4 Overarching principles 4.8 Clear leadership, roles, and resource allocation The Strategy should be set at the highest level of the government, which will then be responsible for assigning relevant roles and responsibilities and allocating sufficient human and financial resources. Cybersecurity should be promoted and sustained at the highest levels of government. Moreover, to ensure accountability and progress, focal points of individual work streams need to be identified, and all parties involved should have a clear understanding of their respective roles and responsibilities. The Strategy should also allocate the human, financial and material resources necessary for its implementation. This principle needs to guide both the Strategy development process and the elaboration of the action plan for the Strategy. Further references available on page 59. 4.9 Trust environment The Strategy should help build a digital environment that citizens and businesses can trust. Building trust in the national digital ecosystem, in which users’ rights and interests are protected and security of data and systems is assured, is essential to realise the full potential of the social, political and economic opportunities offered by the use of ICTs. The Strategy must enable policies, processes and actions at the national level in order to render secure critical services (including e-governance, e-commerce and digital financial transactions, among others) supported by ICTs and utilised by the citizens. Such course of actions would inculcate the principle of trust not only among the general population but also within those public and private organisations that will offer their ICT-related services to citizens. Further references available on page 59. Guide to Developing a National Cybersecurity Strategy 34