UNCLASSIFIED Background 7. The CSERP has informed New Zealand’s response to cyber security emergencies since 2013. Throughout its existence, it has been updated to deliver the goals of the Cyber Security Strategy, adapt to the changing environment and reflect lessons learned from incidents and exercises. 8. Cyber security is a vital part of the government’s responsibility to advance the seven key objectives1 that underpin the “all hazards – all risks” approach New Zealand takes to national security. The CSERP is part of New Zealand’s broader National Security System (NSS) and should be read alongside the NSS Handbook2. 9. The CSERP is maintained by the Department of the Prime Minister and Cabinet (DPMC) and is authored in collaboration with other agencies with a role in cyber security. Principles 10. The response to a cyber security emergency should be a joint team approach focusing on remediating the event and guided by the following principles: • Cooperation. Information sharing between agencies and the private sector is effective and enables the best use of resources. • Coordination. Roles and responsibilities are defined and ensure that all response functions are performed, and duplication is avoided. • Sustainability. Resource needs are anticipated and can deal with additional contingencies, whilst still maintaining an appropriate level of response activity. • Timeliness. Processes for triage, notification, response structure establishment and decision-making are efficient. • Trust. Government maintains the trust, consent and confidence of victims and stakeholders, and speaks with a single voice. 1 The seven objectives are: ensuring public safety, preserving sovereignty and territorial integrity, protecting lines of communication, strengthening international order to promote security, sustaining economic prosperity, maintaining democratic institutions and national values, and protecting the natural environment. 2 National Security System Handbook, August 2016, https://www.dpmc.govt.nz/sites/all/files/dpmc-nss-handbook-aug-2016.pdf Page 5 of 12 UNCLASSIFIED 5

Select target paragraph3