Successful implementation of the National Cyber Security Strategy requires leadership, commitment, proper governance and continuous measurement of cyber security performance in terms of improved cyber maturity and reduced exposure to cyber risks. Accordingly, the National Cyber Security Strategy is based on the following guiding principles: National Cyber Security Programme: National Leadership: Cyber Risk Management: The challenge in implementing the strategy mainly resides in the strong national leadership, therefore, Kuwait government is to form a National Cyber Security Committee which will report to the Council of Ministries. The committee works as a focal point for all cyber security activities and efforts across Kuwait. National Governance: Kuwait government is to form a National Governance Committee who will report to the National Cyber Security Committee. The responsibility of this committee is to ensure proper governance is practiced through the implementation of the strategy, as well to the following responsibilities: Run national risk management activities. Manage national cyber maturity measurement activities. To achieve the Strategy of national cyber security, a three-year programme will be developed which consists of all the initiatives and activities associated with the funding plan. As all ICT systems are vulnerable to cyber risks, a risk-based approach must be conducted continuously while applying the cyber security strategy to assess, prioritize, monitor and invest in appropriate cyber security activities. National Cyber Maturity Measurement: Is the tool to measure and report NCS improvement and maturity against an international cyber security maturity standard. Shared responsibilities: Cyber security is the responsibility of all government entities, the private sector, institutions and individuals. All must take actions Mandate to manage the National Cyber to secure their own ICT systems, protect the means of communication, and securely store Security Programme. critical information and respect the privacy of Develop and maintain national cyber other systems and users. security priorities. Working in close relation with government agencies, companies and institutions concerned with the National Cyber Security Strategy. Provide the National Cyber Security Committee with the strategic approach for the NCS. 27