 30

Select target paragraph3