No Action Sub-Action Deadline Responsible(Res) and Relevant (Rel) Organizations - Determining the security risk levels of the systems – and of the data – which process transactions in electronic environment, regarding all public organizations and agencies and the private September 2013 sector corporations that run critical information infrastructures. - Determining the procedures and principles of backing up sensitive data of all public organizations and agencies and the Establishing 14. business continuity and data backup systems private sector corporations that run critical information - Ministry of Transport, Maritime October 2013 infrastructures. - The Scientific And Technological Research Council of Turkey (Rel) - All public organizations and - Preparation of business continuity plans by all public organizations and agencies and the private sector corporations Affairs and Communications(Res) January 2014 agencies(Rel) - The public organizations that run critical information infrastructures. responsible for regulating and - Establishing information systems pursuant to the business continuity plans. - Organizing the exercises suitable for business continuity plans, and submitting the results to the Cyber Security Council. National Cyber Security Strategy and 2013-2014 Action Plan July 2014 auditing the critical sectors(Rel) December 2014 35/47