effective government-led incident response function. Government continues to stress the
importance of industry, society and the public acting to safeguard their basic cyber security.
Our objectives are as follows:
The Government shall provide a single, joined-up approach to incident management,
based on an improved understanding and awareness of the threat and actions being taken
against us. The CIRT-SL will be a key enabler, as will partnership with the private sector,
law enforcement and other government departments, authorities and agencies;
the CIRT-SL defines clear processes for reporting incidents, tailored to the profile of the
victim; and
we will prevent the most common cyber incidents, and we will have effective
information-sharing structures in place to inform ‘pre-incident’ planning.
It is the responsibility of organization and company management, in both the public and private
sector, to ensure their networks are secure and to exercise incident response plans. In the event of
a significant incident, the Government incident management process will reflect the three distinct
elements of a cyber-incident: the precursor causes, the incident itself and the post-incident
response.
To deliver incident management that is effective for both government and the private sector, we
will work closely to review and define the scope of the Government response to ensure it
reinforces cooperation. We will build on our national cyber exercise plan, using our improved
understanding and awareness of the threat, to improve our offer of support to public and private
sector partners.
We will create a trusted and credible government identity for incident advice, assistance and
assurance. This will increase the cyber security awareness across the digital community and will
enable us the better to identify trends, take pro-active measures and, ultimately, prevent
incidents.
In moving towards automated information sharing (i.e. cyber security systems automatically
alerting each other to incidents or attacks), we will deliver a more effective service. This will
allow organizations to act swiftly on relevant threat information.
The Government shall measure its success in managing incidents by assessing progress towards
the following outcomes: