- The Second Action Plan on Information Security Measures for Critical Infrastructures(NISC, Japan) - Principles for Formulating of “Safety Standards, Guidelines, etc.” concerning Assurance of Information Security of Critical Infrastructures (Revised on June 2007,NISC, Japan) - Principles for Formulating of “Safety Standards, Guidelines, etc.” concerning Assurance of Information Security of Critical Infrastructures (February 2006) - Action Plan on Information Security Measures for Critical Infrastructure(NISC, Japan) Above material are available at http://www.nisc.go.jp/eng/archive.html#CIP Chapter 2-4 Establishment of governance structure and identifying stakeholders - NIST Roadmap for Improving Critical Infrastructure Cybersecurity(February 2014 NIST, US) Chapter 2-5 Establishment of an information sharing scheme between the governments and/or regulators and private sector - The Basic Policy of Critical Information Infrastructure Protection (3rd Edition) (May 2014, NISC, Japan) - The Second Action Plan on Information Security Measures for Critical Infrastructures(NISC, Japan) Above material are available at http://www.nisc.go.jp/eng/archive.html#CIP - ESCAP Knowledge sharing series issue 2 CYBERSECURITY Chapter 2-6 IT security crisis management - Framework for improving Critical Infrastructure Cybersecurity Version 1.0(February 2014, NIST) Available at http://www.nist.gov/cyberframework - BS25999 (Part1 November, 2006 Part2 November 2007, British standards institution) Available at http://bsigroup.com/en-GB/iso-22301-business-continuity/ Chapter 2-7 Cyber exercise - National Exercise good practice guide (December 2009 ENISA) - On National and International Cyber Security Exercises Survey, Analysis and Recommendations (October 2012 ENISA) Available at http://www.enisa.europa.eu/ Chapter 2-8 Awareness raising activities for CII owners/operators - None

Select target paragraph3