Number of Activity activities PRIORITY ACTIVITIES 1.3 1.4 Identification and protection of CII (Critical information infrastructure) and IIS (Other important systems) Code Manner of implementation (Tasks) Precondition Priority Leading institution Collaborators Financial source Start date End date 1.3.3 Propositions for minimal technical and organizational measures for information security for each identified sector. P3, 1.3.1 high OBCS*, MISA MKD-CIRT and all other relevant stakeholders Budget of RM 2020 2021 1.3.4 Harmonization and adoption of Sectoral Acts (material laws) with the new law on information security. 1.2, P3, 1.3.1 high MISA line ministries Budget of RM 2020 2021 CII operators line ministries organizational and 2020 institutional budgets continuous OBCS* MKD-CIRT, line ministries, Universities, owners of the CII and IIS Budget of RM 2020 2022 NCSC, OBCS* line ministries, Universities and Budget of RM the owners of the CII and IIS 2020 2022 OBCS* MKD-CIRT, DPDP, line ministries and Budget of RM the owners of the CII and IIS 2020 2022 2020 2022 1.3.5 Harmonization of internal Acts of CII operators 1.3.1, 1,3,4 1.3.6 Conducting continuous analysis, perceiving the real state and defining measures and recommendations for raising the level of cyber security for institutions in charge of CII and IIS management. P3, 1.3.1, 1.3.4, 1.3.5 1.3.7 Continuous improvement of resilience, integrity and reliability P1, 1.3.6 of CII and IIS. 1.3.8 Defining precise procedures for data storage and protection, processed in CII and IIS systems and conducting continuous analysis and audit on the effectiveness of the defined procedures. 1.3.9 Conducting regular audits in order to detect threats and risks of information systems and networks that are part of CII and IIS. P2, P3 high OBCS* MKD-CIRT, Universitites, line ministries and the Budget of RM owners of the CII and IIS 1.3.10 Development and periodic testing of cyber attacks and cyber defence plans/scenarios P2,P3 high OBCS* all stakeholders constituting the national defence Budget of RM 2020 2022 1.4.1 Monitoring the latest cyber security threats. P2 high MKD-CIRT, OBCS* all stakeholders Budget of RM 2019 continuous 1.4.2 Monitoring and implementing the latest and best hardware and software solutions in response to cyber incidents. P2 high OBCS* all stakeholders Budget of RM 2020 continuous 1.4.3 Continuous advancement of technological and organizational measures in order to effectively handle cyber threats. P2 high MKD-CIRT, OBCS* all stakeholders Budget of RM 2019 continuous 1.4.4 Development of a methodology for cyber threats risk assessment at national level. P1 high NCSC MKD-CIRT, all stakeholders Budget of RM 2019 2022 Utilization of the best solutions for cyber incident prevention and response with the purpose of protecting the national security interests. P2, P3, 1.3.1 high high high high