LIST OF ABBREVIATIONS (Icelandic names of Icelandic authorities and organisations are given in parenthesis) APTA Act on the Post and Telecom Administration CA Consumer Agency (Neytendastofa) NATO CCDCOE NATO Cooperative Cyber Defence Centre of Excellence CSC Cyber Security Council (Netöryggisráð) CEO Chief Executive Officer CERT-IS Computer Emergency Response Team Iceland (Netöryggissveit Póst- og fjarskiptastofnunar, Netöryggissveitin) CI Critical Infrastructure CII Critical Information Infrastructure CMM Cybersecurity Capacity Maturity Model CNI Critical National Infrastructure CSIRT Computer Security Incident Response Team DoH Directorate of Health (Embætti Landlæknis) DPA The Icelandic Data Protection Authority (Persónuvernd) ECA Electronic Communications Act EEA European Economic Area ENISA European Union Agency for Network and Information Security EPC European Patent Convention EPO European Patent Organisation EU European Union FSA Financial Supervisory Authority (Fjármálaeftirlitið) GDPR General Data Protection Regulation GCSCC Global Cyber Security Capacity Centre ICRU Iceland Crisis Response Unit (Íslenska friðargæslan) 2 | Cybersecurity Capacity Review Iceland, 2017