10. Ensure the LTA establishes procedures for registration of SIM Card in line with national identification processes and international standards subject to periodic review. Currently, the level of institutional and technical resources allocated to the country’s cyber-security needs are insufficient. A first step will be to perform a risk-based assessment to identify and document GoL’s national critical ICT infrastructures, systems and data assets for proper protection against exploits. In order to develop the appropriate institutional framework to address the country’s cyber-security needs, the government will develop tools and strategies at three levels. First, in terms of national security, the government will continually and actively assess threats that can undermine the country’s sovereignty. This can include threats against government infrastructure and institutions. Second, at an organizational level, it is important to consider threats against private sector, civil society and other organizations. The government will provide support for these groups where possible and will explore options to incentivize these groups to improve their cybersecurity practices, including provision of support for human resource development. An institutional framework will be developed to maintain the integrity, resilience, and security of all ICT infrastructure and assets across the GoL and the country as a whole in an integrated and comprehensive manner. This will require improved inter-agency cooperation in keeping with the sectoral structure outlined below. Finally, in terms of individual citizens, the government will ensure that efforts are made to raise awareness and improve online safety for all. This will include legislation to protect user data and devices from unauthorized access, theft, and misuse. 5.5.2 Policy Strategies Summary 1. Ensure that the pursuit of government’s cyber-security objectives do not undermine the fundamental openness of the Internet; 2. Encourage the development and implementation of the government’s cybersecurity objectives in partnership with private sector and civil society and youth organizations wherever possible; 3. Establish a cyber-security advisory council drawing on experts within government, the private sector, academia, judiciary, security services, youth organizations and civil society to best advise the government on the implementation of these policy objectives while also raising awareness within government of the latest cyber-security concerns and issues. This committee will host regular (more than once per year) public consultations on cybersecurity in Liberia; 4. Develop an appropriate legal framework based on above objectives of this policy that protects consumers’ data and devices (updating any previous parliamentary bills) within one year of the approval of this policy; the subsequent law is to be reviewed and updated as required every two years; 5. Ensure government and private sector abide by these cyber-security policy objectives in order not to undermine the fundamental human rights of any citizen, particularly those most likely to be subject to online abuse and harassment such as women and girls; 37