CYBERSECURITY STRATEGY OF THE REPUBLIC OF CYPRUS 2012 4. NEXT STEPS 4.1 Immediate Actions – Phase A It has been deemed necessary that a number of the actions, that have been identified and described in this document, need to start immediately, independently of the implementation of the remaining provisions of the strategic response. Taking into account the activities that are prioritised in section 3.2, and their associated actions described herein, the following activities must begin in 2012: the identification of critical information infrastructures (section 3.6), the development of a National Contingency Plan for these infrastructures (section 3.14), ensuring the full operation of Computer Emergency Response Teams for incidents related to network and information security (CSIRT/CERT) and the planning and participation of Cyprus in the pan-European exercise Cyber Europe 2012 (section 3.10). Specifically, the actions to be performed within Phase A are as follows:           Action 1 – Collaboration Framework Action 2 - Organisational Structure Action 3 (partial implementation) – Creating of Working Groups Action 5 (partial implementation) – Survey of the Private Sector Action 7 - Identification of Critical Information Infrastructures Action 10 – Ensuring the Full Operation of the CERTs Action 12 – National and International Exercises Action 15 – International Cooperation Action 16 - Development of a National Contingency Plan for Critical Information Infrastructures Action 17 – (partial implementation) Modelling and Analysis of Interdependencies. This document provides synopses of the most important actions that have been identified for a coherent strategic response, so that cyberspace (and more generally the networks and information that are used on a daily basis) is secured, across the whole of Cypriot society. However, for correct implementation, each action needs to be analysed and expanded in detail, so that all associated activities can be identified. A detailed analysis of each of the actions in the strategic response will follow, as well as the identification of the resources and processes that will be needed for the implementation. 4.2 Cost of Implementation In the context of detailed assessment and analysis of the individual actions, to the point to which it is feasible, the cost of implementing each action, as well as the time periods where specific budget items will be required, will be identified. This costing process will be undertaken in cooperation with the competent authorities, and always bearing in mind the importance of each action and range of its application, so that the costing can be as realistic as possible. 29