6. Assessment of effectiveness of the Policy
Due to the innovative nature of this document, detailed indicators of implementation
of the provisions of the Policy will be developed following the risk assessment.
It is essential, from the entry into force of the Policy, for individual organizational
units to analyse and suggest indicators of the implementation of tasks on whose basis
information will be aggregated and global indicators of the objectives of this document
will be developed. It is assumed that the presented proposals of global indicators will be
used in updating the Policy and allow for assessment of the degree of implementation
of the planned objectives and tasks related to the security of CRP.
The degree of implementation of projects related to the implementation of the
strategic objective and specific objectives of the Policy will be evaluated within the
specific projects by the following criteria:
1) the degree of saturation of all organizational units which have security systems
and early warning systems in relation to the number of public administration
employees;
2) the level of integration:
a) the method and procedure for the exchange of information between teams,
ensuring confidentiality, integrity and availability,
b) the possibilities for and scope of achieving a common, dynamic imagery of
cyberspace covered by this Policy,
3) the degree of standardization – the degree of implementation of the standards,
categories of incidents and procedures;
4) the degree of equipping the systems in a comprehensive anti-virus software,
firewalls, anti-spam with relation to those requiring protection (identification
of resources).
The following measures will be used to evaluate the effectiveness of specific
projects, created on the basis of this Policy:
1. Effectiveness measures – measure the degree of achieving the objectives and can be
applied at all levels of task classification.
Sample effectiveness measure:
– the number of closed incidents in relation to the total number of categorized
incidents.
2. Product measures – reflect performance of a given task in a short period and show
specific goods and services produced by the public sector. Product measures –
measure the degree of implementation of operational objectives.
Sample product measures:
– the number of responses to incidents reported by citizens,
Page 22 of 24
Ministry of Administration and Digitisation, Internal Security Agency