A/75/123 Some of the measures adopted by the National Police with regard to cyberspa ce are set out below. 1. Development of the information security policy The information security policy establishes standards and guidelines to ensure appropriate use of technological tools designed to protect the information technology and physical resources of the police, as a key input for the fulfilment of its constitutional mission, and to guarantee continuous improvement, managing and protecting the mission through the effective application of best practices and controls and guaranteeing the confidentiality, availability and integrity of information in general. 2. Training sessions The National Police of Honduras, through the Police Telematics Directorate, holds cyberspace awareness sessions for operational and administrative personnel on an ongoing basis. It also participates in special activities, providing training on issues such as cyberbullying, social engineering, fake news, cybercrime and cybersecurity. 3. Implementation of a local network Our intranet page, “Poliweb”, is used to keep our staff informed about the latest trends in cybercrime, publish important newsletters on cybersecurity developments in our environment and disseminate policies derived from the information security manual for the preservation of computer security. This internal connectivity allows all internal operations of the National Police to be carried out through our local network or intranet, thus minimizing the risk of our users accessing unknown sites and saving Internet resources and bandwidth. 4. Incident management and investigation The information security team carries out continuous monitoring of the institutional data network, identifying vulnerabilities in and threats to equipment that may be caused by our users, either through inappropriate Internet surfing or through attempts to circumvent our restrictions. At the same time, steps are being taken to investigate and manage computer incidents in the institutional network. The Information Administration Section and the Incident Management Section of th e Information Security Department analyse known vulnerabilities that could put institutional systems and information at risk. These vulnerabilities are appropriately managed and remedied through the following formal procedure: • Addition to information asset inventories of data relating to the software provider, version, current deployment status and the officer responsible for the software. • Biannual conduct of vulnerability analysis. • Maintenance of up-to-date information on new vulnerabilities. • Establishment of a timeline for applying fixes and remedies for known vulnerabilities. • Testing of fixes or patches for vulnerability remediation before deployment in production environments. 44/84 20-08285