7.2.1 Strategic Goal (i): Identify and Manage the Critical Information Infrastructure of The Gambia 7.2.2 Actions 7.2.3 Establish a National CII Register 7.2.4 Develop a National CII Governance Framework which provides details on CII protection procedures and processes 7.2.5 Establish a National Risk Register and Regulations and/or Guidelines that promote continuous risk assessment and management across CIIs in The Gambia 7.2.6 Establish Mandatory Equipment Specifications, Mandatory Guidelines, Regulations, Security Requirements, Procedures relating to the management of risks by CIIs 7.2.7 Create a National Vulnerability Register and Framework for regular vulnerability monitoring and disclosure for CII 7.2.8 Undertake continuous monitoring and regular testing to detect errors, vulnerabilities, and intrusions in CII 7.2.9 Promote and enhance regional and international cooperation in the protection of the critical information infrastructure (CII) 7.2.10 Establish mandatory and minimum technology and security requirements for equipment of ISPs and end users like the banking sector 7.2.11 Develop a government programme to deploy and manage government ICT infrastructure 7.2.12 Develop a national programme to enhance internet infrastructure development and resilience 7.2.13 Develop National Contingency plans which identify emergency response asset priorities and standard operating procedures (SOPs) 7.2.14 Review and update the map of current emergency response assets Page 19 of 112 GAMBIA NATIONAL CYBER SECURITY STRATEGY AND ACTION PLAN 2020-2024