CYBERSECURITY STRATEGY OF THE REPUBLIC OF CYPRUS 2012 In parallel with this costing, the actions described in this document will be prioritised (independently of their estimated cost), as to their importance and criticality in relation to the results that they are expected to provide towards a safer electronic environment in the Republic of Cyprus. It is noted that this activity will be undertaken independently of the costing process for the actions that is described above. 4.3 Planning of Actions 2012 - 2015 The activities mentioned in sections 4.1 and 4.2 are important so that the correct planning of the strategic response actions can move forward, based on the resources that the State will make available for the implementation of this Strategy. This planning will be undertaken based on the results of the detailed assessment, costing and prioritisation of the actions, so that the implementation of the Strategic Response as a whole can be achieved in the best and most effective way possible, given available resources. The result of this process will be a detailed timeline which will allow the monitoring of the implementation status of all of the current Strategy’s actions. 4.4 Results Assessment and Strategy Review To achieve an effective strategic response, its implementation progress must be regularly and strictly reviewed. Towards this end, the results of the implementation of the measures and provisions included in the strategy actions will be analysed quantitatively and qualitatively accordingly. A proper cybersecurity strategy cannot be considered to be a ‘final plan’; on the contrary, its implementation must be observed and updated at regular intervals. This review process needs to take into consideration the assessment results, as well as new threats that appear (and will continue to appear) in cyberspace and any other new conditions that manifest in this area. The detailed expansion of the strategy actions, as described in section 4.1, will include indicators and criteria for assessing the performance of each action, where feasible, and the results of this assessment will allow the proper review of the Strategy in the future, with substantial benefits to Cypriot society. 30

Select target paragraph3