Coordinating Institutions: Objectives: Feasibility assessment of data retenion/digital Lead: PUC evidence regulation conducted Partners: IT Service Providers, Attorney General, CITO Activities: 1.1 Conduct consultation with all relevant Timeline: stakeholders with the view of identifying gaps and Medium Term recommendations for drafting instructions for new legislation Objectives: Coordinating Institutions: Minimum security standards included for Lead: PUC information systems used in critical infrastructure Partners: Ministries with responsibility for: * Immigration Activities: * Tourism 2.1 |dentify critical information infrastructure for * National Security minimum standards — incidents response 2.2 Develop minimum security standards for *CITO Central Bank Stakeholders from: information systems used in critical infrastructure * BEL — incidents response * BWS 2.3 Establish a working group with the mandate + Energy to review common * Transport threats and provide recommendation for standards according to * Health industry. * Communication * IT Service Provider Timeline: Long Term Objectives: Coordinating Institutions: Drafting Instruction for Legislation to address Lead: CITO cybercrime submitted to Cabinet for approva Partners: NSCS Attorney General, Activities: Ministry with responsibility for National Security, 3.1 Establish a legal working group to provide recommendation for drafting instructions for a PUC draft Cybercrime Bill Timeline: 3.2 Consult with international organizations such Medium Term as the Council of Europe and Organization of American States for technical assistance for the development of the Cybercrime Bill 3.3 National Security Council Secretariat (NSCS) to request AG to draft cybercrime bill and consult with key stakeholders for input National Cybersecurity Strategy - Towards A Secure Cyberspace 2020-2023