These measures are set out through the following national goals and action plans shown below: CSP-1 Goal Vanuatu will: Cyber Resilience Vanuatu’s Action Plan: » » » » » Threat Protection Recoverability Adaptability Durability Security and Intelligence agencies to combat cyberattacks and cybercrime. » Develop a blueprint for the for a multi-stakeholder cyber resilience (cyber security bundles). » Awareness raising and engagement Plans. » Enhance CERT Vanuatu’s operations. » Introduce additional agencies such as National Cyber Security Agency (NCSA), the Government Security Operations Center and Sectorial CSIRTs Vanuatu’s Cyber Resilience Priority Goals: Build a strong and robust Cyber Security posture and culture for Vanuatu, its businesses, communities and citizens including tourists. Increase and improve core cyber security mechanisms to equip Government Cyber experts and other experts to have the ability to actively respond to cyber-attacks at near real-time. To achieve this goal Vanuatu is empowered to:  Establish proper mechanisms to strengthen Cyber Security and enable better Cyber resilience progress.  Increase CERT Vanuatu’s capability and ability to respond to cyber-attacks at near real-time.  Encourage and introduce Security Operation Centres (SOC) in the Government ICT and Security structure and in the private sector organizations.  Work towards the development of the National Cyber Security Agency (NCSA) of Vanuatu.  Increase people’s cyber resilience through Awareness Raising, increasing Capability, and Engagement.  Increase people’s cyber resilience at work and in societies.  Establish and improve our whole cyber security workforce and framework to ensure that skills supply meets demand and early threat detection mechanisms are proactive throughout all Vanuatu.  Establish sustainability and cyber-preparedness programs for organizations in Vanuatu.  Establish the Cyber Emergency Communications Strategy. 7.2. Cyber Security Awareness It is commonly echoed across the cyber security domain that Cyber security is everyone’s business and not the government or an agency alone. Cyber security is a shared responsibility and it is attracting the attention of the broader range of stakeholders in Vanuatu. It values the need for an operational Government-private sector partnership that incorporates institutions of all sizes along with stateowned enterprises, local, and regional agencies to execute effective Cyber-threat Incident Response. For example, the current cyber security and cyber safety landscape in Vanuatu shows two popular distinctive cyber risk trends: 1. 2. An increase of online social issues rising from incorrect use or abuse of technologies and social media platforms. These abuse incidents include cyberbullying, cyber-stalking, online shaming, hate speeches, and misinformation or disinformation. An increase of Internet users and organizations are victims of malware attacks, phishing and online scams relating to rewards (money and lottery prices). These cyber-threats are equally common across all government, business and the civil society sectors. 35 | Vanuatu’s Cyber Security Strategy 2030