1 1.0 INTRODUCTION 1.1 Purpose The purpose of this document is to delineate and describe the National Cyber Security Policy for Papua New Guinea (PNG). Cyber-related risks are evolving rapidly and as PNG becomes increasingly reliant on ICT, it is of paramount importance that its technical and intelligence capabilities in cyber security be developed in par with international standards and in accordance with international best practice in order to provide adequate protection for its citizens, critical infrastructure systems and national security. In this modern day and age open connection is enabled by the internet, if without an in-country mature cyber security capability and capacity, PNG may be subjected to cyber incidents that may adversely affect PNG’s economy. This National Cyber Security Policy sets out the Government's approach toward addressing every changing and dynamic cyber security risks and challenges. The Policy defines the Government's vision, goals, objectives, evolving governance and the principles to guide the development of relevant strategies and action plans on minimize cyber security risks. Considering the current landscape, this Policy sets a direction for the Government to: ● ● ● ● partner and collaborate across all stakeholder groups, including private sector and civil society, academia and technical community to promote best practices and develop strategies to overcome market barriers to the adoption of secure technologies; improve awareness and transparency of cyber security risks and practices to build market demand for more secure products and services; partner and collaborate with international partners to promote open, industry-driven standards and risk-based approaches to address cyber security challenges, including cloud security platform; collaborate with the private sector, civil society and the cyber security community to promote awareness on cyber hygiene and cyber safety;