6.2.5 ACTIONS A. National Threat Assessment A national threat assessment initiative will be implemented to provide basis for and continuing understanding of the nature of cyber threats and how they can be addressed effectively from operational and strategic perspectives. Likewise, a cyber-intelligence program will be created. It will be undertaken to gain knowledge of the hacker’s world, its personalities, operations and plans. B. Vulnerability Assessment Vulnerability assessment will be implemented on a periodic basis to identify weaknesses in CI protective programs and to institute appropriate corrective measures. This will include the following: B.1 Formulation of a Vulnerability Assessment Framework and Checklist This framework and checklist will be used to gather essential information on IT security threats and measures, critical security policies and practices on networks, systems, applications, and data and its classification, and external systems; cyber-attacks and recovery plan. B.2 Security Audit, Survey and Inspection This involves the conduct of a periodic security audit, survey and inspection as a way to ensure implementation of security programs as well as a means to identify weaknesses in the systems. Page 16 of 112 GAMBIA NATIONAL CYBER SECURITY STRATEGY AND ACTION PLAN 2020-2024