Action plan 2015–2018 In order to put the cyber security strategy into action, it is proposed that a special cyber security council shall be appointed, consisting of representatives of the government bodies involved in the implementation of the strategy., Moreover, a cyber security forum should be set up, representing stakeholders both public and private entities. The Cyber Security Council Supervision of implementation of the strategy is to be the responsibility of the Cyber Security Council, which will be appointed by the Minister of the Interior. The Cyber Security Council will coordinate measures, particularly those involving government bodies. It will review the action plan at least once a year and make proposals on the prioritisation and funding of measures taken. The Cyber Security Council will submit a report to the Minister of the Interior every year on implementation of the strategy. The Cyber Security Forum This is a collaborative venue for representatives of public bodies who sit on the Cyber Security Council and of private entities. The forum will be able to coordinate projects involving stakeholders, in part or in their entirety, and create a basis for collaboration on specific projects, addressing cyber security in demarcated areas. Cyber Security Forum Cyber Security Council Ministry of the Interior Data Protection Authority Ministry for Foreign Affairs Telecommunications (including Defence) Financial systems Information Society Project – Public Adiministration Ministry of Education, Culture and Science Ministry of Industries and Innovation Utilities National Commissioner of the Icelandic Police Ministry of Finance and Economic Affairs CERT-IS Transport and communications Information technology Health services Post and Telecom Administration Universities 7

Select target paragraph3