effectiveness of information sharing. Appendix： 1. Outline of Cyber Exercises 2. Business Continuity Planning 3. List of References on Best Practices of CIIP Critical IT resources means IT resources that have high interdependency with critical business functions, and indispensable for marinating critical business functions. ii For example, Japan established ‘The Basic Policy of CIIP’ which describes basic idea of CIIP and shared action plan between the government and critical infrastructure industries, and also provides ‘guideline to establish safety standards for the information security regarding CIIP’ for the industries, and ‘Management Standards for Information Security Measures for the Central Government Computer Systems’ and ‘Technical Standards for Information Security Measures for the Central Government Computer Systems’ for the government. i