Number of Activity activities PRIORITY ACTIVITIES Code P1.1 P1 Establishing a National Cyber Security Council P1.2 P1.3 P2.1 P2.2 P2.3 P2 Establishing a Body with operational cyber security capacities (either as a newly formed, independent body (agency, directory) or as a new organizational unit within existing state authority. P2.4 P2.5 P2.6 P3 Manner of implementation (Tasks) Precondition Defining the authority and competences of the National Cyber Security Council according to the National Cyber Security Strategy. Identification of a president and members of the National Cyber Security Council. Adopting a decision to establish a National Cyber Security Council (or extending the authority of the National ICT Council). Analysis of existing institutional cyber security capacities in order to identify the best infrastructure for the Body with operational cyber security capacities Establishing a Body with operational cyber security capacities and dividing activities with MKD-CIRT Priority Leading institution Collaborators Financial source Start date End date highest MISA Cyber Security working group / November 2018 December 2018 January 2019 June 2019 June 2019 January 2020 Identifying the required budget, infrastructure and human resources for the formation of the Body, as well as the means to provide the aforementioned resources. Assessment of the required legal changes and proposed amendment text Securing the necessary financial resources for the establishment of the Body. Deliver a proposal to the Government of RM for the establishment of the Body with operational cyber security capacities. P2.7 Adopting a legal framework supporting the establishment of the Body with operational cyber security capacities Conducting a Study to identify the Critical Information Infrastructure (CII) and other Important Information P3.1 Systems (IIS). Conducting a Study in order to be able to identify the Critical Information Infrastructure and Important Information Systems, and address the needs for transposition of EU regulation in this area. The study outputs should include: 1. identification of CII sectors 2. identification of authorities/ regulators for each sector 3. identification of operators for each sector 4. assessing the need to amend existing sector laws (lex generalis) for each of the identified sectors and provide recommendations. P1 P1 highest highest NCSC MISA, MKD-CIRT MF, line ministries Budget of RM line ministries, Owners of the CII and IIS, Universities Budget of RM and January 2019 donor help April 2019