Objective 2:Safeguard and continuously maintain the security of national assets, including critical infrastructure, national data, communication technologies and internet in the State of Kuwait Information and communication technologies are critical to Kuwait’s national interests, therefore Kuwait government needs specific attention towards ensuring secure and resilient communication and information technologies for all government agencies, companies and institutions, as well as the whole community. Kuwaiti Government recognizes that it must be proactive in identifying and analyzing cyber threats and risks, and accordingly, developing the appropriate means of proactive defenses, mitigation strategies, and continuous monitoring of incident responses. In addition, the government acknowledges the importance of having a national cyber security framework comprised of standards, policies and procedures, to be implemented by all critical national institutions, and ensure that they do not rely on security technologies alone. Building at the same time, national capabilities that can deal with cyber security issues with the assistance of international expertise. Under this objective, the following activities must be undertaken: Develop and maintain a risk assessment and threats analysis for critical national infrastructures. Develop and promote the means of defenses of the State of Kuwait’s civil and military networks to limit the possibilities of electronic attacks. Establish and maintain National Cyber Security CenterNCSC including Security Operation Center (SOC) and Computer Emergency Response Team (CERT) functions to serve all government agencies, private sector and individuals, in order to promote the country’s ability to protect national interests from possible cyberattacks. Establish and maintain Security Operation Center (SOC) in the vital sectors of the state of Kuwait to provide a continuous monitoring of cyber security events, and develop the proper means of response. Provide continuous monitoring mechanisms for the critical national infrastructures and information. Develop and maintain national incident response and business continuity plans to manage crises of cyber security for the State of Kuwait. Develop and maintain national cyber security policies and controls for the national critical networks, electronic services, and critical ICT systems. Develop legislation for laws of cybercrime and cyber security to keep pace with technological evolution Monitor the compliance with cyber security regulations and national policies. Cooperate with the private sector to identify and implement cyber security controls that ensures protection from attacks and various cybercrimes. Develop national capabilities in different cyber security domains such as the fight against cybercrime, implementation and monitoring of policies and regulations, and emergency response. Develop national standards and criteria to classify information security technology. 19