4.5.3.1. Expedite the establishment and operationalization of a national CERT with clear processes, defined roles and responsibilities 4.5.3.2. Continuously develop the capacity of staff at Malawi National CERT to address the fast changing technical requirements, and develop abilities to actively obtain information in cyberspace, about current cyber risks and threats 4.5.3.3. Develop a national incident reporting, information sharing and coordination mechanisms to address reporting of incidents and coordination in incident response 4.5.3.4. Create and continuously update cybersecurity incidents register, assess incidents, and suggest measures to resolve issues and mitigate threats and risks 4.5.3.5. Specify minimum and mandatory log/register requirements necessary for dependable cybersecurity incident analysis 4.5.3.6. Continuously monitor, analyse and assess cyber threats and potential risks and be able to provide a real time overview of the state of cybersecurity across the country 4.5.3.7. Develop a Cybersecurity Governance Framework for defining roles and responsibilities of all stakeholders in the cybersecurity ecosystem as well as describe SOPs and Code of Conduct in responding to incidents 4.5.3.8. Establish a call center/help line for reporting incidents or seeking assistance with incidents 4.5.3.9. Develop and implement cybersecurity incident simulation scenarios and programs that can be used during the national exercises 4.5.3.10. Develop and continuously update cybersecurity contingency plans, which will include roles of the military/security forces during cyber-attacks and emergencies 4.5.3.11. Develop and test requisite crisis management measures during frequent cyber drills 4.5.3.12. Evaluate cyber drills to develop options on how to improve crisis management measures 4.5.3.13. Develop a Cyber Defence Strategy that details approaches to addressing threats to national security in cyberspace 4.5.3.14. Establish a Central Defence Command and Control Centre for cybersecurity in Malawi II. Strategic Goal (ii): Develop and enhance cybersecurity - related capacity, infrastructure, Legal, regulatory and other related frameworks The limitation of cybersecurity capacity, infrastructure, and other related frameworks is recognized as a key challenge for Malawi which impairs the nation’s efforts in ensuring high levels of cybersecurity. Aligned to the national vision of creating information driven and knowledge based society, the Government of Malawi will seek to ensure that there is an available pool of highly skilled and knowledgeable cybersecurity professionals in Malawi. The Government will also seek to promote research and development in cybersecurity as well as create an enabling environment where innovation and creativity in cybersecurity can be fostered. 13