III. Policies for CIP 5. Enhancement of the Basis for CIP whose lifecycles are relatively long, top management should responsibly secure and allocate management resources in a planned manner from the medium- and long-term perspective. Given the above, the Cabinet Secretariat and responsible ministries for CI should encourage the top management of CI operators to develop awareness about CIP and endeavor to obtain knowledge through such activities to make critical infrastructure protection measures further fit the actual state and be more effective. 5.6 Promotion of the development of human resources Each stakeholder should promote efforts based on the Comprehensive Policies for the Development of Cybersecurity Experts (Cybersecurity Strategic Headquarters resolution in March 2016) and carry out concrete activities based on the Cybersecurity Experts Development Program (Cybersecurity Strategic Headquarters resolution in April 2017). Concrete measures for human resources development are as follows. (i) First raise awareness and promote understanding of the top management of CI operators, and then present cybersecurity measures based on each company's business policies and foster personnel who can bridge CIPrelated departments within the company to make comprehensive adjustments and lead working-level officials (ii) Considering the latest circumstances where cybersecurity measures are required for OT management departments and legal affairs departments, etc., not only for directly related IT management departments, promote the construction of an organizational structure that enables cross-sectoral collaboration of personnel with diverse roles and abilities in carrying out cybersecurity measures (iii) In industry-academia-government collaboration, clarify the definition of required security experts and promote concrete human development measures, such as providing exercises and training, and qualification acquisition. 5.7 Ensuring Security in relation to the My Number System In order to ensure cybersecurity regarding local governments and CI operators that handle people's individual numbers under the My Number System, government organizations offer necessary support and consider required measures, while CI operators handling individual numbers should make required efforts to ensure cybersecurity. 5.8 Maintenance of reference of standards and guides To maintain the effectiveness of cybersecurity measures, it is important to ensure that stakeholders are able to reference relevant documents and regulations where necessary when examining means therefor. Additionally, ahead of the Olympic and Paralympic games, risk assessment guidelines, etc. also need to be prepared. The initiatives of the Cabinet Secretariat related to the preparation of these regulations etc. are as follows. 29