19 CRISIS MANAGEMENT ..................................................................................................................................... 70 19.1 19.2 19.3 19.4 20 CYBER ATTACKS .............................................................................................................................................. 73 20.1 20.2 20.3 20.4 20.5 20.6 20.7 20.8 21 MONITOR THE DEVELOPMENT OF ICT OUTSOURCING OF COMMON COMPONENTS ......................................................... 80 DEVELOP COMMON PROTECTION MEASURES AGAINST SOPHISTICATED CYBER ATTACKERS................................................. 80 REGULATE ELECTRONIC IDENTITY .......................................................................................................................... 81 CROSS-SECTORAL INITIATIVES......................................................................................................................... 82 22.1 22.2 22.3 22.4 22.5 22.6 22.7 22.8 22.9 22.10 22.11 23 ESTABLISH AND PRACTISE A COMPREHENSIVE FRAMEWORK FOR CYBER INCIDENT MANAGEMENT ....................................... 73 IMPROVE THE NATIONAL OPERATIONAL CAPABILITY THROUGH CO-LOCATION (MAJORITY AND MINORITY) ............................ 74 INCREASE DETECTION CAPABILITIES AND COMPILE A SITUATIONAL PICTURE .................................................................... 75 STRENGTHEN CAPACITY AND EXPERTISE RELATED TO MANAGEMENT OF CYBER ATTACKS ................................................... 76 ESTABLISH A NATIONAL CYBER CRIME CENTRE ........................................................................................................ 77 ENSURE STRONG SPECIALIST CYBERCRIME UNITS IN THE POLICE DISTRICTS ..................................................................... 77 ENSURE AN ICT INFRASTRUCTURE TO SUPPORT POLICE CRIME PREVENTION................................................................... 78 ENSURE THE BALANCE BETWEEN PRIVACY AND A MORE SECURE SOCIETY ....................................................................... 79 COMMON COMPONENTS ............................................................................................................................... 80 21.1 21.2 21.3 22 INCREASED CYBER SECURITY COMPETENCE AT LOCAL AND REGIONAL LEVEL .................................................................... 70 STRENGTHEN EMERGENCY PREPAREDNESS AT REGIONAL AND LOCAL LEVEL.................................................................... 71 ESTABLISH A COMMON CLASSIFIED ICT INFRASTRUCTURE .......................................................................................... 72 ASSESS MEANS OF COMMUNICATION WITH THE PUBLIC............................................................................................. 72 ESTABLISH A NATIONAL FRAMEWORK TO ENSURE A COMPREHENSIVE ASSESSMENT OF VALUE CHAINS ................................. 82 CLARIFY REQUIREMENTS FOR BUSINESS MANAGEMENT SYSTEMS ................................................................................. 83 CONSCIOUS USE OF STANDARDS ........................................................................................................................... 84 CLARIFY THE MINISTRY OF JUSTICE AND PUBLIC SECURITY’S ROLE AND AREA OF RESPONSIBILITY ....................................... 85 STRENGTHEN THE MINISTRY OF JUSTICE AND PUBLIC SECURITY’S POLICY INSTRUMENTS .................................................. 86 INCREASE CYBER SECURITY CAPACITY IN THE MINISTRY OF JUSTICE AND PUBLIC SECURITY ................................................ 88 ADAPT THE SUPERVISORY ACTIVITIES TO INCLUDE CYBER SECURITY ............................................................................... 88 AN ACCOUNT OF CYBER SECURITY SHOULD BE INCLUDED IN ANNUAL REPORTS................................................................ 89 INDUSTRIAL AND COMMERCIAL DEVELOPMENT AND CYBER SECURITY ........................................................................... 90 OUTSOURCING AND CLOUD SERVICES .................................................................................................................... 90 REGULATION OF CRYPTOGRAPHY .......................................................................................................................... 92 FINANCIAL AND ADMINISTRATIVE CONSEQUENCES ....................................................................................... 94