Country: Cyprus QUESTION RESPONSE EXPLANATORY TEXT SECTOR-SPECIFIC CYBERSECURITY PLANS Forums such as the CYpBER conference <www.cypber.com> indicate that the energy and oil sector remains a significant area of cooperation between the sector and government. However no sector-specific plans have been published. 1. Is there a joint public-private sector plan that addresses cybersecurity? 2. Have sector-specific security priorities been defined? 6 There has been some discussion of cybersecurity risks in the energy sector, which appears to be a priority area for Cyprus. As of August 2014, work in this field is inprogress and there is no clear definition or priority <www.enisa.europa.eu/activities/ Resilience-and-CIIP/cyber-crisis-cooperation/conference/2nd-enisa-conference/ presentations/costas-efthymiou-ocecpr-cyprus-2013-the-cyprus.pdf>. 3. Have any sector-specific cybersecurity risk assessments been conducted? 6 Cyprus is undertaking a national Cyber Risk Assessment that includes sector-specific risks. As of August 2014, this work is in progress <www.enisa.europa.eu/activities/ Resilience-and-CIIP/cyber-crisis-cooperation/conference/2nd-enisa-conference/ presentations/costas-efthymiou-ocecpr-cyprus-2013-the-cyprus.pdf>. 6 Cyprus does not have a cybersecurity education program in place. Cybersecurity education, however, may be included in the recently announced national Cybersecurity Strategy (the strategy is not yet available to the public). EDUCATION 1. Is there an education strategy to enhance cybersecurity knowledge and increase cybersecurity awareness of the public from a young age? EU Cybersecurity Dashboard www.bsa.org/EUcybersecurity | 3