Annex One: Terms of Reference for the Refresh of New Zealand’s Cyber Security Strategy and Action Plan Objectives of the 2015 Cyber Security Strategy and Action Plan ig ita lM ed The Strategy is underpinned by four principles (partnerships are essential; economic growth is enabled; national security is upheld; and human rights are protected online). ia The 2015 Cyber Security Strategy and Action Plan provides a framework for crossgovernment and private sector work on cyber security. The Strategy sets a vision of “a secure, resilient and prosperous online New Zealand.” an d D The accompanying Action Plan sets out a number of actions under four goals (cyber resilience, cyber capability, addressing cybercrime and international cooperation) involving a wide range of agencies. Objectives at io ns The purpose of the refresh is to take a comprehensive look at New Zealand’s cyber security framework and settings. C om m un ic This work will result in a refreshed Cyber Security Strategy and Action Plan, which will provide a framework for intensified government initiatives to improve New Zealand’s cyber security. Problem definition fB ro ad ca s tin g, The current Cyber Security Strategy and Action Plan were developed in 2015. Since then, although there has been significant progress in the implementation of the Strategy and Action Plan, there has also been an upwards trajectory in cyber threats. The widespread use of Internet connected devices and emerging technology has intensified the challenge. Our Five Eyes partners, and other like-minded states, have strengthened their cyber security efforts. M e Context in is te ro It is timely to take a fresh look at the Cyber Security Strategy and accompanying Action Plan to test whether New Zealand is investing the right resources across intelligence, protective security, military, law enforcement and civilian agencies to respond effectively to growing cyber security threats. se d by th The National Cyber Policy Office within the Department of the Prime Minister and Cabinet leads the development of cyber security advice for the government and advises the government on the investment of resources in cyber security activities. The NCPO will lead the refresh of the Cyber Security Strategy and Action Plan. R el ea Cyber security issues intersect with the work of a wide range of other government agencies including in the areas of national security and intelligence, defence, international relations, trade, economic development and innovation, criminal justice, education, government digital transformation, and public service delivery. The refresh will involve collaboration across a wide range of agencies to ensure a systemic approach to cyber security. It will also involve close collaboration with the private sector and non-government organisations. The government has committed to building a connected nation, promoting and protecting digital rights, and harnessing digital technology for economic growth, community benefit and innovation. Cyber security will be critical to this. The refresh of the Cyber Security Strategy Page 13 4iz7hypmdw 2018-04-04 16:36:02