CYBERSECURITY STRATEGY OF THE REPUBLIC OF CYPRUS 2012 APPENDIX I   OVERVIEW OF STRATEGY ACTIONS Phase A o Phase A includes all of the actions that OCECPR is in a position to start in the immediate future with the resources that are currently available to it. Phase B o Phase B includes the actions that OCECPR will be in a position to coordinate once a new organisational structure has been developed, with the necessary resources to carry out the implementation of this Strategy in its entirety. Action 1 - Phase A – Formulation of the framework for collaboration and information exchange with OCECPR, and between public authorities, so that OCECPR will be in a position to effectively coordinate the nation’s strategic response in the area of cybersecurity and the protection of critical information infrastructures, as well as coordinating the actions that relate to other stakeholders in the priority areas that can be addressed immediately. ....................................................................................................................................................... 17 Action 2 - Phase A – OCECPR will, at the appropriate time and in cooperation with the other competent authorities, develop a report regarding new policy for its reorganisation, so that it will be in a position to fully coordinate the efforts of the Republic of Cyprus for optimum implementation, application and supervision of all of the actions and the effective response to threats that are prevalent in cyberspace today, as well as rising threats that will appear in the future................................................................................................................... 17 Action 3 - Phase A/B – Formation of working groups, with representatives from the public and private sectors (as necessary), to implement the Strategy Actions. ................................................................................................... 18 Action 4 - Phase B – Creation of an appropriate legal framework to fully support the provisions of the Cybersecurity Strategy. All relevant laws of the competent authorities must be assessed for any updated needs. ............................................................................................................................................................................ 18 Action 5 - Phase A/B – Comprehensive survey of the private sector, for the identification of groups and stakeholders that can contribute in a positive way to the improvement of the levels of electronic security in the Republic of Cyprus, while simultaneously creating the conditions for developing close collaborative relationships. ....................................................................................................................................................... 19 Action 6 - Phase B – Investigate the possibility of creating a dynamic PPP (Public-Private Partnership) in the area of critical information infrastructure protection in the Republic of Cyprus and promote active cooperation with international entities through participation in international fora. The use of the PPP to foster trust between the State and private sector will be of primary importance. ...................................................................................... 20 Action 7 - Phase A – Identification and assessment of the critical information infrastructures in the republic of Cyprus, to better target activities and actions for their protection, with the contribution of both the public and private sectors. .................................................................................................................................................... 21 31