data holders – not just organizations that hold large amounts of personal data, but also those that hold data on vulnerable citizens here and abroad, such as charities;  high-threat targets – such as media organizations, where an attack could harm our reputation, damage public confidence in the Government, or endanger freedom of expression;  the touchstones of our digital economy – digital service providers that enable ecommerce and our digital economy, and who depend on consumer trust in their services; and  those organizations that, through market forces and authority, can exert influence on the whole economy to improve their cyber security, such as insurers, investors, regulators and professional advisors. . Our CNI – in both the private and public sector – continues to be a target for attack hence the need to protect these vital parts of our economy and support the organizations that heavily influence others. Across these and many other priority sectors cyber risk is still not properly understood or managed, even as the threat continues to diversify and increase. The Government shall, therefore, understand the level of cyber security across our CNI and have measures in place to intervene where necessary to drive improvements that are in the national interest. The Government shall:  share threat information with industry that only the Government can obtain so they know what they must protect themselves against;  produce advice and guidance on how to manage cyber risk and, working collaboratively with industry and academia, define what good cyber security looks like;  stimulate the introduction of the high- end security needed to protect the CNI, such as training facilities, testing labs, security standards and consultancy services; and  conduct exercises with CNI companies to assist them in managing their cyber risks and vulnerabilities. The CIRT-SL will provide these services for the most important companies and organizations, including the CNI. It will do so in partnership with departments and regulators, who will assure