Cybersecurity capacity enhancement and a coordinated incident response Cybersecurity capacity building with CERTKiribati submitted to CERTKiribati and included in their annual report. CERTKiribati shall provide a list of capacity building programs related to Cybersecurity that Kiribati could benefit from. To avoid an overlapping CERTKiribati shall develop a roadmap that lists the different capacity activities that the country require, identify potential programs and make suggestions which programs cover which activity. National Incident Reporting Education and awareness for children about cybersecurity Child Online Protection Surveys carried out with the support of the International Telecommunication Union (ITU) in 2013 and 2018 revealed that students wish for more Cybersecurity training in schools. The The Ministry of Education (MOE) and the Ministry of Women, Youth, Sport and Social Affairs (MWYSSA) will in cooperation with CERTKiribati and other authorities in Kiribati develop a curriculum to ensure that all students at primary school and high school receive at least once a year an updated training on Cybersecurity that includes information about latest trends. Training materials, background information for teachers and sample presentations shall be developed. In addition schools should receive a questionnaire to enable them to assess the use of ICT service by students as well child specific Cybersecurity risks. The anonymous assessment shall be carried out on anannual basis and the results shall be Kiribati National Cyber Security Strategy 2020 Citizens, businesses and governments shall be encouraged to report cyber incidents. The provider of critical national infrastructure shall be obliged to submit such reports. To support the idea of information sharing, CERTKiribati shall develop routines to detect recent trends in relation to Cybersecurity incidents, create an emergency level system, summarizing incidents in a reporting format and providing background information, developing a network to communicate such reports through the relevant communication channels (e.g. press releases, information submitted to cooperation partners in rural areas) and submitting this information. This shall include the publication of relevant, nonconfidential information on a regular basis on a publicly accessible website. Once a year, CERTKiribati shall submit a summary report on their work and especially notifications received. It should provide the government with regular briefings and provide additional information on request. CERTKiribati shall ensure that the information submitted to the different stakeholders reflect their needs with regard to details (e.g. executive summary for the minister, detailed information for system administrators on technical aspects of an attack) and that information are not distributed to recipients that are not affected. 10