CYBERSECURITY STRATEGY OF THE REPUBLIC OF CYPRUS 2012 processes and measures that will be taken when a large scale crisis affects the operations of critical information infrastructures (as will be defined and identified in the relevant action described in section 3.6) in the Republic of Cyprus to a significant degree. The creation and development of the National Contingency Plan will be performed in tandem with the identification of critical information infrastructures in the Republic of Cyprus, and will include the following activities:         Designation of categories and hierarchies of critical infrastructures, based on their contribution to the operation of vital communications and information services, Designation of the level of protection required for each part of this infrastructure (e.g. redundancy, alternative routes, physical security, etc.) to minimise the effects of its potential damage or destruction, Development of early warning systems and processes to monitor critical infrastructures, potentially with the help of the CERTs, Creation of (or improvement of already existing) emergency communications networks which are independent from the main networks, and if possible, using alternative means of communication entirely (e.g. wired, mobile and satellite networks), Development of comprehensive communications and management processes, between critical information infrastructure operators, for the handling of a potential crisis and to achieve constructive collaboration between them, Organisation of regular national cyber exercises with realistic crisis scenarios (see section 3.10) to test and improve the processes developed above, Identification of all the critical information infrastructures that are connected to other countries, or which provide services that could affect information infrastructures in other countries, Identification of available resources in terms of equipment and infrastructure, where deemed useful or necessary, between the relevant departments and services, and the creation of synergies for covering each other’s resources and services in emergencies. ENISA has prepared a comprehensive document8 which describes best practices for the development of National Contingency Plans for critical information infrastructures, and which will be taken into account for the development of the related plan for the Republic of Cyprus; it emphasises the importance of a comprehensive cybersecurity and protection of critical information infrastructures strategy as a basis. It is noted that these above provisions, where needed, will be leveraged for the contribution of Cyprus to the development of a wider European Contingency Plan for the protection of European critical information infrastructures, whose abnormal operation would have negative impact in more than one member state. 8 ENISA Good Practice Guide on National Contingency Plans for Critical Information Infrastructure 27