availability of the information processed, avoidance of security incidents and consequential damages. Strategic objective: Within the framework of awareness campaigns, accompanying marketing measures ensure the positive positioning of ICT security and the initiatives of the National ICT Security Strategy. In the future the relevant target groups will perceive ICT security as a positive and necessary added value. Objective 3: Harmonised and coordinated approach Hypothesis: There are already some awareness initiatives in Austria. However, the various stakeholders coordinate them only to a limited extent. Various stakeholders have to collaborate in different fields of action in order to implement planned awareness measures within the framework of the National ICT Security Strategy. Strategic objective: The awareness measures planned in the framework of the National ICT Security Strategy are implemented on the basis of an approach developed jointly by the respective stakeholders. This ensures the necessary transparency, optimal use of synergy potential and maximum efficiency of initiatives. Objective 4: Effectiveness and sustainability of awareness-raising measures Hypothesis: Various statistical databases and studies provide sufficient data on the acceptance and use of ICT in Austria. There is, however, only rudimentary information on the present ICT security culture (sensitisation, awareness, knowledge and security-conscious action) as well as security incidents that really occurred (including causes and damage). Strategic objective: To ensure sustainability, Austria will in the future apply a measuring tool to evaluate the effectiveness of awareness measures on a regular basis. Moreover, it will be used to examine the effect of these measures on reducing security incidents. If required, operational measures will be taken to make the necessary readjustments. Measures to achieve strategic objectives The existing concept for achieving the strategic objectives focuses on targeted awareness measures to strengthen ICT security culture in Austria. To advance from sensitisation and awareness building to truly security-conscious action, information and communication should preferably take place when the individual’s attention is high. A multi-tier information and communication concept is therefore required that reaches different target groups in different life situations and uses different media and channels for this purpose. Setting up an ICT security portal: Designed as a web platform, the ICT security portal serves as the central point of contact for all target groups in ICT security issues and as a fundamental basis for information and communication for all awareness measures. The target groups comprise ICT users on the one hand and ICT customers and ICT service providers (trade, development and operations) on the other. Awareness campaigns: Active information and communication is to enhance Austria’s ICT security culture. Taking existing campaigns and initiatives into account, theme and target specific campaigns will be developed, coordinated and implemented together with stakeholders. ICT security is examined from different perspectives, relevant threats are pointed out, possible effects and damages highlighted and appropriate and meaningful security measures recommended. These recommendations have to be appropriate 27