We will broaden and deepen the existing regulatory system for the cyber security of CNI to include a wider range of operators across a broader range of sectors and to allow for the closer monitoring of compliance. This expanded system is likely to include aspects of higher education and electoral systems and will build upon the work already in place as a consequence of the NIS Directive. 6. The existing information sharing groups operated by the National Cyber Security Centre will be further developed, with the existing Threat Sharing Group being broadened to include a wider range of Critical National Infrastructure. The existing cyber security information sharing forums, such as the ‘Threat Sharing Group’ (TSG) and the ‘All Island Information Exchange’ (AIIE) will be substantially developed. 7. Government will introduce a further set of compliance standards to support the cyber security of telecommunications infrastructure in the State. We will introduce a new and specific set of security requirements for the telecommunications sector, with detailed risk mitigation measures to be developed by the NCSC to assist Comreg in fulfilling their statutory functions under existing EU Security Regulations (transposed by S.I. 333 of 2011), and the forthcoming EU Telecommunications Code ( Directive 2018/1972) Measure 3: The existing Critical Infrastructure Protection system flowing from the NIS Directive will continue to be deployed and developed, with particular focus on the ongoing compliance and audit programmes to mitigate risks to key services. Actions for Delivery Timeline by Lead Quarter 1 Complete first phase of Operators of Q1 2020 Key Stakeholders NCSC Essential Services (OES) Self- Designated OES Assessment against Security Control Framework 2 Commence Security Control Testing of Q3 2020 NCSC Operators of Essential Services (OES) 3 Reassess Register of Designated OES Designated OES Q3 2020 NCSC 28