theories and critiques which will test the capability and response action plans on whether they are achievable or not. The ‘One-to-one’ consultations, the ‘Nationwide’ consultations and the ‘Targeted consultations have great benefits for development of this Strategy and the future cyber security agenda. The consultations have brought out the following key findings:      The identification of Cyber-threat statistics in throughout Vanuatu; The need to increase Cyber resiliency and International engagement; The need for the establishment of a National Cyber Security Agency; The need to increase Cyber Security Awareness programs; The need to increase in cyber capabilities which will help combat cybercrime;  There is critical need for an Information Sharing Platform or Resource Centre; and  Recommendation to design and develop community ICT and Cyber Security Standards, Regulations and community bylaws to enhance community policing. The consultations has highlighted the urgent need for cyber security and ICT standards, regulations, and legal framework development. Consultation attendees have emphasized the need for legislations, standards, regulations and community bylaws to be developed and enforced on the use of technologies and age restrictions in communities and villages. 6.0 Cyber Security for National Critical Infrastructure in Vanuatu The Government of the Republic of Vanuatu is committed to its economic independence and selfreliance through cross-sector trade efforts. This commitment and determination has by far proven maturity to-date through major developments. Some of these developments in the Information and Communication Technology (ICT) and Telecommunications sector include the establishment of the Government Broadband Network (GBN) infrastructure, the National Cybersecurity Policy, the National Security Council, the National Security Strategy and the establishment of the Vanuatu National Computer Emergency Response Team (CERT Vanuatu | CERTVU). The developments highlighted above are part of the entire Vanuatu National Infrastructure. “National Infrastructure are those facilities, systems, sites, information, people, networks and processes, necessary for a country to function and upon which daily life depends. It also includes some functions, sites and organizations which are not critical to the maintenance of essential services, but which need protection due to the potential danger to the public.” - UK CPNI. In the Critical Infrastructure (CI) context, Cyber Security is usually a missing piece that poses an increasingly urgent risk to any nation or organization. The risks associated with critical infrastructure relate to either national disasters or Cyber-attacks. These risks and Cyber-attacks present unique sophisticated challenges [8] such as:  Cyber-threat or attacks lack distinct borders;  Threat or attack tactics and technologies are constantly evolving and increasing in frequency;  Public and private sector entities that manage critical infrastructure lack the following best practices; coordinated efforts, information-sharing processes, and effective standard operating procedures. Evolving technologies have also contributed to the increased risks in organizations but at the same time provides a greater level of protection against threats. The use of integrated robust Cyber Security methods can defend against malicious activities and anomalies in systems and networks. In addition, evolving technologies allow interconnectivity and interoperability between online essential services, processes and the security systems implemented to protect Vanuatu’s critical infrastructures. Interconnectivity and interoperability platforms and services bring in efficient service delivery and as 29 | Vanuatu’s Cyber Security Strategy 2030

Select target paragraph3