Paving a Path to a Safer Cyber Space for all Strengthening existing organizational structures While the government is committed to protect businesses and the people in Kiribati from threats related to Cybersecurity it emphasizes the importance of self-protection and underlines the responsibility of the individual. The government will support the self-protection by providing knowledge through CERTKiribati. Risk and vulnerability assessment for an effective cybersecurity strategy Government institutions and business are encouraged to undertake an individual risk assessment, develop and implement a Cybersecurity strategy that addresses the main risks, designate a member of senior management as Chief Information Security Officer, responsible for Cybersecurity efforts and initiatives, maintain state-of-the art Cybersecurity technology that reflects it’s risk landscape, implement risk assessment and risk management processes, have business continuity management and crisis management plans in place and carry out regular exercises. Further requirements apply to the provider of critical infrastructure. CERTKiribati shall support this process and develop a standard risk assessment framework for businesses in Kiribati. Businesses in Kiribati are encouraged to utilize this framework. CERTKiribati shall in addition evaluate the need to implement an Kiribati National Cyber Security Strategy 2020 evaluation/certification program for Cybersecurity services, products and systems. CERTKiribati shall develop andimplement technical and organizational protection measures as well as emergency plans to protect essential government services (such a eGovernment) Cybersecurity In Education Curriculum CERTKiribati will make recommendations and work in collaboration with the Ministry of Education for introduction of cybersecurity into the national education curriculum. The cybersecurity subject should include basic definitions of cybersecurity related terminologies and should gathered to allow and develop students’ knowledge on ICT and cyber security. Outer island strategy The government is committed to further increasing connectivity on the Outer Islands with several milestones already achieved. Cybersecurity is as much of a threat for people, business and the government in the Outer Islands as it is elsewhere. The government will therefore ensure that Cybersecurity measures implemented by this strategy are rolled out in Outer Islands as well. Where necessary infrastructure is missing additional distribution channels and strategies will be developed. 12