4.4 GUIDING FRAMEWORK Establishing a Secure Environment 4.4.1 4.4.1.1 Identification and elimination of threats. This involves knowing the threats and determination of ways in which they can be effectively neutralized. 4.4.1.2 Assess and eliminate vulnerabilities. To identify and remove weaknesses and increase the level of resiliency 4.4.1.3 Defeat attacks. By introducing appropriate and adequate countermeasures 4.4.1.4 Reduce losses and damages. By implementing contingency plans and other actions to mitigate potential losses and damages 4.4.1.5 Implement a resiliency program. This is a program for ensuring business continuity 4.4.1.6 Institute effective law enforcement programs. This is intended to enhance capacity and capabilities, legal and policy regime. 5. SPECIFIC OBJECIVES AND ACTIONS This action plan is consistent with international standards and the primary goals are: • Assuring the continuous operation of Gambia’s information systems, services and critical cyber infrastructures. • Implementing capacity-building measures to enhance Gambia’s ability to respond to threats before, during and after attacks. • Effective law enforcement and administration of justice • Cyber-security conscious society. 5.1 STRATEGIES AND PROGRAMS Based on the above, four (4) strategies have been formulated critical to information infrastructures protection and services of The Gambia. A. Understanding the cybersecurity Risk B. Controlling the Risk Page 12 of 112 GAMBIA NATIONAL CYBER SECURITY STRATEGY AND ACTION PLAN 2020-2024