A/RES/58/199 Annex Elements for protecting critical information infrastructures 1. Have emergency warning networks regarding cyber-vulnerabilities, threats and incidents. 2. Raise awareness to facilitate stakeholders’ understanding of the nature and extent of their critical information infrastructures and the role each must play in protecting them. 3. Examine infrastructures and identify interdependencies among them, thereby enhancing the protection of such infrastructures. 4. Promote partnerships among stakeholders, both public and private, to share and analyse critical infrastructure information in order to prevent, investigate and respond to damage to or attacks on such infrastructures. 5. Create and maintain crisis communication networks and test them to ensure that they will remain secure and stable in emergency situations. 6. Ensure that data availability policies take into account the need to protect critical information infrastructures. 7. Facilitate the tracing of attacks on critical information infrastructures and, where appropriate, the disclosure of tracing information to other States. 8. Conduct training and exercises to enhance response capabilities and to test continuity and contingency plans in the event of an information infrastructure attack, and encourage stakeholders to engage in similar activities. 9. Have adequate substantive and procedural laws and trained personnel to enable States to investigate and prosecute attacks on critical information infrastructures and to coordinate such investigations with other States, as appropriate. 10. Engage in international cooperation, when appropriate, to secure critical information infrastructures, including by developing and coordinating emergency warning systems, sharing and analysing information regarding vulnerabilities, threats and incidents and coordinating investigations of attacks on such infrastructures in accordance with domestic laws. 11. Promote national and international research and development and encourage the application of security technologies that meet international standards. 3