Policy Paper on Cyber Security 2015 - 2017 b) Ordering/making it obligatory the periodic auditing and assessment of suitability and efficiency of the security of information systems, pursuant to the legal and regulatory framework in force. These measures will be taken in order to complete the current legislation in force11, which foresees auditing of state databases, leaving the systems in general outside the spectrum of action. c) Implement clear procedures under which state institutions that provide e-services for citizen, business, or for interaction between institutions will access the basics of it state data for the purpose of interoperability and improvement of service quality beneficiaries. d) Strengthening the institutions and increase in the security in the public administration by applying procedures and basic requirements that are accepted by all the actors. Strengthening the institutional framework a) Implementation of procedures for the protection of personal data of citizens in obtaining eservices. b) Education and awareness of actors in the public and private sector regarding the legal framework and regulatory in force. c) Establishing a unified reporting system for individuals and businesses reporting on crime cybernetics in order to take the necessary measures as well as the law enforcement institutions can determine the extent to which cybercrime in Albania affects individuals and on economy. 10 LAW Nr. 10325, dated 23.9.2010 “On the Basis of State Data” and DCM no. 945, dated 2.11.2012 for the adaption of the regulation "Administration of the System of State Data Bases" d) Evaluating the establishment of the respective respective structures at other institutions of public administration. Strengthening and supporting capacity building in the field of security cybernetics will be a continuous process in order for the state to serve as a model for security cybersecurity. e) Clear definition of structures and processes that will ensure coordination at the level politico-strategic and operational level including all actors in the public sector or private. 21

Select target paragraph3