- - In doing so, States should incorporate perspectives from all relevant and affected stakeholders at the earliest stages of cyber security policy development and implementations to safeguard a holistic consideration of the implications of cybersecurity measures. Civil society engagement is particularly important given their role as a key actor in promoting State compliance with their human rights obligations and commitments. Take into consideration that individuals have the same rights online as they do offline, and should bear in mind the differential threats that women and individuals belonging to minority and vulnerable groups may experience in the context of human rights. Conduct gender audits of national or regional cyber security policies to identify areas for improvement. Consider incorporating measures to address the human rights implications of ICTs in their National Action Plans on Business and Human Rights. f. A State should not conduct or knowingly support ICT activity contrary to its obligations under international law that intentionally damages critical infrastructure or otherwise impairs the use and operation of critical infrastructure to provide services to the public (2015 ¶13(f)). i. Each State determines which infrastructures or sectors it deems critical, in accordance with national priorities and methods of categorization of critical infrastructure. Examples of critical infrastructure sectors that provide essential public services can include energy, water, sanitation, health, education, finance, transport, telecommunications and crisis response organizations. Critical infrastructure could also include technical infrastructure essential to elections, referenda, or plebiscites and technical infrastructure essential to the general availability or integrity of the Internet. Highlighting these infrastructures as examples by no means precludes States from designating other infrastructures as critical, nor does it condone malicious activity against categories of critical infrastructure that are not specified above. ii. States should consider the potentially harmful effects of their ICT activities on technical infrastructure essential to the general availability or integrity of the Internet. g. States should take appropriate measures to protect their critical infrastructure from ICT threats, taking into account General Assembly resolution 58/199 on the creation of a global culture of cybersecurity and the protection of critical information infrastructures, and other relevant resolutions (2015 ¶13(g)). i. In order to contribute to a global culture of cybersecurity, States should consider, as appropriate, sharing information on best practices for protecting critical infrastructures, including all elements identified in this resolution and on: Baseline security requirements; Incident notification procedures; Incident handling tools and methodologies; Emergency resilience; and Lessons learned from previous incidents. ii. Capacity-building and other measures to build a global culture of cybersecurity should be developed inclusively and seek to address the gender dimensions of cyber security. iii. Given the varied and distributed nature of critical infrastructure ownership, States should, as appropriate, and in consultation with the relevant stakeholders, promote minimum standards for the security of critical infrastructures and promote cooperation with the private sector, academia and the technical community in critical infrastructure protection efforts. iv. States should, as appropriate, participate in voluntary risk assessment and business continuity (resilience, recovery and contingency) planning initiatives involving other stakeholders and aimed at enhancing the security and resilience of critical infrastructure that provides services regionally or internationally against existing and emerging threats. 13