Policy Paper on Cyber Security 2015 - 2017 Accountability, monitoring and evaluating analysis Developing the cyber security under the circumstances of an information technology that is changing daily asks for particular attention from the public institutions. They should define the necessary requirements and ways to speed up the proces of active involvement of the private and public sectors, in order to discuss the policies of this Document and to implement them efficiently. Government Institutions play a leading role in terms of: 1. Completion of the legal framework in the area of cyber security; 2. Critical Information Infrastructures Identification and Protection (CIIP); 3. Developing and implementing the basic cyber security requirements; 4. Increase in investments in order to increase the security in the public networks/systems 5. Strengthening the partnership with other counterpart structures inside and outside the country; 6. Raise awareness of cyber security 7. Raise the level of knowledge, skills and capacities for expertise in the area of cyber security The Government Institutions should develop the preconditions and should encourage the private sector, NGOs and especially the operators of the Critical Information Infrastructures to:  Take part in the process of improving the legal framework in the area of cyber security;  To be active in the process of identification of the Critical Information Infrastructures;  To pay particular attention to the increase of human capacities;  Take an active part in defining the minimum requirements for cyber security;  Take part in meetings with representatives from public and private institutions in order to find solutions for important issues;  Present projects and participate in public discussions on legislation;  Take part in public – private partnerships;  Increase participation in monitoring the results of this Policy Paper. This Policy Paper will be monitored by the Interinstitutional Working Group for developing “The Policy Paper for Cyber Security”, which was set up according to the Order No. 120 dated 28

Select target paragraph3