10.8.8 Encourage the private sector, in particular telecommunication and ecommerce services to employ cybersecurity good (proactive) practices 10.9 Specific Objective 6: Deploy tools to ensure vulnerable groups such as children are safe online 10.9.1 Actions: 10.9.2 Promote the deployment of technical measures such as web filtering tools that prevent access to harmful content by children and other vulnerable groups. 10.9.3 Encourage ISPs and other services providers to make their clients, especially parents and guardians aware of how to leverage available tools, technologies to manage potential risks to vulnerable groups while accessing services online. 11. PROGRAMMEE 12: ESTABLISHING CORPORATE DISASTER AND RECOVERY PLAN This program will require all CI’s to have a Corporate Disaster and Recovery Plan that will define contingency measures in case of attacks or disasters. It will define systems and procedures for the immediate recovery and resumption of their normal operations. This plan will include the following: 11.1 Actions 11.1.1 Establish Redundancy and back-up systems 11.1.2 Conduct Rapid assessment of attack and extent of damages, 11.1.3 Determine vulnerabilities exploited and conduct of restoration procedures to avert or deter similar attacks previously experienced by the system 11.1.4 Adopt standard operating procedures (SOPs) 11.1.5 Coordinate with GM- CSIRT and law enforcement units Page 37 of 112 GAMBIA NATIONAL CYBER SECURITY STRATEGY AND ACTION PLAN 2020-2024