come of the threat to interested parties. This policy provides for the establishment of two categories of CSIRTs; a National CSIRT an entity acting in the national interest serving the private sector, government and civil society and a Government, and a Government CSIRT an entity acting in the interest of Government serving organs of state. It is crucial to note that CSIRT’s do not substitute the existing local and national emergency preparedness, disaster recovery, business continuity or crisis teams, intelligence agencies or any other similar organization. This policy provides for the establishment of a National CSIRT and a Government CSIRT. 3.2.1 National CSIRT It will be responsible for monitoring threats and coordinating the national response to cybersecurity incidents and coordinate the protection of critical infrastructure against cyber incidents. The National CSIRT will be the entity acting in the national interest serving the private sector, government and civil society. The National CSIRT shall be established by the Department of Communications. The role of the National CSIRT will include the following among others to:  act as national point of contact for coordination of incident handling activities, including identifying stakeholders and developing public private relationships and collaboration with other CSIRTs to address cybersecurity;  analyse incidents, vulnerabilities, threats, information about which is disseminated by other CSIRTs, vendors, technology experts etc.;  create and maintain situational awareness concerning the risk environment of the South African cyber space;  act appropriately on threat information;  facilitate interaction both nationally and internationally, including through international memberships to organisations such as Forum for Incident Response and Security Team (FIRST);the Minister will develop policy guidelines to inform such interaction.  encourage and facilitate the establishment CSIRTs in various sectors; and  conduct cyber audits, assessments and readiness exercises;  establish standards and best practices for South Africa for council’s consideration. 8

Select target paragraph3