Attachment III As noted in the official communique from the meeting, the draft action plan, as presented, was endorsed by all attendees and commitment was given to continue working together to finalize the plan and to implement the action items as identified (Appendix 1 – CSM II Communique). This CARICOM Cyber Security and Cybercrime Action Plan (CCSCAP) therefore represents a consolidated vision for raising awareness; building new skillsets; establishing appropriate legal and technical frameworks; establishing effective mechanisms for responding to threats and incidents; and cultivating the global collaborative relationships, all of which are essential for improving Cyber Security and dealing with Cybercrime in the region. The purpose of this document is to provide a framework within which all initiatives of Cyber Security and Cybercrime in the region will be developed, implemented and controlled in order to ensure they are properly synchronised, duplication is eliminated and the benefit to the region is maximised. It should also be noted that the issues of Cyber Security and Cybercrime are borderless, hence this CARICOM Cyber Security and Cybercrime Action Plan will serve as the platform for other Caribbean countries (non‐members of CARICOM) to collaborate with the CARICOM Member States and Associate Member States. 3. Overview of the CARICOM Cyber Security and Cybercrime Action Plan The CARICOM Cyber Security and Cybercrime Action Plan seeks to address the Cyber Security vulnerabilities in each participating Caribbean country and to establish a practical, harmonised standard of practices, systems and expertise for Cyber Security, to which each Caribbean country could aspire in the short and medium terms. It also seeks to build the required capacity and infrastructure to allow for the timely detection, investigation and prosecution of Cybercrime and possible linkages to other forms of criminal activity. The plan will therefore address: i. ii. iii. iv. v. The establishment of a proper governance framework, including a Regional Cyber Committee; The identification of minimum standards for Cyber Security for each country; An updated (desk) status review of each country; Identification of mechanisms for implementation of the relevant action items ‐ Common Needs, Solutions and agencies/partners with interest (present or potential); and Monitoring and evaluation of activities to ensure that objectives are being achieved. It should be noted that the purpose of the Action Plan is to guide and coordinate efforts within the region recognising that while this does not itemise a conclusive list of needs, it seeks to layout capacities that are needed throughout the region as a whole. It is believed that if comprehensively addressed there will be considerable improvement in the ability of the Region to respond to cyber Page 6 of 24