6. Assessment of effectiveness of the Policy Due to the innovative nature of this document, detailed indicators of implementation of the provisions of the Policy will be developed following the risk assessment. It is essential, from the entry into force of the Policy, for individual organizational units to analyse and suggest indicators of the implementation of tasks on whose basis information will be aggregated and global indicators of the objectives of this document will be developed. It is assumed that the presented proposals of global indicators will be used in updating the Policy and allow for assessment of the degree of implementation of the planned objectives and tasks related to the security of CRP. The degree of implementation of projects related to the implementation of the strategic objective and specific objectives of the Policy will be evaluated within the specific projects by the following criteria: 1) the degree of saturation of all organizational units which have security systems and early warning systems in relation to the number of public administration employees; 2) the level of integration: a) the method and procedure for the exchange of information between teams, ensuring confidentiality, integrity and availability, b) the possibilities for and scope of achieving a common, dynamic imagery of cyberspace covered by this Policy, 3) the degree of standardization – the degree of implementation of the standards, categories of incidents and procedures; 4) the degree of equipping the systems in a comprehensive anti-virus software, firewalls, anti-spam with relation to those requiring protection (identification of resources). The following measures will be used to evaluate the effectiveness of specific projects, created on the basis of this Policy: 1. Effectiveness measures – measure the degree of achieving the objectives and can be applied at all levels of task classification. Sample effectiveness measure: – the number of closed incidents in relation to the total number of categorized incidents. 2. Product measures – reflect performance of a given task in a short period and show specific goods and services produced by the public sector. Product measures – measure the degree of implementation of operational objectives. Sample product measures: – the number of responses to incidents reported by citizens, Page 22 of 24 Ministry of Administration and Digitisation, Internal Security Agency

Select target paragraph3