DIMENSION 1 CYBERSECURITY STRATEGY AND POLICY Dimension 1 gauges the Icelandic capacity to develop and deliver cybersecurity policy and strategy and to enhance cybersecurity resilience through improvements in incident response, crisis management, redundancy, and critical infrastructure protection capacity. The Cybersecurity Policy and Strategy dimension also includes consideration of early warning, deterrence, defence and recovery. This dimension assesses the effectiveness of policy in advancing national cyber defence and resilience capacity, while facilitating the access to cyberspace increasingly vital for government, international business and society in general. D1.1 NATIONAL CYBERSECURITY STRATEGY Cybersecurity strategy is essential to the coordination and direction of the government’s cybersecurity agenda. A cybersecurity strategy makes it possible to prioritise cybersecurity as a critically important policy area, determines responsibilities and mandates of key cybersecurity government and non-governmental actors, and directs necessary and appropriate allocation of resources to emerging and existing cybersecurity issues and priorities. Maturity Stage: Established With the approval of the Ministry of the Interior (MoI), the Republic of Iceland’s National Cybersecurity Strategy (NCSS) 2015-2026 was published in April 201512 together with a three year Plan of Action. A task force on cyber security had been set up in 2013 to provide recommendations and formulate the Strategy. Strategies of other Nordic and European countries were also examined alongside discussions with overseas peers. The task force also discussed the threats and opportunities that have been identified and the experience gained from the plans of action already been put into practice in other Nordic and European countries. 12 https://www.government.is/media/innanrikisraduneyti-media/media/frettir2015/Icelandic_National_Cyber_Security_Summary_loka.pdf 18 | Cybersecurity Capacity Review Iceland, 2017