stage and in the software and hardware tendering processes. Government through NITA-U will develop respective guidelines. This Strategy aims to create an effective governance and management framework. Establishing sustainable partnerships among the Government and NCII operators requires that all participating stakeholders define a clear understanding of the goals of the partnership and the mutual security benefits that stem from dedicated and meaningful collaboration. Areas of cooperation include establishing effective coordinating structures and information-sharing processes and protocols, building trust through joint events and exercises that enhance cross-sectoral response, exchanging best practices for improving security, as well as improving international coordination. 3.3.1 Action Areas GoU will work with key stakeholders - the NCII operators and the cybersecurity community - in five major areas. GoU will: a) Implement the strategic plan on the protection of National Critical Information Infrastructure. The strategic plan provides clear criteria on defining critical sectors and the roles and responsibilities of NCII operators, but also supervisory authorities to ensure the transparency and boosting trust amongst and between the government and private sector. b) Raise awareness of supply chain security risks GoU will increase the adoption of Security-by-Design practices and address cybersecurity issues upstream and along the supply chain. GoU will enhance the implementation of national cybersecurity standard for critical infrastructure, including requirements for software and hardware that can be used in vital services. The Government will start the preparations for developing accreditation standards for hardware, software and IT services deployed in NCII. c) Update of the minimal cybersecurity baseline for NCII operators Based on international standards and best practice, GoU will enhance the implementation of security measures of NCII operators based on the regular risk assessments. To achieve the goal, the Government will set legal requirements for minimum cybersecurity baseline of NCIIs. The standard includes the requirements for information sharing and incident reporting. d) Create effective governance and management structure for protection of NCII GoU will introduce legal provisions that give the relevant sector regulators the authority and resources to oversee compliance. This will assist in the efforts to implement the current strategy goals and achieve cross-sectoral agreements. 24 (43) [Draft Version for stakeholder consultation]