● Verification of an organisation‟s compliance with its own and external cyber security requirements through assessment against relevant policies, standards and guidelines and the provision of constructive feedback aimed at enabling improvement; ٖٓ‫● حُظلون ٖٓ حٓظؼخٍ حُٔئ��غخص ُٔظطِزخص حأل‬ ٝ‫خ أ‬ٜ‫حء حُٔظطِزخص حُخخطش ر‬ٞ‫ ع‬٢ٗ‫زشح‬٤‫حُغ‬ ْ٤٤‫رُي ٖٓ خالٍ طو‬ٝ ‫ش‬٤‫حُٔظطِزخص حُخخسؿ‬ ‫ش‬٤٣‫حُٔؼخ‬ٝ ‫خعخص‬٤‫ء حُغ‬ٞ‫ ػ‬٠ِ‫حُٔٔخسعخص ػ‬ ‫خدكش‬ُٜ‫ش حُشحؿؼش حُزّ٘خءس ح‬٣‫ْ حُظـز‬٣‫طوذ‬ٝ ‫خص‬ٜ٤‫ؿ‬ٞ‫حُظ‬ٝ .ٖ٤‫ حُظلغ‬٠ُ‫ا‬ ● Defining physical security measures necessary to ‫ش‬٣‫ش حُالصٓش ُلٔخ‬٣‫ش حُٔخد‬٤٘ٓ‫ش حأل‬٤‫ذ حُظذحر‬٣‫● طلذ‬ ٝ‫ش أ‬٤‫ش ٖٓ حألػٔخٍ حُؼشػ‬٤ٗ‫زشح‬٤‫ٍ حُغ‬ٞ‫حألط‬ .‫حُٔظؼٔذس‬ protect cyber assets from accidental or deliberate acts. The establishment and operation of a properly and appropriately resourced National CyberSecurity Commission enables Government and the private sector to work more effectively together to enhance information security capability and capacity. َ٤‫طلؼ‬ٝ ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫جش ح‬٤ُٜ‫ُٔ ٌّٖ اٗشخء ح‬٤‫ع‬ ‫حُٔ٘خعزش‬ٝ ‫حسد حُالصٓش‬ُٞٔ‫خ ًٔئعغش طظٔظغ رخ‬ٛ‫س‬ٝ‫د‬ ‫ش أًزش‬٤ُ‫حُوطخع حُخخص ٖٓ حُؼَٔ ٓؼخ رلؼخ‬ٝ ‫ٓش‬ٌٞ‫حُل‬ .‫ٓخص‬ِٞ‫ًلخءس أٖٓ حُٔؼ‬ٝ ‫ض هذسس‬٣‫ٖٓ أؿَ طؼض‬ Immediate priorities for the newly established National CyberSecurity Commission are: ِٓ‫طظٔؼَ األوٌىَبد اٌٍّذخ ٌٍهُئخ اٌىطُٕخ ٌأل‬ٝ :٢ِ٣ ‫خ رٔخ‬ٜ‫اٌغُجشأٍ ػ٘ذ ٗشؤط‬ :‫ش‬٤ُ‫خص حُظخ‬٣‫ن حُـخ‬٤‫رُي ُظلو‬ٝ ،‫اٌمُبدح واٌذىوّخ‬ Leadership and Governance to: ● Develop and maintain the National CyberSecurity Strategy to direct the development of national cyber security capabilities. ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫ش حالعظشحط‬٣ٞ‫● طط‬ ‫ش‬٤٘‫ؽ‬ُٞ‫خص ح‬٤ٗ‫ش حإلٌٓخ‬٣ٞ‫ش طط‬٤ِٔ‫ ػ‬ٚ٤‫ؿ‬ٞ‫خ ُظ‬ٜ‫ادحٓظ‬ٝ ٢ٗ‫زشح‬٤‫ ٓـخٍ حالٖٓ حُغ‬٢‫ك‬ ● Lead national collaboration and promote information sharing across all national entities to further cyber security. ٍ‫دػْ طزخد‬ٝ ٢٘‫ؽ‬ُٞ‫ ح‬ٟٞ‫ حُٔغظ‬٠ِ‫ٕ ػ‬ٝ‫خدس حُظؼخ‬٤‫● ه‬ ٖٓ‫ض حأل‬٣‫ش ُظؼض‬٤٘‫ؽ‬ُٞ‫خص ح‬ٜ‫غ حُـ‬٤ٔ‫ٖ ؿ‬٤‫ٓخص ر‬ِٞ‫حُٔؼ‬ .