Development of National Cybersecurity Guidelines The stakeholder consultations carried out during the process of developing this strategy revealed that people and businesses are seeking guidance how they can enhance Cybersecurity. Providing them as well the different government institutions with National Cybersecurity Guidelines responds to this demand. The government believes, that the unique situation of Kiribati shall be reflected when making available information and guidelines. Establishing a Kiribati Cybersecurity Working Group (KCSWG) The Kiribati Cybersecurity Working Group (KCSWG) will be formed. During the stakeholder consultations various existing government and nongovernment institutions were identified that are currently active in the field of Cybersecurity in order to create a diverse group. The KCSWG shall have the following structure: The KCSWG will be chaired by CERTKiribati with members from the both government private and academia institutions. These members should have a strong Information & Communication Technology (ICT) technical background, including technical knowledge on information security/cybersecurity. Members from legal institutions should be well versed with legal aspects and Kiribati National Cyber Security Strategy 2020 existing legislations relating Information Communication Technologies. The KCSWG should have at least one and no more than two representatives from these institutions, unless otherwise justified under certain circumstances. Roles and Responsibilities of KCSWG KCSWG is tasked with the development of a set of specific Cybersecurity and CyberSafety guidelines. It should go beyond policy statements and focus on concrete measures that will guide people, businesses and government institutions. It should address the following issues: Responsibility within the government and private sector, definition of processes, technical specifications and risk assessment and emergency plans. The responsibility section should clearly point out the roles and responsibilities of different institutions. This may include technical as well as management responsibilities. The government underlines that maintaining a sufficient crisis and incident management is a key component of any Cyber defence strategy. Taking into account the potential devastating impact of cyber attacks, clear rules and procedures are required that define under which circumstances certain people and institutions need to take action. The processes shall define Cybersecurity related requirements with 6