ANNEX 2 Cybersecurity Capacity Maturity Model for Nations (CMM) - Belize comparative table 2016 and 2018 In that regard the Cybersecurity Capacity Maturity Model for Nations (CMM) was implemented in 2016 and again in 2018 for Belize. The assessment tool is used to measure the level of maturity of a nation in regards to cybersecurity across five different dimensions (see sidebar “Dimensions of the Cybersecurity Maturity Model”.) Each dimension provides several indicators of cyber capacity (an average of 10 indicators per dimension) in order for a nation to understand the stage of maturity in each specific consideration. These indicators are measured across five levels of maturity: Start-up, Formative, Established, Strategic and Dynamic. The stages of maturity vary from an initial stage of maturity where a nation may have just begun to consider cybersecurity, through to a dynamic stage where a nation is able to quickly adapt to changes in the cybersecurity landscape, by balancing threat, vulnerability, risk, economic strategy or changing international needs, while at the same time improving its posture and readiness to face new threats. Cybersecurity Policy and Strategy Identifying whether countries have comprehensive national cybersecurity policies that identify stakeholders’ roles, responsibilities in order to ensure a coordinate and cohesive cybersecurity framework including their cyber defense outlook. Cyber Culture and Society Understanding the different mind-sets in terms of cybersecurity (government, private sector and society), identifying national cybersecurity awareness campaigns and privacy policies, as well as how is the level of trust in the use of online services (e-government and e-commerce). Cybersecurity Education, Training, and Skills Identifying the availability of training and education in cybersecurity and the availability of skilled labor force in this field. Legal and Regulatory Frameworks Legislation related to information and communications technologies (ICT), privacy, human rights, data protection, as well as substantive and procedural cybercrime law. Standards, Organizations and Technologies The adoption of standards, the presence of incident response teams and command and control centers, national infrastructure resilience, critical national infrastructure protection, crisis management, cybersecurity insurance, and digital redundancy.