A/74/120 In summary, out of the set of actions taken, the following achievements are worth highlighting: • We have initiated the establishment of a coordinated institutional framewo rk, which involves the various stakeholders, for the implementation of the national digital security policy; in particular, we have established the position of National Digital Security Coordinator within the Office of the President of the Republic and ensured that the work of the Cyber Emergency Response Group of Colomb ia will continue. • We have begun the process of designing, and putting into practice in the national Government, a digital security risk-management model, which takes into account the conceptual framework of this policy, international security standards and the comprehensive national risk management framework. • We have begun to create the conditions to enable the various stakeholders to manage the digital security risk to their socioeconomic activities, and to build confidence in the use of the digital environment; in particular we are conducting a study on the impact of digital crimes and offences in the country and adjusting the regulatory framework for the ICT sector to enhance digital security. • We have drafted plans to strengthen operational, administrative, human and scientific capacity, as well as the physical and technological infrastructure of the bodies that comprise the current national government institutions. • We have signed international cooperation agreements with partner countries and important industry representatives aimed at strengthening capacity and the exchange of information regarding threats. In 2017, NATO unanimously approved the signing of an individual collaboration and cooperation programme with Colombia, making our country the first in Latin America to acquire this status and become a global partner. One of the points included in this legal instrument is the improvement of cyberskills. Colombia considers it essential to strengthen the existing initiatives that are operational in various settings within the United Nations system. With regard to the objective of establishing an institutional framework for digital safety consistent with an emphasis on risk management, we have made the following progress: the establishment of the position of National Digital Security Coordinator (equipped with technical and legal tools), as well as the establishment of a Digital Security Committee, which will provide guidance on management and performance to the civil service, and serve as the highest-level inter-institutional and intersectoral entity in the national Government for high -level guidance on digital security issues. We have also designed key instruments such as the digital security risk-management model, which the national entities of the executive branch are obligated to adopt and put into practice, and which the Administrative Department of the civil service included in the Guide for Addressing Management-, Corruption- and Digital Security-related Risk and Designing Audits for Public Entities, in August 2018. Challenges identified include the need to implement and strengthen digital security risk management in the bodies responsible for the cybersecurity and cyberdefence of the institutional framework established. It is also necessary to strengthen sectoral capacity by establishing a more efficient method for the promotion and creation of sectoral Computer Security Incident Res ponse Teams, establish a road map for the effective development of the Digital Security Committee, establish an effective protocol for links between sectoral and local liaison facilities and national digital security coordination facilities, as well as enable all the various stakeholders to identify, assess and effectively manage risk. 19-10580 9/39