Specific Objectives Strategies/ Actions Deliverables/ Outputs Lead Implementing Agency and Support Time Frame Key Performance Indicators Possible Funding Sources and Mechanisms A Central Defence Command and Control Centre for cybersecurity MDF 12 months Extent of operationalization of a Central Defence Command and Control Centre for cybersecurity MDF cyberspace 3.4.2.14 Establish a Central Defence Command and Control Centre for cybersecurity in Malawi Strategic Goal – 2: frameworks 3.4.3 Specific Objective 3: Strengthen Malawi’s legal and regulatory frameworks to enhance cybersecurity in Malawi Develop and enhance cybersecurity-related capacity, infrastructure, legal, regulatory and other related 3.4.3.1 Undertake a gap analysis to identify gaps in current ICT Security legal and regulatory framework and develop requisite instruments to address Gaps including issues relating to privacy and data protection. A gap analysis to identify gaps in current ICT security legal and regulatory framework Ministry of ICT Requisite instruments to address Gaps including issues relating to privacy and data protection MACRA 3.4.3.2 Develop and publish a cybersecurity policy and standards consisting of general and sector-specific cybersecurity controls that would be recognized as a A Cybersecurity Framework (CSF) consisting of general and sector-specific policies and controls Ministry of ICT 1 year Ministry of Justice and Constitutional Affairs MACRA Enacted amendments to existing legislations or policies Enactment of new policies/legislations Ministry of ICT Ministry of Justice and Constitutional Afairs MACRA Within 6 months and continuous Extent of adoption/implemen tation of A Cybersecurity Framework (CSF) Ministry of ICT MACRA Page | 40

Select target paragraph3