Cyber Security Strategy 2021-2024 Ministry of Defence of Georgia Involvement in the high-level cyber exercises is needed to strengthen the practical skills of the cyber security technical team. These activities are the best way to increase competence, which by simulating real-time cyber crisis scenarios, contributes to the capacity building. It is important to focus on different types of projects concentrating on cyber security issues. Active participation in projects, on the one hand, facilitates sharing of best practices and allows the knowledge and experience gained to be used on an everyday basis. Goal 2: Institutionalize processes and increase governance efficiency (Process) Some of the ongoing processes within the Ministry need improvement and institutional refinement. Fragmentary planning and management mismanage processes, which in turn affects the effectiveness of a particular goal or task. Goal 2 ensures improvement and adequate updating, planning and execution of processes based on risk analysis. Objective 2.1. Optimizing governance via risk-based planning Proactive planning of processes is critically important in order to strengthen country's defense capabilities. Therefore, it is important to have clear and distinct cyber-operational plans or scenarios, which will create a proper precondition for the active and effective use of cyber elements in a war or crisis situation. The Ministry of Defence of Georgia considers the introduction of information security standards as one of the most important areas of cyber and information security in the field of defence. Internationally recognized standards, enhance the security of information assets and give opportunity to manage risks and incidents. Information assets, risk management and methodology, as well as, development and implementation of other important rules and policies, will further enhance the degree of infrastructure protection of defence system. In addition, introduction of an information security systems in the critical information system subjects of defence sphere, represents an important factor for strengthening cyber security. Periodic assessment/audit of information and communication systems is equally important. In case of timely detection of vulnerable areas and adequate response to them, it is possible to avoid disruption of network infrastructure and disruption of system integrity. 9