9712 evsjv‡`k †M‡RU, AwZwi³, gvP© 11, 2014 Action 3: National Incident Management Capacity Timely identification, communication and recovery from major cybersecurity events and weaknesses affecting critical information infrastructure can often mitigate the damage resulting from malicious cyberspace activity. Best practice indicates that these efforts are most effective at national level because they provide wider participation in analysis, warning, information gathering, vulnerability reduction, mitigation and recovery. Inevitably, the government needs to work with the private sector to coordinate a national response because private firms own the infrastructure and often have better skills. The government creates legal and regulatory incentives to encourage critical infrastructure owners and operators to ensure that their systems are resilient to attacks. This Strategy identifies the following actions regarding cyber incident response: • Build Bangladesh Computer Incident Response Team (BD-CIRT) at the National Cybersecurity Council; • Establish a public-private framework for responding to major cyber incidents; • Encourage development of business continuity and disaster recovery capacity; • Develop strategic and tactical cyber attack and vulnerability assessment capacity; • Encourage the development of private sector capacity to share status information about the health of cyberspace; • Coordinate processes for voluntary participation in the development of national public-private continuity and contingency plans; • Create a Cyber Warning and Information Network at Cybersecurity Council; and