4-3 Establishment of guidelines for security standards Expectation for To establish guidelines for security standards to encourage Governments government and CII owners/operators to establish their own security standards. To periodically review security standard guidelines to see if they are not outdated. To decide items to be included in the guidelines and security standards (examples are described in the CIIP Guidelines 22). Possible Issues Lack of examples/templates. and Obstacles Lack of human resources/information. Conflict among stakeholders (Ministries/Agencies, CII owners/operators, etc.). Possible If you need examples/templates, please refer to the Countermeasures reference material on the CIIP Guidelines for security to Overcome standards. Issues and It is desirable to put periodical review as a responsibility of Obstacles the Government in the security standards guidelines so that you can have enough human resources or organizations within the Government and the CII owners/operators, etc. If there is conflict of interest between stakeholders, following are the examples to solve the problem: Establish an organization that has enough authority to coordinate conflicts among stakeholders. Have series of intensive discussions in which every stakeholder can freely discuss their opinions. Give enough authorities to certain regulatory Ministries/Agencies to solve the conflicts. 8