RR1.8 Improve incident identification and analysis in response and conduct regular, systematic updates to the national level incident registry. R1.9 Ensure that the human and financial resources allocated to incident response are adequate to the cybersecurity threat environment by conducting regular scenario exercises designed to test human, organisational and financial capacities. R1.10 Promote coordinated national incident response between public and private sectors, with lines of communication prepared for times of crisis. R1.11 Develop a culture of risk assessment and management predictive methods to assess risk, its propagation and its aggregation for the national and CI domains. R1.12 Establish mechanisms for regional and international cooperation for incident response between organisations to resolve incidents as they occur. R1.13 Promote a platform for the reporting and sharing of incidents across sectors. CRITICAL INFRASTRUCTURE (CI) PROTECTION R1.14 Perform detailed audits of CI assets as it relates to cybersecurity on a regular basis and disseminate CI asset audit lists to relevant stakeholders. R1.15 Implement regular audit practices to assess network and system dependencies to inform continuous reassessment of risk portfolio. Identify and establish specific auditing processes. R1.16 Develop a strategy for strengthening formal coordination regarding Critical National Infrastructure (CNI) and information sharing between public and private sector. 28 | Cybersecurity Capacity Review Iceland, 2017