ANNEX Activities Key for Timeline: Long Term - within 3 years Medium Term - within 2 years Short Term - within 1 year TECHNICAL MEASURES Objectives Activities Timeline Lead Role Critical infrastructure systems are resilient in the face of current and future cyber threats 1. Create a robust national response and recovery capability for IT systems critical infrastructure systems. Medium Term MSTEM, eGov Jamaica Ltd and owners and operators of Critical Infrastructure Short –Medium Term MSTEM, CIRT 2. Ensure that measures are in place to guarantee continuity of operations of all critical infrastructures after a system compromise. 3. Promote and encourage adherence to international best practices among owners and operators of critical infrastructure. 4. Encourage self-regulation by the owners and operators of critical infrastructure. 5. Develop a system of reporting by owners and operators of critical infrastructure to the Government of any major security breaches detected. National capability for ensuring timely and effective response to cyber incidents is established and maintained 1. Establishment of the CIRT with operational and administrative procedures inclusive of continuous monitoring of the national infrastructure and networks to ensure continuity and development. 2. Establish fraternal links to international CIRTs with protocols for engagement. 3. Conduct continuous risk assessment to determine current and future threats, as well as, develop and maintain a threat list. 4. Issue early warnings to stakeholders on a continuous basis to reduce exposure to risks. 34 National Cyber Security Strategy Government of Jamaica