٢ٗ‫زشح‬٤‫حُغ‬ ● Ensure that the National CyberSecurity Commission has the authority and skills to influence entities to comply with policies and direction and to intervene where necessary to bring entities in line with national priorities, policies and direction. ● Embed the right accountable authorities within ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫جش ح‬٤ُٜ‫● ػٔخٕ طٔظغ ح‬ ‫خص‬ٜ‫ حُـ‬٠ِ‫ش ػ‬٤‫ش ُِظؤػ‬٤‫خص حٌُخك‬٤‫حُظالك‬ٝ ‫خسحص‬ُٜٔ‫رخ‬ َ‫ُِظذخ‬ٝ ‫خص‬ٜ‫ؿ‬ٞ‫حُظ‬ٝ ‫خعخص‬٤‫خ رخُغ‬ٜٓ‫حُضح‬ٝ ‫حُٔخظِلش‬ ‫خص‬ٜ‫ٌلَ حُظضحّ ٓخظِق حُـ‬٣ ‫سس رٔخ‬ٝ‫ػ٘ذ حُؼش‬ . ‫ش‬٤٘‫ؽ‬ُٞ‫خص ح‬ٜ‫ؿ‬ٞ‫حُظ‬ٝ ‫خعخص‬٤‫حُغ‬ٝ ‫خص‬٣ُٞٝ‫رخأل‬ entities to take local responsibility for the development and operation of cyber security. 1. Identification and appointment of the right people into key leadership roles within the new ‫ ٓخظِق حُٔئعغخص‬ٟ‫خص حُٔ٘خعزش ُذ‬ٜ‫َ حُـ‬٣ٞ‫● طخ‬ َ٤‫طلؼ‬ٝ ‫ش‬٣ٞ‫خ طط��ٛ‫س‬ٝ‫ رذ‬٠ُٞ‫خص حُالصٓش ُظظ‬٤‫رخُظالك‬ ‫ش‬٣ٞ‫ حُٔئعغش ُظط‬ٟٞ‫ ٓغظ‬٠ِ‫ ػ‬٢ٗ‫زشح‬٤‫حألٖٓ حُغ‬ ‫ دحخَ حُٔئعغش‬٢ٗ‫زشح‬٤‫خص حألٖٓ حُغ‬٤ِٔ‫ادحسس ػ‬ٝ .‫خص‬ٜ‫ حُـ‬ٙ‫ز‬ٛ ‫ٓغخءُش‬ٝ ‫حس‬ٝ‫ حألد‬٢‫ٖ ك‬٤ٔ‫ٖ حألشخخص حُٔالث‬٤٤‫طؼ‬ٝ ‫ذ‬٣‫ طلذ‬.0 ‫ذس‬٣‫خًَ حُٔئعغخص حُـذ‬٤ٛ ٖٔ‫ش ػ‬٤‫غ‬٤‫ش حُشث‬٣‫خد‬٤‫حُو‬ ٢‫غ‬٤‫ش ٌَُ هخثذ سث‬٤‫ش حألكٌخّ حُٔشؿؼ‬٣ٞ‫ طط‬.2 2. Development of the terms of reference for each key leader. ‫خص حُٔالثٔش ٌَُ هخثذ‬٤‫ذ حُظالك‬٣‫ طلذ‬.2 3. Establishment of the appropriate authorities for ًّ‫خطخ اٌؼ‬ Action Plan organisational structures. each leader to operate. 4. Establishing appropriate responsible and accountable owners for cyber security at executive leadership and operational levels within entities. National Cyber Security Strategy 2018-2023 ٖٔ‫ ػ‬٢ٗ‫زشح‬٤‫ٖ ػٖ حألٖٓ حُغ‬٤ُٝ‫ذ حُٔغئ‬٣‫ طلذ‬.4 ‫ش‬٤ِ٤‫خص حُظشـ‬٣ٞ‫حُٔغظ‬ٝ ‫ش‬٣‫ز‬٤‫خص حإلدحسس حُظ٘ل‬٣ٞ‫ٓغظ‬ ‫خص‬ٜ‫ػٖٔ طِي حُـ‬ Page 19 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