MINISTRY OF SCIENCE, TECHNOLOGY AND TELECOMMUNICATIONS Any infringement of security having a significant impact on the services supplier’s operation should be mitigated; SCI and SCADA operators shall thus be encouraged to implement security policies which establish the approach of identified risks and possible vulnerabilities. Some norms shall be considered in the construction of resilience in this sector; for example, the ISO 27001 and ISO 27002 norms shall be included; NERC CIP-002-3 through CIP-0093 38 , Special Publication NIST 800-82 and the Framework for Improving the Critical infrastructure Cybernetic Security39, among others. Strategic Line 5.1 Identification and Classification of Critical Infrastructures   Identify the country’s critical infrastructures as essential step for the application of security measures. Create a commission to create public policy comprised by a representative and a substitute from each one of the public institutions and private entities identified, with the purpose of ensuring the operating conditions and ongoing stability of these services. Strategic Line 5.2. Implementation of security measures on the Public Administration’s Information and Telecommunications Systems  Design cybersecurity protocols for the executive Power’s Ministries, consistent with the maturity of each of the institutions and the public sector’s current needs. MICITT’s Computer Security Incident Response Team (CSIRT-CR) shall be in charge of collaborating and advising on the design of such instruments. 38 North American Electric Reliability Corporation (NERC). CIP Standards. [Online]. Recovered August 27th of 2015 from, http://www.nerc.com/pa/Stand/Pages/CIPStandards.aspx 39 National Institute of Standards and Technology (2014). Framework for Improving Critical Infrastructure Cybersecurity. [Online]. Recovered August 27th of 2015 from, http://www.nist.gov/cyberframework/upload/cybersecurity-framework-021214-final.pdf (updated December 5 2014). - 43 www.micitt.go.cr