A/74/120 With regard to the second objective, on creating the conditions to enable the various stakeholders to manage the digital security risk in their socioeconomic activities, and build confidence in the use of the digital environment, some progress has been made on developing a draft national digital security agenda. However, it is necessary to continue strengthening the linkages between the discussions of all the various stakeholders, have more academic contributions (research) on the topic and support public entities to adopt the digital security risk-management model. Several awareness-raising campaigns have been carried out, such as the programme “I trust ICT”, and, with the support of the OAS, the Study of the Economic Impact of Cyber Incidents, Threats and Attacks in Colombia for 2017 was produced, and the same study is being conducted for 2018. As challenges, we recognize the need to identify areas related to digital securit y in which research should continue and be strengthened, identify a clear and effective model for coordination and communication that facilitates the establishment of the necessary legal framework on digital security that will support the digital transformation of the various stakeholders, efficiently communicate the outcome of strategic studies at high levels within the Government to guide decision -making and to reorient the strategy for the development of educational content to be included in the academic curricula used at the different levels in the educational system. With respect to the third objective, enhancing the security of individuals and the State in the digital environment, at the national and transnational levels, with an emphasis on risk management, progress has been made on plans for building the capacity of key actors, reports on cybercrime statistics and strengthening of the risk management capacity of those responsible for cybersecurity in the country. The challenge is the urgent need to implement the plans to strengthen operational, administrative, human and scientific capacity, as well as the physical and technological infrastructure of the bodies and entities responsible for cybersecurity, and to establish guidelines for adjusting the existing legal and regulatory framewo rk to match needs relating to: (a) analysis, anticipation, prevention, detection, response to and investigation of cyberoffences, cybercrime and phenomena, in the digital environment, and offences and crimes involving th e use of the digital environment; (b) prosecution and criminalizat ion of new forms of crime, including cyberoffences that facilitate money-laundering, and (c) modernization of the agencies for security, national defence and intelligence in the digital environment, in accordance with the basic principles of the national digital security policy. With regard to the fourth objective, strengthening national defence and sovereignty in the digital environment, with an emphasis on risk management , progress has been made in the development of plans for enhancing the capacity of key actors, the regular updating of the catalogue of national critical cyberinfrastructure, the creation of some of the content for the critical cyberinfrastructure protection plans, the establishment of a number of sectoral cybersecurity incident response teams to facilitate the appropriate management of digital incidents that affect national critical cyberinfrastructure (such as government, financial sector and electricity sector infrastructure) and the participation of certain stakeholders in simulation and training exercises, at the national and international levels, with a view to developing the skills and abilities of the various stakeholders responsible for the national critical cyberinfrastructure and national defence in the digital environment. The challenges to achieving this objective are the need to reshape, from the highest level, the guidelines for the protection and defence of national critical cyberinfrastructure, taking into account the new situation, and the need to issue a formal protocol for managing and responding to digital security incidents that affect 10/39 19-10580