DIMENSION 2 CYBERSECURITY CULTURE AND SOCIETY Forward-thinking cybersecurity strategies and policies entail a wide array of actors, including Internet users. All actors and Internet users need to understand the role they can play in safeguarding sensitive and personal data as they use digital media and resources. This dimension underscores the centrality of all users in achieving cybersecurity, but seeks to avoid conventional tendencies to blame users for the challenge of cybersecurity. Instead, cybersecurity experts need to build user-friendly operating systems and programs that can be incorporated in everyday practices online. This dimension reviews elements of a responsible cybersecurity culture and society such as the understanding of cyber-related risks by all actors, developing a learned level of trust in Internet services, e-government and e-commerce services, and users’ understanding of how to protect personal information online. This factor also entails the existence of mechanisms for accountability, such as channels for users to report threats to cybersecurity. In addition, this factor reviews the role of mass media and social media in helping to shape cybersecurity values, attitudes and behaviour. D2.1 CYBERSECURITY MIND-SET This factor evaluates the degree to which cybersecurity is prioritised and embedded in the values, attitudes, and practices of government, the private sector, and users across societyat-large. A cybersecurity mind-set consists of values, attitudes and practices, including habits, of individual users, experts, and other actors in the cybersecurity ecosystem that increase the resilience of users to threats to their security online. Maturity Stage: Formative The government has recognised the need to prioritise cybersecurity across its institutions, and the risks and threats have influenced the processes and structures across government institutions but in particular leading agencies. 31 | Cybersecurity Capacity Review Iceland, 2017