and Action Plan will intersect closely with the government’s initiatives in the digital technology area. Scope ig ita lM ed In view of the assessment of the cyber security threat and examination of international best practice, the refresh will test whether the vision, principles, and goals of the 2015 Cyber Security Strategy remain appropriate and make recommendations for any amendments. ia The refresh of the Cyber Security Strategy and Action Plan will assess the nature of the cyber security risk, including the implications of emerging technology, and examine international best practice in cyber security strategies and action plans. an d D It will include analysis of any gaps and obstacles in New Zealand’s approach to cyber security as set out in the current Action Plan. This includes considering whether we are investing the right resources in the right places and have the right operational arrangements to deliver optimal coordinated effort across government. ic at io ns It will include proposing new actions to address these gaps and obstacles. It may include recommendations about resources and institutional arrangements. The refresh will also outline current actions that must continue to contribute to New Zealand’s cyber security. A refreshed Action Plan should comprise these new actions and on-going current actions. C om m un It is envisaged that new actions proposed in a revised Action Plan will be the subject of subsequent more detailed policy and implementation processes as required. Process ca s tin g, The National Cyber Policy Office within the Department of the Prime Minister and Cabinet will lead the refresh. fB ro ad The NCPO will establish and chair a “Cyber Security Strategy and Action Plan Refresh Working Group” (the Working Group) including representatives from the following agencies amongst others: GCSB, CERT NZ, MFAT, NZ Police, GCDO and SSC. in is te ro This Working Group will engage with a broader range of other agencies as appropriate including but not limited to NZSIS, MBIE, DIA, GCDO, NZDF, MOD, MoJ, NAB, Customs, Statistics NZ (and the Government Chief Data Steward), MoE, TEC, NZQA, and NZTE. The Working Group will also engage with the Chief Technology Officer. th e M If any machinery of government issues arise, the Working Group will work closely with SSC and other agencies as appropriate. The Working Group will also ensure TSY is engaged on any initiatives that might require funding. d by Consultation R el ea se The Cyber Security Strategy and Action Plan Refresh Working Group will work closely with government agencies, the Chief Technology Officer, the Human Rights Commissioner, the Privacy Commissioner, the Inspector-General of Intelligence and Security, non-government organisations and the private sector. Engagement with the private sector and other stakeholders can occur through the Connect Smart partnership – a community of practice to drive improved cyber security in New Zealand – and more widely as needed. Relevant Ministers will be consulted on the revised Cyber Security Strategy. Page 14 4iz7hypmdw 2018-04-04 16:36:02