3 Lifecycle of a National Cybersecurity Strategy Figure 1 - Lifecycle of a National Cybersecurity Strategy PHASE 1: INITIATION - Identifying the Lead Project Authority - Establishing a Steering Committee - Identifying stakeholders to be involved in the development of the Strategy - Planning the development of the Strategy Decision to issue new Strategy Strategy Development Plan PHASE 5: MONITORING & EVALUATION PHASE 2: STOCKTAKING AND ANALYSIS - Establishing a formal process - Monitoring the progress of the implementation of the Strategy - Evaluating the outcome of the Strategy - Assessing the national cybersecurity landscape - Assessing the cyber-risk landscape Action Plan Adjustments to Action Plan PHASE 4: IMPLEMENTATION Report and Consolidated Repository PHASE 3: PRODUCTION OF THE NATIONAL STRATEGY - Developing the Action Plan - Determining initiatives to be implemented - Allocating human and financial resources for the implementation - Setting timeframes and metrics - Drafting the National Cybersecurity Strategy - Consulting with a broad range of stakeholders - Seeking formal approval - Publishing the Strategy National Cybersecurity Strategy Guide to Developing a National Cybersecurity Strategy 17