DIMENSIONS OF CYBERSECURITY CAPACITY Consultations were premised on the GCSCC Cybersecurity Capacity Maturity Model3 for Nations (CMM) which is composed of five distinct dimensions of cybersecurity capacity. Each dimension consists of a set of factors, which describe and define what it means to possess cybersecurity capacity therein. Table I below shows the five dimensions with their comprising factors: DIMENSIONS FACTORS Dimension 1: Cybersecurity Policy and Strategy D1.1 National Cybersecurity Strategy D1.2 Incident Response D1.3 Critical Infrastructure (CI) Protection D1.4 Crisis Management D1.5 Cyber Defence Consideration D1.6 Communications Redundancy Dimension 2: Cyber Culture and Society D2.1 Cybersecurity Mind-set D2.2 Trust and Confidence on the Internet D2.3 User Understanding of Personal Information Protection Online D2.4 Reporting Mechanisms D2.5 Media and Social Media Dimension 3: Cybersecurity Education, Training and Skills D3.1 Awareness-raising D3.2 Framework for Education D3.3 Framework for Professional Training Dimension 4: Legal and Regulatory Frameworks D4.1 Legal Frameworks D4.2 Criminal Justice System D4.3 Formal and Informal Cooperation Frameworks to Combat Cybercrime Dimension 5: Standards, Organisations and Technologies D5.1 Adherence to Standards D5.2 Internet Infrastructure Resilience D5.3 Software Quality Protection D5.4 Technical Security Controls D5.5 Cryptographic Controls D5.6 Cybersecurity Marketplace D5.7 Responsible Disclosure 3 See Cybersecurity Capacity Maturity Model for Nations (CMM), Revised Edition, available at https://www.sbs.ox.ac.uk/cybersecurity-capacity/content/cmm-revised-edition 14 | Cybersecurity Capacity Review Iceland, 2017