• TM11 Reinforcing resilience and continuity plans. 4.1.3. In addition, a set of targeted supporting actions have the potential to enable and assist the strategic and technical measures and thereby enhance their effectiveness: • SA01 Reviewing or developing guidelines and best practices on network security; • SA02 Reinforcing testing and auditing capabilities at national and EU level; • SA03 Supporting and shaping 5G standardisation; • SA04 Developing guidance on the implementation of security measures in existing 5G standards; • SA05 Ensuring the application of standard technical and organisational security measures through specific EU-wide certification scheme; • SA06 Exchanging best practices on the implementation of strategic measures, in particular national frameworks for assessing the risk profile of suppliers; • SA07 Improving coordination in incident response and crisis management; • SA08 Conducting audits of interdependencies between 5G networks and other critical services; • SA09 Enhancing cooperation, coordination and information sharing mechanisms; • SA10 Ensuring 5G deployment projects supported with public funding take into account cybersecurity risks 4.2. Risk mitigation plans For each of the nine risk areas identified in the EU coordinated risk assessment report, the toolbox identifies and provides risk mitigation plans 30. They consist of possible combinations of strategic and/or technical measures (together with the appropriate supporting actions) intended to mitigate a security risk. The risk mitigation plans aim at providing guidance as to the most relevant/high impact mitigation measures based on an evaluation of the expected effectiveness of individual measures listed in section 4.1. to mitigate a particular risk. However, it should be noted that the expected effectiveness of most measures will depend highly on their scope and on the way they are implemented (for instance, strengthened regulatory powers have the potential to be highly effective, provided they have the appropriate scope and are used effectively). In addition, risk mitigation plans reflect the importance of combining measures in an appropriate manner in order to ensure their full effectiveness and enforceability. Moreover, many of the measures, such as the application of enhanced security obligations on MNOs, require as a necessary pre-condition that regulatory authorities have the adequate powers to define and impose such obligations, as well as to monitor and audit their implementation. These mitigation plans are presented in detail in annex 1 (table 2). An indicative high-level identification of other potential impact factors is also provided. The estimated degree of expected effectiveness takes into account the original risk and the expected residual risk after applying the measure, and using the following scale: • 30 Very High: The measure is considered effective to a very high degree, meaning that it is expected to almost completely mitigate the related risks. In this context, a risk mitigation plan describes a possible approach that could be taken to mitigate a risk. 13