cyber related legal and regulatory requirements needed to execute the National CyberSecurity Strategy. ● Strategic planning to determine future requirements that could influence strategic cyber direction, as well as testing current capabilities to provide assurance that expected levels of cyber security is in place, or to identify areas for improvement. ‫ز‬٤‫ش حُالصٓش ُظ٘ل‬٤ٗ‫زشح‬٤‫حُغ‬ ● Assessing cyber tools, products and services for their suitability for use and developing new tools and approaches for use by cyber professionals across the country; ‫ش‬٤ٗ‫زشح‬٤‫حُخذٓخص حُغ‬ٝ ‫حُٔ٘ظـخص‬ٝ ‫حص‬ٝ‫ْ حألد‬٤٤‫● طو‬ ‫حص‬ٝ‫ش أد‬٣ٞ‫طط‬ٝ ّ‫خ ُالعظخذح‬ٜ‫غ ٓالءٓظ‬٤‫ٖٓ ك‬ ٖ٤٤ُٜ٘ٔ‫خ ٖٓ هزَ ح‬ٜٓ‫ذس العظخذح‬٣‫خص ؿذ‬٤‫ـ‬ٜ٘ٓٝ .‫ حٌُِٔٔش‬٢‫ ك‬٢ٗ‫زشح‬٤‫ حُٔـخٍ حُغ‬٢‫ٖ ك‬٤‫حُٔخظظ‬ ● Developing good guidance and standards to set out ‫ذ‬٣‫لش ُظلذ‬٤‫حإلسشخدحص حُظل‬ٝ ‫ش‬٤٣‫ش حُٔؼخ‬٣ٞ‫● طط‬ .٢ٗ‫زشح‬٤‫غ ػ٘خطش حألٖٓ حُغ‬٤ٔ‫هؼخص ُـ‬ٞ‫حُظ‬ expectations for all elements of cyber security; ● Identifying critical national assets that could be threatened by cyber incidents causing significant impact and conducting and maintaining risk assessments of these assets to identify and implement prioritised measures to manage identified risks; ● Developing a clear understanding of the cyber environment in which national and private sector organisations are operating to support threat awareness and cyber security measures; ● Providing mechanisms to collate and disseminate cyber-related alerts to end user organisations, so that organisations have as much opportunity as possible to manage the impact of cyber incidents; ● Defining and implementing a consistent and effective approach to the management of cyberrelated incidents to ensure that organisations are able to contain them and taking a leadership role where appropriate; ● Developing the national and organisational capabilities to respond quickly to cyber incidents through improving the tools, people and processes that need to act whilst events are still happening; ● Providing technical and forensic investigative techniques for cyber related incidents that can be legally admissible where necessary; ● Identifying and mitigating the people related risks to information assets, including those given authorised access to those assets; National Cyber Security Strategy 2018-2023 ‫ش‬٤٘ٓ‫س حأل‬ٞٓ‫رخأل‬ .