A refresh of the Cyber Security Strategy and Action Plan will involve a broad range of agencies, consultation with the private sector and non-government organisations, and analysis of international best practice. Draft Terms of Reference have been developed. 8. The refresh will analyse gaps and opportunities to improve New Zealand’s cyber security. It will assess institutional arrangements for cyber security, collaboration with the private sector, efforts to address cybercrime, system-wide leadership of government information security, international cyber cooperation and responses, opportunities to grow the cyber security sector, and the security challenges of emerging technology. 9. It will result in recommendations for a new Cyber Security Strategy and Action Plan. ic at io ns an d D ig ita lM 7. un Background In November 2015, Cabinet approved New Zealand’s second Cyber Security Strategy, Action Plan and National Plan to Address Cybercrime [NSC-15-Min0012]. 11. The Strategy has served us well as an overarching framework for crossgovernment work under four goals (cyber resilience, cyber capability, addressing cybercrime, and international cooperation). 12. The ITU’s Global Cyber Security Index for 2017 ranks New Zealand in the top group of 21 leading countries. The Australian Strategic Policy Institute’s cyber maturity index for 2017 ranked New Zealand as sixth for the Asia Pacific region, behind the United States, Australia, Japan, Singapore and Republic of Korea. ro fB ro ad ca st in g, C om m 10. is te Good progress has been made to implement the 2015 Cyber Security Strategy and Action Plan Good progress has been made under each of the four goals of the Strategy. 14. Under the Cyber Resilience Goal, progress includes:  CERT NZ was established in April 2017 to receive reports of cyber incidents, analyse threats, share information and advice, coordinate incident responses and be an international point of contact.  The Government Communications Security Bureau’s National Cyber Security Centre (NCSC) delivered its three-year long CORTEX capability development project. These capabilities enable the NCSC to analyse, detect and disrupt cyber threats against public and private sector organisations. Through the insights it gleans from CORTEX capabilities, the NCSC is also able to provide cyber security advice and guidance to hundreds of organisations of national significance. se d by th e M in 13. R el ea ed ia Strategy for New Zealand, the proposed establishment of a Chief Technology Officer and the priority accorded to digital rights. 4iz7hypmdw 2018-04-04 16:36:02 Page 2