shall be strengthened to detect, prevent and respond to cyber security threats and will play a coordination role of incidents response. Providing human resources as well as adequate capacity building resources will strengthen the National CSIRT operation capabilities. 2) Develop National Cyber Contingency Plan A National Cyber Security Contingency Plan (NCCP) shall be put in place to provide measures for responding to and recovering after major incidents that involve Critical Information Infrastructure (CII). NCCP shall outline the criteria to be used to identify a crisis, define key processes and actions for handling the crisis, and clearly define the roles and responsibilities of different stakeholders during a cyber-security crisis. 3) Establish Cyber Security Capabilities within institutions Depending on the size and complexity of information technology infrastructure and systems, public and private organizations shall establish a cyber security function within the IT units, responsible for planning and implementing cyber security programs. POLICY AREA 2 – INSTITUTIONAL FRAMEWORK FOR CYBER SECURITY Objective: To build cyber security capabilities and secure national information assets requires a sound governance structure for effective coordination of national cyber security initiatives. Measures: 4) Establish an Agency in charge of National Cyber Security Given the complexity of the cyber security threats to the overall national security, there is a need for a strong institutional framework to coordinate cyber security initiatives with an integrated approach as to fully realize cyber security strategic objectives. The absence of such an institutional framework has often led to inconsistency and duplication of efforts among stakeholders. Therefore, the GoR shall establish an Agency in charge of National Cyber Security responsible for the development, implementation and coordination of the national cyber security initiatives. 5) Establish a National Cyber Security Advisory Board In order to establish strong cyber-security governance framework, the GoR shall put in place a National Cyber Security Advisory Board (NCSAB). This board shall provide strategic guidance on matters related to cyber security. The composition of the Board should consider public and private organs relevant to cyber security. 10