RECOMMENDATIONS Following the information presented during the review of the maturity of Cyber Culture and Society, the Global Cyber Security Capacity Centre has developed the following set of recommendations for consideration by the Republic of Iceland. These recommendations provide advice and steps aimed to increase existing cybersecurity capacity as per the considerations of the Centre’s Cybersecurity Capacity Maturity Model. The recommendations are provided specifically for each factor. CYBERSECURITY MIND-SET R2.1 Enhance efforts at all levels of government, especially officials, and the private sector to employ cybersecurity good (proactive) practices. Design systems that enable users across society to embed secure practices more easily into their everyday use of the Internet and online services. R2.2 Routinize cross-sectorial cooperation and information sharing among private and public sector organisations on cybersecurity risks and good practice. R2.3 Identify vulnerable groups and high-risk behaviour across the public, in particular young people, to inform targeted, coordinated awareness campaigns, as recommended in R3.1. TRUST AND CONFIDENCE ON THE INTERNET R2.4 Establish ISP programmes to promote trust in their services based on measures of effectiveness of these programmes. R2.5 Promote data protection by default and data protection by design as a tool for transparency in the provision of e-governance services (including e-health and e-police). Implement feedback mechanisms for use to ensure that the e-services are continuously improved and trust is strengthened among users. R2.6 Employ processes for gathering user feedback within government agencies in order to ensure efficient management of online content. 37 | Cybersecurity Capacity Review Iceland, 2017