Table of Contents 3.4 Phase IV: Implementation Developing the action plan 24 3.4.1 3.4.2 Determining initiatives to be implemented 24 3.4.3 Allocating human and financial resources for the implementation 25 3.4.4 Setting timeframes and metrics 25 3.5 Phase V: Monitoring and evaluation 26 3.5.1 3.5.2 Monitoring the progress of the implementation of the Strategy 26 3.5.3 Evaluating the outcomes of the Strategy 27 4 Establishing a formal process 24 26 Overarching principles 29 4.1 30 Vision 4.2 Comprehensive approach and tailored priorities 30 4.3 Inclusiveness 31 4.4 Economic and social prosperity 31 4.5 Fundamental human rights 32 4.6 Risk management and resilience 32 4.7 Appropriate set of policy Instruments 33 4.8 Clear leadership, roles and resource allocation 34 4.9 Trust environment 34 National Cybersecurity Strategy Good Practice 35 5.1 Focus area 1 – Governance 36 5.1.1 Ensure the highest level of support 36 5.1.2 Establish a competent cybersecurity authority 37 5.1.3 Ensure intra-government cooperation 37 5.1.4 Ensure inter-sectoral cooperation 37 5.1.5 Allocate dedicated budget and resources 38 5.1.6 Develop an implementation plan 38 5 5.2 Focus area 2 – Risk management in national cybersecurity 5.2.1 Define a risk management approach Guide to Developing a National Cybersecurity Strategy 38 39 2