Several tertiary institutions have incorporated cyber security into their ICT or computer science courses and there is a growing level of cyber security specialisation. Partnerships, including mentoring, internships, work experience and apprenticeships, between tertiary education providers and the private sector should be encouraged to ensure that courses and students are fit for purpose. The government is funding three new ICT Graduate Schools to be established in Auckland, Wellington and the South Island. These and other approaches across tertiary education may be one way for tertiary providers to work together with business to help grow cyber security capability. More can be done at the secondary school level to channel students into studying ICT (which should incorporate cyber security), including appropriate qualifications, mentoring, work experience, careers and further study advice. More can also be done to integrate “cyber hygiene” and safe use of ICT into primary and secondary school lessons as a basic component of digital literacy for all students. By the end of 2015, 90% of schools will be connected through the Ministry of Education-funded Network for Learning (N4L) providing a safe, online learning environment for students and staff. There is also scope to work with Connect Smart partners to support targeted cyber security courses, such as practical on-the-job training or e-learning modules for employees, or the incorporation of cyber security as a business risk for those on commerce or business management courses. Research, largely driven by the private sector including tertiary institutions, is necessary for New Zealand to develop its own innovation capability to deal with rapidly evolving cyber risks. This includes research into adversary tactics, including test beds, modelling and malware analysis. Such research can lead to the availability of improved defensive techniques and commercial opportunities for New Zealand businesses as the national and global market grows for innovative cyber security products and services. There should be strong links between the research sector and the proposed CERT. It is also important to strengthen New Zealand cyber security research capability so that it can tap into, and leverage off, international research networks. ACTIONS OUTCOMES WHO?* ACTION 1 • Media and commentators recognise Connect Smart advice as technically authoritative and trusted. NCPO/CERT • Traffic to the Connect Smart website, and social media followers, increases. Police EXPAND CONNECT SMART ACTIVITIES AND PARTNERSHIP • A growing range of Connect Smart partners are actively involved in promoting the Connect Smart message to their staff and clients, through their own media channels, and the Connect Smart website. • A high-level cyber security summit reinforces corporate commitment to cyber security and establishes a platform for strengthened cooperation. • There is a regular flow of public Connect Smart cyber security messages, including practical advice and tips, through multiple channels and linked to events and activities throughout the year. • Evidence through Connect Smart public surveys and research of growing cyber security awareness and capability amongst New Zealanders and businesses. • Increased number and range of Connect Smart partners. 6 New Zealand’s Cyber Security Strategy Action Plan 2015 MoE NCSC/GCSB DIA Private sector Connect Smart partners - NetSafe - NZITF