‫ش‬٤‫ـ‬٤‫حالعظشحط‬ ‫ذ حُٔظطِزخص‬٣‫ ُظلذ‬٢‫ـ‬٤‫ؾ حالعظشحط‬٤‫● حُظخط‬ ٖٓ‫خص حأل‬ٛ‫ حطـخ‬٠ِ‫ هذ طئػش ػ‬٢‫ش حُظ‬٤ِ‫حُٔغظوز‬ ٖٓ ‫ حُظلون‬٠ُ‫ رخإلػخكش ا‬٢‫ـ‬٤‫ حالعظشحط‬٢ٗ‫زشح‬٤‫حُغ‬ ‫خص‬٣ٞ‫َ حُٔغظ‬٤‫ش ُؼٔخٕ طلؼ‬٤ُ‫خص حُلخ‬٤ٗ‫حإلٌٓخ‬ ‫ذ ٓـخالص‬٣‫ ُظلذ‬ٝ‫ أ‬٢ٗ‫زشح‬٤‫هؼش ٖٓ حألٖٓ حُغ‬ٞ‫حُٔظ‬ .‫خ‬ٜ٤‫ش ك‬٣ٞ‫حُظط‬ ‫ذدَّس‬ُٜٔ ُ‫ش حُلغخعش ح‬٤٘‫ؽ‬ُٞ‫ٍ ح‬ٞ‫ذ حألط‬٣‫● طلذ‬ ‫ادحٓش‬ٝ ١‫ش‬ٛٞ‫ش رحص حألػش حُـ‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫رخُل‬ ‫خ طِي‬ُٜ ‫ طظؼشع‬٢‫ْ ُِٔخخؽش حُظ‬٤٤‫اؿشحء طو‬ ‫ش رحص‬٤‫ز حُظذحر‬٤‫ط٘ل‬ٝ ‫ذ‬٣‫ٍ ٖٓ أؿَ طلذ‬ٞ‫حألط‬ .‫ش إلدحسس حُٔخخؽش حُ ُٔلذدس‬٣ُٞٝ‫حأل‬ َٔ‫ طؼ‬٢‫ش حُظ‬٤ٗ‫زشح‬٤‫جش حُغ‬٤‫حػق ُِز‬ٝ ْٜ‫ش ك‬٣ٞ‫● طط‬ ‫رُي‬ٝ ‫حُخخص‬ٝ ّ‫ٖ حُؼخ‬٤‫خ ٓئعغخص حُوطخػ‬ٜ٤‫ك‬ ‫ش‬٤٘ٓ‫ش حأل‬٤‫حُظذحر‬ٝ ‫ذحص‬٣‫ذ‬ٜ‫ رخُظ‬٢‫ػ‬ُٞ‫خدس ح‬٣‫ُض‬ .‫ش‬٤ٗ‫زشح‬٤‫حُغ‬ ‫ش‬٤ٗ‫زشح‬٤‫خص حُغ‬ٜ٤‫ٗشش حُظ٘ز‬ٝ ‫خص ُـٔغ‬٤ُ‫ش آ‬٤‫ك‬ٞ‫● ط‬ ‫ طؼذ ٓغظخذٓخ‬٢‫ حُٔئعغخص حُظ‬٢‫ظل‬ٞٓ ‫ٌُخكش‬ ‫ش ٖٓ ادحسس‬٤٘‫ؽ‬ُٞ‫ٌُٖٔ حُٔئعغخص ح‬٣ ‫ ٓٔخ‬،‫خ‬٤‫خث‬ٜٗ .ٌٖٔٓ ‫ كذ‬٠‫ أهظ‬٠ُ‫ش ا‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫آػخس حُل‬ ‫كؼخُش إلدحسس‬ٝ ‫ش ٓظّغوش‬٤‫ـ‬ٜ٘ٓ ‫ز‬٤‫ط٘ل‬ٝ ‫ػغ‬ٝ ● ٠ِ‫ش ُؼٔخٕ هذسس حُٔئعغخص ػ‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫حُل‬ ‫ؼٔخ‬٤‫ ك‬١‫خد‬٤‫س حُو‬ٝ‫حطخخر حُذ‬ٝ ‫حدع‬ٞ‫حء طِي حُل‬ٞ‫حكظ‬ .‫ُضّ حألٓش‬ َ‫ش ٖٓ أؿ‬٤‫حُٔئعغ‬ٝ ‫ش‬٤٘‫ؽ‬ُٞ‫خص ح‬٤ٗ‫ش حإلٌٓخ‬٣ٞ‫● طط‬ ،‫ش‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫ؼش ُِل‬٣‫ن حالعظـخرش حُغش‬٤‫طلو‬ َ٤ٛ‫طؤ‬ٝ ‫حص‬ٝ‫ش حألد‬٣ٞ‫رُي ٖٓ خالٍ طط‬ٝ ‫خ‬ِٜ٤‫ظْ طلؼ‬٣ ٕ‫ـذ أ‬٣ ٢‫خص حُظ‬٤ِٔ‫حُؼ‬ٝ ‫حألشخخص‬ .‫حدع‬ٞ‫ٍ حُل‬ٞ‫أػ٘خء كظ‬ ٢‫ ك‬٢‫حُـ٘خث‬ٝ ٢٘‫ن حُل‬٤‫ذ حُظلو‬٤ُ‫أعخ‬ٝ ‫خص‬٤٘‫ش طو‬٤‫ك‬ٞ‫● ط‬ ‫خ‬ٜ٤ِ‫ٌٖٔ حالػظٔخد ػ‬٣ ٢‫ش حُظ‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫حُل‬ .‫ ػ٘ذ حُلخؿش‬٢ٗٞٗ‫ًؤدُش ُإلػزخص حُوخ‬ ،‫ٓخص‬ِٞ‫ هذ طِلن رخُٔؼ‬٢‫َ حُٔخخؽش حُظ‬٤ِ‫طو‬ٝ ‫ذ‬٣‫● طلذ‬ ‫خ‬٤ٔ‫ٍ سع‬ٞ‫حُٔخ‬ ١‫حُٔظظِش رخُؼ٘ظش حُزشش‬ٝ ّ ٕٞ٤ِ‫ٕ حُذحخ‬ٞ‫ٍ (حُٔطِؼ‬ٞ‫ طِي حألط‬٠ُ‫ٍ ا‬ٞ‫ط‬ُٞ‫رخ‬ .)Insiders Page 18 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