12 industry and government to concentrate their cyber security efforts where they will have the most impact. International Cooperation: The UK both contributed to the development of and participated in the European Union Agency for Network and Information Security Cyber Europe 2018 exercise for the aviation sector. The exercise drew participants from 30 countries and enabled each to test their national incident response procedures as well as their ability to coordinate with European partners in the event of a widespread cyber incident. Developing our Workforce: The UK is committed to building a cyber skills pipeline from school age through to Masters Degrees, apprenticeships and beyond. A key pillar of our national strategy remains the development of a cyber security workforce (in the private as well as the public sector). Over 25,000 young people have engaged with the NCSC’s CyberFirst initiatives since 2016, including free courses, competition bursaries and apprenticeships. This activity is supported by work across government including the publication of a draft national cyber security skills strategy13, working with schools, universities and the existing workforce to develop, train and retrain skills in cybersecurity: We supported the development of the recent OECD Recommendation on Digital Security of Critical Activities, which aims to modernise the protection of critical information infrastructure protection (CIIP) in the era of digital transformation by applying the OECD digital security risk management approach to the protection of critical economic and social activities. In the summer of 2019, we will launch a comprehensive review of the UK’s cyber regulatory and incentives landscape, including NIS. This builds on our last review in 2016, to understand what has worked well, and where further action is needed to drive the necessary improvements in cyber security behaviours and practices. Norm 8 (UNGGE 2015 report, paragraph 13h) - States should respond to appropriate requests for assistance by another State whose critical infrastructure is subject to malicious ICT acts. States should also respond to appropriate requests to mitigate malicious ICT activity aimed at another State’s critical infrastructure emanating from their territory, taking into account due regard for sovereignty; The National Cyber Security Centre’s international partnerships help to share information and combat common cyber threats. The United Kingdom is proactive in establishing constructive bilateral cooperation with allies and partners as well as NATO. This cooperation includes sharing of best practices, including on policy and advice, sharing assessments and our understanding of threats. The UK recognises that the increasingly global nature of cyber incidents requires strong relationships 13 https://www.gov.uk/government/publications/cyber-security-skills-strategy/initial-national-cybersecurity-skills-strategy-increasing-the-uks-cyber-security-capability-a-call-for-views-executivesummary