This Strategy provides a brief two brief subsections on the on major reported cyber-threat cases identified in Vanuatu in 2018, 2019 and 2020. These data were recorded by CERT Vanuatu. It is also crucial to understand why Cybercriminals develop malware or cause cyber-attacks. Cyberthreats occur for a reason and the attackers responsible for these cyber-threats have specific motives. Motives are usually for financial gains and reputation. Cybercriminals or attackers leverage on vulnerabilities in systems, networks or from exploits and loopholes found in systems. Vulnerabilities exist not only in networks, but also within the user’s computer systems and mobile platforms. 3.2 Understanding Vulnerabilities in Vanuatu’s Cyberspace The technical perspective based on the IETF-RFC 2828 definition classifies vulnerabilities to common software, system and network security vulnerabilities. Over the years the common vulnerabilities identified in Vanuatu include some of the following [4], [5]:           Missing data encryption; flews OS command injection; SQL injection; Missing authorization; Unrestricted upload of dangerous file types; Reliance on untrusted inputs in a security decision; Cross-sit scripting and forgery; URL redirection to untrusted sites; Bugs; and Weak passwords; The list of vulnerabilities increases every year as new ways of stealing and corrupting data, systems and networks are discovered. Based on known past assessments with utilised resources, it is known that the systems and networks in Vanuatu are highly susceptible to cyber-threats. “‘Vulnerabilities’ in cyber security is defined as flaws or weakness in a system’s design, implementation, or operation and management that could be exploited to violate the system’s security policy” - IETF-RFC-2828 Over the years identified vulnerabilities range from unsecure default ports, open ports, unsecured websites, and easy passwords and are extremely vulnerable to social engineering, phishing and spams. In addition, lack of security awareness across the Internet and computer users in Vanuatu adds to the impact of how vulnerable Vanuatu is, in terms of Cyber-threats/attacks. Other vulnerabilities or threats include spams, DDoS attacks, SSL Poodle and SSL Freak vulnerabilities, DNS vulnerabilities and other minor vulnerabilities. These vulnerabilities expose Vanuatu in terms of computer security. Exposure leads to threats and critical errors in software, systems and networks can leave data in the entire network vulnerable to malicious threats. Some of these threats include:        Malware; Phishing; Proxies; Spyware and adware; Botnets; Spams; and Darknet services. Vanuatu’s Cyber Security Strategy 2030 | 10