4.2.1.3 Owners of CIIs and information systems' abilities to manage cyberthreats and cyber incidents is improved. Actions: 4.2.1.1 Establish a directory of CIIs and information systems in Senegal. 4.2.1.2 Define the cybersecurity frameworks, procedures and processes required for any institution which has or manages CIIs and Senegal's information systems. 4.2.1.3 Establish a framework for managing the vulnerabilities of CIIs and Government information system to encourage monitoring them regularly. 4.2.1.4 Conduct tests and other surveillance activities regularly on CIIs and information systems in Senegal. 4.2.1.5 Define minimum and maximum security requirements for Senegal's CIIs and information systems. 4.2.2 Specific aim 2.2: monitor cyberthreats and risk management permanently The number and gravity of the cyberthreats and cyber-risks facing individuals and organisations continues to grow. Our national cybersecurity structure will be responsible for coordinating managing these cyberthreats and risks, current or emergent, at national level. Expected outcomes: 4.2.2.1 A coordinating national approach and implementation for managing incidents, supported by a current statement of cyberthreats have been adopted. 4.2.2.2 Senegal now has a better understanding of the size and scale of cyberthreats since cyberincidents were reported to our national cybersecurity structure 4.2.2.3 Senegal's management of cyber-incidents has been more complete, effective and efficient since a centralised authority was set up for reporting incidents and response to the national cybersecurity structure. Actions: 4.2.2.1 Define minimum requirements in keeping records of incidents needed to analyse them. 4.2.2.2 Monitor, analyse and manage threats and risks continuously, mitigate, prepare for, respond to and recover from incidents. 4.2.2.3 Set up a national register of risks, regulations and national directives to promote evaluating and managing risks. 4.2.2.4 Create a cybernetic incident log and update it continuously, assess such incidents and offer solutions. 4.2.2.5 Implement data protection and risk management procedures. 15