4. Implementation and delivery mechanisms of the provisions of the document It is assumed that the objectives and principles of the Policy will be executed taking into account risk assessment and implemented within the specific projects. 4.1. Supervision and coordination of the implementation Due to the international nature of the Policy the body supervising its implementation is the Council of Ministers. The entity coordinating the implementation of the Policy, on behalf of the Council of Ministers, is the minister responsible for informatization. 4.2. The National Response System for Computer Security Incidents in CRP The government of the Republic of Poland establishes a three-level National Response System for Computer Security Incidents in CRP: 1) Level I – the level of coordination – the minister responsible for informatization; 2) Level II – computer incident response: a) the Governmental Computer Security Incident Response Team CERT.GOV.PL – at the same time performing the tasks of the main national team responsible for coordinating the process of handling computer incidents in CRP, b) Departmental Centre for Security Management of ICT Networks and Services performing tasks in the military sphere, 3) Level III – the level of implementation – administrators responsible for individual ICT systems operating in cyberspace. The established response system ensures the exchange of information between teams of government administration and CERTs (CERT Poland, TP CERT, PIONIERCERT), CSIRT, ABUSE, telecommunications companies, within the meaning of the Act of 16 July 2004 – Telecommunications Law (OJ No. 171, item 1800, as amended), and purveyors providing services by electronic means, within the meaning of the Act of 18 July 2002 on providing services by electronic means (OJ No. 144, item 1204, as amended), in accordance with applicable laws, and in particular in accordance with the Act of 29 August 1997 on the protection of personal data (OJ of 2002, No. 101, item 926, as amended) and the Act of 5 August 2010 on the protection of classified information (OJ No. 182, item 1228). Page 18 of 24 Ministry of Administration and Digitisation, Internal Security Agency

Select target paragraph3