Part Three The Strategy “ • A means of proposing legislative or regulatory updates, based on relevant research or lessons learnt • A potential agent for future economic growth in Malta within the cyber security domain • A complementary mechanism to a collective approach for sharing cyber security knowledge and intelligence, proposed as Measure 3 (i). It is highly recommended that a concerted, ongoing strategic approach is undertaken, potentially through a nationwide Communications strategy for cyber security; aimed at addressing the various strata of society, business and public sector along with their corresponding needs, expectations, and potential ICTs and concepts applied The establishment could potentially be enabled through: • Agreement of overseas cooperation on related matters • Related EU supporting initiatives • Inclusion of existing internationally certified local expertise in cyber security. iii. Ensure relevant education and training to public sector staff and other stakeholders50 Training and education on cyber security is one key priority within the public sector, especially given the sector’s wider extensive use of ICT and sensitive data, compared to other sectors. In any office environment it needs to be kept in view, that technology controls are not sufficient to protect data from related cyber security threats. The controls need to go hand in hand with human resource, awareness and employee guidance programs51. ” • Ensuring the necessary legal safeguards to protect both the student as well as the teaching profession on cyber related challenges such as cyber bullying. Curricular developments and academic programmes aimed at establishing a cyber security focus47 is to be further encouraged, seeking further creative ways of instilling such education48 in the process. The development of cyber security expertise within the public sector is another key area that merits particular attention. In the process, it also needs to be ensured that a comprehensive list of public sector professionals certified under internationally recognised certification programs in cyber security is established and maintained52. Furthermore, it needs to be ensured that ICT personnel are trained so as to enable them to recognise cyber incidents, to detect anomalies in their ICT systems and to respond and to report them accordingly. ii. Explore possibility of establishing a Cyber Centre of Excellence The establishment of a cyber centre of excellence may serve as: • A form of implementation of Action 60 – Building national capacity in specialist skill sets of Digital Malta , refered to in the previous measure • A training base for cyber security expertise. • Having a maintained comprehensive list of professionals certified under internationally recognised certification programs in cyber security49 • A source of promotion of related best practice iv. Foster application of research and development on cyber security Such measure aims to ensure cyber security as among key research priorities. It effectively calls for encouragement and support for research in any 25 MALTA CYBER SECURITY STRATEGY 2016

Select target paragraph3