STRATEGY COMPONENTS 6.5 Public Awareness Complementary to the capacity building section, this concerns the means to raise awareness and thereby improve Cyberhygiene among users of Cyberspace, in both the public and private sectors and across civil society. ASPECTS TO CONSIDER EXAMPLE TEXT FROM PUBLISHED STRATEGIES AND BEST PRACTICE focused investment by March 2012 – United Kingdom • Promote the training of professionals, give impetus to industrial development and strengthen the research, development and innovation (R&D&I) system in cyber security matters – Spain • Arrange periodic sensitization activities to increase and maintain awareness (e.g. annual awareness week) Design educational communication tools (e.g. web-based information, use of social-networks). Create a culture of responsibility for good Cyber behaviour. Develop special awareness initiatives for the protection of children and other vulnerable groups when online. Encourage service providers to establish consumer alert systems and ensure implementation. “Promote a national culture of cyber security consistent with United Nations General Assembly Resolutions 57/239 entitled “Creation of a global culture of cyber security”; and 58/199 entitled “Creation of a global culture of cyber security and the protection of critical information infrastructures” – Trinidad & Tobago Create a network of CERTs that can handle minor incidents without central intervention. “A national Cybersecurity steering group or council with membership drawn from cabinet, national security, and relevant Ministries to ensure coordination at the political level.” • • • • 6.6 Incident response This section describes the operational • Strengthening a cyber security culture; incorporating cyber security and media competence into all levels of education and training; – Austria Establish an effective mechanism of disseminating information security issues for different constituencies – Uganda Promote, foster and maintain culture of information security for awareness creation in Government, business and private sectors, civil society and the citizenry. Organize annual events to promote information security. Raise the awareness of citizens, professionals and companies about the importance of Cybersecurity and the responsible use of new technologies and the services of the Information Society Page 24 of 33 www.cto.int