11.3
11.4
11.5
12
12.1
12.2
12.3
12.4
13
13.1
NATIONAL COMPUTER INCIDENT RESPONSE TEAM (CIRT) ....................................... 64
CYBERSECURITY PARTNERSHIPS................................................................................. 66
NATIONAL CYBERCRIME UNITS...................................................................................... 67
PRIORITY 4 – CAPACITY BUILDING ...................................................................................... 68
CYBERSECURITY SKILLS AND TRAINING ...................................................................... 68
JUDICIAL CAPACITY ......................................................................................................... 69
NATIONAL CULTURE OF CYBERSECURITY ................................................................... 69
CYBERSECURITY INNOVATION ...................................................................................... 69
PRIORITY 5 – INTERNATIONAL COOPERATION .................................................................. 70
COOPERATIVE INTERNATIONAL EFFORTS................................................................... 70
14
MEANS – ACTIONS .................................................................................................................. 72
15
PRIORITY 1 – LEGAL MEASURES .......................................................................................... 72
15.1
15.2
15.3
16
16.1
16.2
17
17.1
17.2
17.3
18
18.1
18.2
18.3
19
19.1
20
20.1
20.2
21
21.1
21.2
21.3
21.4
21.5
21.6
21.7
ACTION 1: LEGAL MEASURES STRATEGY ..................................................................... 72
ACTION 2: REVIEW ADEQUACY OF LEGISLATION ........................................................ 72
ACTION 2: GOVERNMENT LEGAL AUTHORITY .............................................................. 73
PRIORITY 2 – TECHNICAL AND PROCEDURAL MEASURES.............................................. 75
PROCEDURAL MEASURES .............................................................................................. 75
TECHNICAL MEASURES ................................................................................................... 80
PRIORITY 3 – ORGANISATIONAL STRUCTURES................................................................. 82
ACTION 1: ROLE OF GOVERNMENT................................................................................ 82
ACTION 2: NATIONAL FOCAL POINT ............................................................................... 83
ACTION 3: NATIONAL CIRT............................................................................................... 84
PRIORITY 4 – CAPACITY BUILDING ...................................................................................... 87
ACTION 1: CYBERSECURITY SKILLS AND TRAINING.................................................... 87
ACTION 2: CULTURE OF CYBERSECURITY ................................................................... 88
ACTION 3: CYBERSECURITY INNOVATION .................................................................... 90
PILLAR 5 – INTERNATIONAL COOPERATION ...................................................................... 91
ACTION 1: INTERNATIONAL CYBERSECURITY STRATEGY ......................................... 91
ASSURANCE & MONITORING ................................................................................................ 93
PLAN-DO-CHECK-ACT (PDCA)......................................................................................... 93
PERFORMANCE METRICS ............................................................................................... 95
ANNEX 1: DRAFT NATIONAL CYBERSECURITY STRATEGY ............................................. 99
INTRODUCTION................................................................................................................. 99
EXECUTIVE SUMMARY .................................................................................................... 99
STATEMENT OF PURPOSE .............................................................................................. 99
STRATEGIC CONTEXT ................................................................................................... 100
CYBERSECURITY ENDS ................................................................................................. 101
WAYS – PRIORITIES ....................................................................................................... 101
MEANS – ACTIONS .......................................................................................................... 109
22
ANNEX 2: TECHNICAL SOLUTIONS..................................................................................... 111
23
REFERENCES ......................................................................................................................... 117
10