2 Principles The principles to be considered in ensuring national cyber security are as follows: 1. Cyber security is ensured by means of methods based on efficient and continuous assessment and improvement based on risk assessment. It is aimed that risk management methods to be created will address threats and vulnerabilities and determine new risks and to offer methods for reducing these risks to an acceptable level. 2. In order to provide cyber security, all stakeholders must know about cyber security risks and be aware that their approaches towards the management of these risks will affect not only them but also others. In order to achieve this level of awareness and competency, all stakeholders must acquire necessary trainings and experience. In addition to the technical dimension, an integrated approach including legal, administrative, economic, political and social dimensions is adopted. 3. Risk management involves rapid removal of technical vulnerabilities, preventing and responding to attacks and threats, and minimizing potential damages. Having and implementing a preparedness and continuity plan against cyber incidents is important in minimising losses. 2016-2019 National Cyber Security Strategy 15/26