ACTIONS OUTCOMES WHO?* ACTION 2 • Increased website hits on the SME questionnaire shows that it has proved popular. NCPO • Positive feedback from SMEs and other businesses that the advice has been useful. NZTE IMPROVE THE CYBER SECURITY CAPABILITY OF SMALL AND MEDIUM ENTERPRISES • Evidence that SMEs are willing to demonstrate their “cyber credentials” through self-assessment and independent verification. MBIE Connect Smart partners • Evidence (from surveys and market research) that customers and supply chain clients prefer businesses that can demonstrate their “cyber credentials”. ACTION 3 • Government agencies’ self-assessment reports to the PSR team and Government Chief Privacy Officer demonstrate improvements in the information protection capabilities of government agencies. BOOST THE CYBER SECURITY CAPABILITY OF THE CORPORATE • Increased number of corporates, including critical SECTOR, national infrastructure, have implemented the INCLUDING “top 4” mitigations. NATIONAL • Critical Infrastructure, using Industrial Control INFRASTRUCTURE, Systems (ICSs) and Supervisory Control and Data AND THE PUBLIC Acquisitions (SCADAs), have policies and procedures SECTOR NZSIS DIA/GCIO/GCPO NCSC/GCSB NCPO Connect Smart partners in place to mitigate cyber security threats. ACTION 4 PROMOTE CYBER SECURITY EDUCATION AND TRAINING, INCLUDING BUILDING A CYBER SECURITY PROFESSIONAL WORKFORCE ACTION 5 SUPPORT CYBER SECURITY RESEARCH AND BUSINESS INNOVATION • Improved understanding of the extent of cyber security and/or digital literacy training at primary, secondary and tertiary levels. • Identify gaps and opportunities in the supply of cyber security training given the growing demand for a cyber security professional workforce. NCPO MoE TEC NZQA MBIE • A public-private taskforce stimulates new initiatives to promote effective ICT training, incorporating cyber security, and links with the private sector (e.g. scholarships, competitions, internships, work placements, workforce training). DIA • An increase in the number of cyber security research projects funded in New Zealand. MBIE • Cyber security research projects have an impact on New Zealand’s understanding and mitigation of cyber security threats. NCPO • A cyber security innovation plan stimulates New Zealand businesses, universities and research institutes to build commercial opportunities based on cyber security research, innovation and development. Connect Smart partners - NetSafe - Education institutions - IITP NZTE NCSC Connect Smart partners International partners • A confidential survey of businesses provides an understanding of the cost and incidence of cyber insecurity to the New Zealand economy – and a benchmark is established to measure progress. * Refer to page 4 for detail on acronyms. New Zealand’s Cyber Security Strategy Action Plan 2015 7