Figure 13: Vanuatu’s National Cyber Security Priorities 7.1. Cyber Resilience ‘Resilience’ is generally defined as the capacity to recover rapidly from difficulties or problems. In the context of the National Cyber Security Strategy (NCSS) of Vanuatu, ‘Cyber resilience (CSP-1)’ is distinctive and defined as the ability to effectively prepare for, adapt, withstand, respond to and recover from cyber-attacks. “Cyber-resilience “Cyber-resilience is is the the ability ability to to anticipate, anticipate, withstand, withstand, recover recover and and adapt adapt to to adverse adverse conditions, stresses, attacks or c ompromises o n systems that i n clude c yber r esources.” conditions, stresses, attacks or compromises on systems that include cyber resources.” -- NIST NIST It is also defined as having the ability to be security-aware, be vigilant and have the ability to detect and identify cyber-threats. Thus, the national priority of cyber resilience is to help Vanuatu protect itself from cyber risks, defend against attacks by means of having the ability to limit the severity of attacks and ensure Vanuatu has a healthy and proactive cyber-resilience culture. The aim is to ensure Vanuatu continuously improves its Cyber Security efforts to strengthen National Security. The recently launched ‘National Security Strategy of 2019’ stated that Cyber Security is a key priority that will help Vanuatu increase its strategical plans to further invest in improving Vanuatu’s National Security by securing and protecting itself against cyber risks and attacks. The ability to effectively identify and manage risks permits better prioritization of threat mitigation and reporting. As such, Vanuatu’s emphasis is on implementing active and real-time measures to protect businesses, communities and citizens from a series of persistent attacks. These measures include establishing relevant policies and processes to help cyber resiliency in Vanuatu. The measures will also help organizations sustain operations, develop cyber resilience plans, cyber-preparedness plans, invest in tools and technologies, increase capability and execute long-term strategies with implementation plans. The Cyber resilience priority will help protect Vanuatu’s critical infrastructure and assets, improve incident responses and enable the development of a holistic risk management approach that forms part of our Cyber Security strategy. Vanuatu’s Cyber Security Strategy 2030 | 34

Select target paragraph3