Measures National know-how in the area of ICT security: Strengthening and establishing national interdisciplinary competence centres in the area of ICT security as well as general, state-of-the art training in this field. of the IT and ICT sectors for whom continuous further training is essential, sole proprietorships as well as small and medium-sized enterprises not active in the technology sector as well as private persons (e.g. the 65+ generation). Measures Promoting networking among individual educational organisations: Active cooperation among all educational institutions in Austria is of crucial importance. Curricula must be harmonised to achieve synergies and to use resources economically. Special attention has to be paid to the interface between identification of threats and response to system-specific risks. Consideration of security aspects in ICT training: “Security by design”—as a guiding cross-cutting theme—means that security issues should be taken into account in all areas of ICT training. Objective 4: ICT security as an important element of adult education/further training Hypothesis: Today much of specialised knowledge becomes obsolete very rapidly, particularly in the ICT sector. Continuous further training and qualification programmes are therefore an important prerequisite for employee retention and productivity. ICT users, e.g. in small companies or in the private sector, pose a potential threat to the entire ICT infrastructure (discussed under the heading “bot networks”) if they operate poorly secured systems. They must therefore be sensitised to the problem and receive suitable training. Strategic objective: All sectors of the population need to have a basic knowledge of ICT security: programmes must be developed and interlinked for specific target groups. The key target groups include employees 22 ICT security in adult education: To enhance the integration and coordination of existing programmes, many of which are excellent. One of the main goals is to reach out to educationally disadvantaged groups. It is recommended to take advantage of resources (rooms, ICT resources) available in schools and local adult education centres. Company premises and public libraries could be used as teaching venues. Standardised training modules, such as ECDL und ECDL Security, should be promoted. Continuous target-group-specific further training programmes: The continuous further training of employees in the ICT sector—and also in other sectors with a strong focus on technology and innovation—requires a variety of measures, e.g. fostering the development of programmes for specific target groups, enhancing self-directed learning skills (“lifelong learning”) as well as taking ICT security issues into consideration as a cross-cutting theme in non-ICTspecific occupations. Networks among adult education organisations have to be enhanced, while further training programmes in the tertiary sector will be increased in cooperation with business and industry (study programmes and courses for working people, specific company-related training programmes, etc.).